wiki: OneCLI 400 fix + Hermes gateway proxy integration

log.md

@@ -31,6 +31,17 @@
 - Updated dev-agent-soul.md with exact `claude --print` invocation
 - Verified Claude Code v2.1.176 works on this system
 
-## [2026-06-12] session | Fin de journée — bonne nuit
-- 3 SOUL.md templates créés : dev-agent, caretaker, ecologist
-- Wiki mis à jour et synchronisé
+## [2026-06-16] setup | OneCLI Gateway + Bitwarden vault pairing
+- Created onecli-gateway systemd service (Rust binary, port 10255)
+- Exposed gateway at gateway.onecli.anhydr.fr via Traefik
+- Rebuilt web app with GATEWAY_API_DOMAIN=gateway.onecli.anhydr.fr
+- Bitwarden vault pairing now works from the web UI
+
+## [2026-06-16] bugfix | OneCLI web UI 400 + CLI auth + Hermes gateway proxy integration
+- Fixed 400 error in web UI: restricted Next.js rewrite to gateway-only routes, letting Hono API handle agents/secrets
+- Fixed `onecli` CLI: pointed to localhost:10254, auth and agents commands work
+- Hermes services (gateway, dashboard, control) now route through OneCLI gateway 24/7 via HTTPS_PROXY env vars
+- Installed gateway CA cert to system trust store for MITM HTTPS
+- Control Interface: added platforms.api_server = 8642, fixed "Connection error" after login
+- Dashboard: added --skip-build, fixed "Web UI not built" error
+- Backup saved to /home/hermes/hermes-bkp/