set_session_provider_cookie (dashboard_auth/cookies.py)

Cookie helpers for dashboard auth. Three cookies in play: - hermes_session_at: the OAuth access token (HttpOnly, lifetime = token TTL, ~15 min) - hermes_session_rt: the OAuth refresh token (HttpOnly, lifetime = 24h, ROTATING + reuse-detected) Nous Portal issues a rotating refresh

# Source: https://github.com/affaan-m/hermes-agent | License: MIT | Copyright 2025 Nous Research
# Provided via justclaw.it.com; keep this notice with the code.
"""Cookie helpers for dashboard auth.

Three cookies in play:
  - hermes_session_at:   the OAuth access token
                         (HttpOnly, lifetime = token TTL, ~15 min)
  - hermes_session_rt:   the OAuth refresh token
                         (HttpOnly, lifetime = 24h, ROTATING + reuse-detected)
                         Nous Portal issues a rotating refresh token for the
                         dashboard auth-code grant (Portal NAS #293 / hermes
                         #37247). ``set_session_cookies`` writes this cookie
                         whenever the provider returns a non-empty
                         ``refresh_t

... (truncated -- full source via MCP)