tandrodboev 3ac19a5518 fix(#4812): capture idle SSE fingerprint baseline BEFORE first attach (TOCTOU) ...

Final-gate Codex caught a TOCTOU race in the prior idle-seam fix: the fingerprint
baseline was captured AFTER the first attach_active_stream() lookup, so a run
completing DURING that first attach folded into the baseline and was silently
missed (only : keepalive emitted, no snapshot). Move the baseline capture before
the first attach so any completion from that point on is detected. Add an ordering
regression test (baseline fp precedes the idle-loop attach + advance still emits
one snapshot). 23/23 SSE tests green.

Co-authored-by: rodboev <rodboev@users.noreply.github.com>

2026-07-10 20:24:47 +00:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_health.py

Single-flight remote gateway health probe to stop cold-cache stampede

2026-07-09 03:54:10 +00:00

agent_sessions.py

Release: classify external_agent imports as CLI to match client render (#5846, #5831) (#5855)

2026-07-09 14:20:20 -07:00

auth_oidc.py

fix(#3825): harden oidc endpoint and claim validation

2026-06-30 20:59:19 -04:00

auth.py

fix(#5578): stop login next= param from nesting into itself and exploding the URL

2026-07-05 00:12:19 +00:00

background_process.py

Merge remote-tracking branch 'origin/master' into paperclip/pr-5732

2026-07-09 09:43:54 +08:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

stage #4524: clarify 409-terminal (id-guarded, loading-cleared) + SSE-notify on expiry (#4504) + v0.51.534 CHANGELOG

2026-06-20 05:36:56 +00:00

commands.py

fix(webui): guard non-dict resolve_moa_preset result in resolve_moa_config

2026-07-01 07:54:48 -05:00

compression_anchor.py

Address compaction marker and redaction review

2026-06-26 00:12:09 +00:00

compression_recovery.py

Live Stream: add compression recovery action

2026-07-04 21:42:32 +08:00

config.py

Merge remote-tracking branch 'origin/master' into paperclip/pr-5732

2026-07-11 02:07:37 +08:00

crash_visibility.py

fix(webui): crash visibility — faulthandler + thread excepthook + exit audit (#4633)

2026-07-01 18:01:39 +00:00

dashboard_probe.py

fix: preserve IPv6 dashboard link brackets

2026-05-19 21:35:10 -04:00

extensions.py

fix: prefer IPv4 for extension gallery downloads to prevent timeout on broken IPv6

2026-07-03 20:26:18 +00:00

gateway_chat.py

Preserve latest session on wakeup pause clear

2026-07-10 13:20:40 +08:00

gateway_restart.py

fix(health): preserve restart failure contract and proofs (#5156)

2026-06-29 03:44:06 +00:00

gateway_watcher.py

fix(sessions): open state.db read-only for lineage reads + watcher projection

2026-07-08 20:17:45 +00:00

goals.py

fix(i18n): localize /goal runtime status strings

2026-05-10 15:21:24 +08:00

helpers.py

fix(redaction): memoize deterministic API response redactor

2026-06-29 18:22:18 +00:00

kanban_bridge.py

rebase(#2814): resolve i18n onto current master + add kanban_view_* keys to all 13 locales

2026-06-23 23:40:45 +00:00

metering.py

fix: show TPS in assistant message headers

2026-05-04 21:26:43 +00:00

models.py

Merge remote-tracking branch 'origin/master' into paperclip/pr-5732

2026-07-10 10:15:21 +08:00

oauth.py

Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)

2026-07-09 10:54:06 -07:00

office_documents.py

#5142: office-doc preview + safe docx editing (#540), rebased on master; optional deps

2026-07-02 01:15:57 +00:00

onboarding.py

feat(#3260): self-hosted provider setup (Ollama/LM Studio) in Settings (i18n complete)

2026-07-02 08:17:44 +00:00

passkeys.py

Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)

2026-07-09 10:54:06 -07:00

paths.py

fix(profiles): avoid config import cycle

2026-06-01 05:05:16 +00:00

plugin_providers.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

plugins.py

fix(#2622): plugin card UX — legible Open button, single badge, visible toggle + reject protocol-relative tab.path

2026-06-02 03:58:02 +00:00

profiles.py

fix(#5696): revert profiles cache TTL 60s->4s (stale profile rows); contributor-flagged follow-up

2026-07-06 20:40:08 +00:00

providers.py

Require fingerprint evidence for wakeup credential recovery

2026-07-10 12:23:02 +08:00

request_diagnostics.py

perf(webui/session-load-latency) tier4: fix CI failures — lint B009/B905 + _emit_slow format args

2026-07-09 04:22:21 +00:00

rollback.py

fix(#4410): pre-check workspace leaf type via lstat + close fd on non-regular (Codex gate v2)

2026-06-18 19:22:29 +00:00

route_approvals.py

fix(#5000): relay mirrored gateway approvals after stream loss

2026-06-27 06:03:24 +00:00

route_session_list_cache.py

feat: add Webhooks sidebar filter parity

2026-06-30 17:06:31 +00:00

routes.py

fix(#4812): capture idle SSE fingerprint baseline BEFORE first attach (TOCTOU)

2026-07-10 20:24:47 +00:00

run_journal.py

fix(#4812): re-sync idle no-cursor SSE subscriber on run completing during keepalive wait

2026-07-10 20:15:49 +00:00

runner_client.py

fix(gateway): correct approval URL and thread session history into runs API (#4479)

2026-06-19 13:16:39 -04:00

runtime_adapter.py

Stage 398: PR #2696 — feat(runtime): add runner-local adapter selection (RuntimeAdapter slice 4c, feature-flagged)

2026-05-21 17:43:54 +00:00

session_discoverability.py

Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)

2026-07-09 10:54:06 -07:00

session_events.py

feat(sessions): carry changed session_id in session-list-changed events (#4221) (#4233)

2026-06-15 00:10:01 -07:00

session_export_html.py

#4968: export chat to self-contained themed HTML, rebased on master

2026-07-02 02:36:09 +00:00

session_lifecycle.py

fix(#5543): fire-and-forget commit_session_memory + drain-safe managed stop

2026-07-04 21:40:21 +00:00

session_ops.py

fix(#5563): align forked context to display for large (compacted) sessions

2026-07-04 20:55:06 +00:00

session_recovery.py

Merge latest master into compression recovery action

2026-07-05 10:23:15 +08:00

skill_usage.py

fix: remove webui-side writer to avoid conflict with agent

2026-05-27 20:57:32 +08:00

sse_chunked.py

stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG

2026-06-19 22:09:17 +00:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

fix(state-sync): mirror WebUI API call counts

2026-07-07 19:48:19 +00:00

streaming.py

fix(#3929 ux): gate wakeup-pause disclosure on actual pause + cover both error paths

2026-07-10 19:28:06 +00:00

system_health.py

fix: keep psutil optional for system health

2026-06-26 20:49:13 +00:00

terminal.py

Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)

2026-07-09 10:54:06 -07:00

todo_state.py

Release v0.51.261 — Release IC (stage-r11) (#3616)

2026-06-04 16:46:20 -07:00

turn_journal.py

Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)

2026-06-07 23:18:51 -07:00

updates.py

Release: fix Experimental channel version display on stable-tagged installs (#5864, #5862) (#5868)

2026-07-09 20:18:03 -07:00

upload.py

Release: write Office upload sidecars (#5734, #540) (#5859)

2026-07-09 15:57:21 -07:00

usage.py

fix: display canonical cache hit percentage

2026-05-19 02:27:12 -06:00

webui_session_db.py

fix: preserve compression recovery child markers in sidecar rebuild

2026-07-05 06:45:50 +08:00

workspace_git.py

fix(workspace-git): hide git subprocess console windows on Windows (#5692)

2026-07-07 02:07:39 +00:00

workspace.py

#5142: office-doc preview + safe docx editing (#540), rebased on master; optional deps

2026-07-02 01:15:57 +00:00

worktrees.py

Release Batch A: worktree cli-shadow + atomic settings.json + state.db read-only (#5832, #5829, #5833) (#5837)

2026-07-09 09:04:59 -07:00