nesquena-hermes bc6949219d Release v0.51.317 — Release KG (Phase 3 light: align CSP enforcement with report policy, #3727) (#3786) ...

Phase-3-LOW backend security fix. #3727 (@rodboev, #1909): enforced CSP now honors the same connect-src as report-only (built from one shared template). Full suite 8205 passed, Codex SAFE (live-verified headers), Opus SHIP. Co-authored-by: rodboev <rodboev@users.noreply.github.com>

2026-06-07 10:52:07 -07:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_health.py

Release v0.51.260 — Release IB (stage-r8) (#3614)

2026-06-04 15:21:41 -07:00

agent_sessions.py

Release v0.51.306 — Release JV (stage-a2 — branchy compression lineage freshest-tip) (#3761)

2026-06-06 19:10:04 -07:00

auth.py

Release v0.51.260 — Release IB (stage-r8) (#3614)

2026-06-04 15:21:41 -07:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

feat: add distinct attention request sound

2026-05-30 19:40:40 +00:00

commands.py

Release v0.51.263 — Release IE (stage-r13) (#3625)

2026-06-04 23:56:44 -07:00

compression_anchor.py

fix(sidebar): keep newer continuation visible over older snapshot

2026-05-28 13:38:06 -06:00

config.py

Release v0.51.305 — Release JU (stage-p2b — dormant unified-SessionDB adapter) (#3759)

2026-06-06 18:16:07 -07:00

dashboard_probe.py

fix: preserve IPv6 dashboard link brackets

2026-05-19 21:35:10 -04:00

extensions.py

Opus pre-release follow-ups for PR #1445

2026-05-02 03:49:40 +00:00

gateway_chat.py

[HELD — independent review pending] Release v0.51.294 — stage-3401 (live-to-final redesign #3401 + 4 deep-review fixes) (#3741)

2026-06-06 12:12:37 -07:00

gateway_watcher.py

Release v0.51.256 — Release HX (stage-r4) (#3596)

2026-06-04 12:28:06 -07:00

goals.py

fix(i18n): localize /goal runtime status strings

2026-05-10 15:21:24 +08:00

helpers.py

Release v0.51.317 — Release KG (Phase 3 light: align CSP enforcement with report policy, #3727) (#3786)

2026-06-07 10:52:07 -07:00

kanban_bridge.py

perf(http): enable HTTP/1.1 keep-alive

2026-05-24 18:26:56 +00:00

metering.py

fix: show TPS in assistant message headers

2026-05-04 21:26:43 +00:00

models.py

Release v0.51.311 — Release KA (brick-wave: workspace Git RCE hardening #3769 + stale-snapshot sidebar visibility #3770) (#3776)

2026-06-07 08:05:30 -07:00

oauth.py

fix(oauth): serialize Anthropic env fallback reads

2026-05-07 02:47:19 +00:00

onboarding.py

Classify onboarding DNS probe failures consistently

2026-05-15 08:51:30 +08:00

passkeys.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

paths.py

fix(profiles): avoid config import cycle

2026-06-01 05:05:16 +00:00

plugin_providers.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

plugins.py

fix(#2622): plugin card UX — legible Open button, single badge, visible toggle + reject protocol-relative tab.path

2026-06-02 03:58:02 +00:00

profiles.py

Release v0.51.313 — Release KC (instant profile switcher — skip per-profile alias scan) (#3779)

2026-06-07 09:27:32 -07:00

providers.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

request_diagnostics.py

fix: add request wedge diagnostics

2026-05-08 15:37:08 +00:00

rollback.py

v0.50.255: Opus follow-ups (4 fixes) + CHANGELOG

2026-05-01 17:19:53 +00:00

route_approvals.py

Release v0.51.275 — Release IQ (stage-p3d — approval SSE state extraction #3575) (#3681)

2026-06-05 13:10:45 -07:00

routes.py

Release v0.51.311 — Release KA (brick-wave: workspace Git RCE hardening #3769 + stale-snapshot sidebar visibility #3770) (#3776)

2026-06-07 08:05:30 -07:00

run_journal.py

[HELD — independent review pending] Release v0.51.294 — stage-3401 (live-to-final redesign #3401 + 4 deep-review fixes) (#3741)

2026-06-06 12:12:37 -07:00

runner_client.py

harden: runner client rejects non-http(s) base_url + no redirect-follow (#3073)

2026-05-31 17:49:26 +00:00

runtime_adapter.py

Stage 398: PR #2696 — feat(runtime): add runner-local adapter selection (RuntimeAdapter slice 4c, feature-flagged)

2026-05-21 17:43:54 +00:00

session_discoverability.py

Merge PR #3048

2026-05-28 17:47:33 +00:00

session_events.py

Release v0.51.266 — Release IH (stage-r16) (#3641)

2026-06-05 00:44:03 -07:00

session_lifecycle.py

Release v0.51.256 — Release HX (stage-r4) (#3596)

2026-06-04 12:28:06 -07:00

session_ops.py

Release v0.51.276 — Release IR (stage-p3e — preserve manually-named session titles #3542) (#3682)

2026-06-05 13:34:54 -07:00

session_recovery.py

fix(session): rebuild missing startup index

2026-05-20 23:43:30 +08:00

skill_usage.py

fix: remove webui-side writer to avoid conflict with agent

2026-05-27 20:57:32 +08:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

fix: use Optional[T] for default None parameters in state_sync.py

2026-06-01 17:20:17 +00:00

streaming.py

fix(#3717): context-length indicator honors provider per-model overrides (#3726) (#3752)

2026-06-06 15:57:09 -07:00

system_health.py

feat: add VPS resource health panel

2026-05-05 17:30:56 +00:00

terminal.py

Release v0.51.304 — Release JT (stage-p2a — un-held terminal reaper + opt-in Docker GPU) (#3757)

2026-06-06 18:04:16 -07:00

todo_state.py

Release v0.51.261 — Release IC (stage-r11) (#3616)

2026-06-04 16:46:20 -07:00

turn_journal.py

Release v0.51.255 — Release HW (stage-r3) (#3594)

2026-06-04 11:24:25 -07:00

updates.py

Release v0.51.312 — Release KB (brick-wave: purge stale __pycache__ after self-update, fixes #3774) (#3778)

2026-06-07 08:26:36 -07:00

upload.py

Release v0.51.274 — Release IP (stage-p3c — symlink-swap TOCTOU hardening #3630) (#3680)

2026-06-05 12:58:11 -07:00

usage.py

fix: display canonical cache hit percentage

2026-05-19 02:27:12 -06:00

webui_session_db.py

Release v0.51.305 — Release JU (stage-p2b — dormant unified-SessionDB adapter) (#3759)

2026-06-06 18:16:07 -07:00

workspace_git.py

Release v0.51.311 — Release KA (brick-wave: workspace Git RCE hardening #3769 + stale-snapshot sidebar visibility #3770) (#3776)

2026-06-07 08:05:30 -07:00

workspace.py

Release v0.51.296 — stage-3731 (remote-workspace blocked-root security fix #3731) (#3744)

2026-06-06 13:49:59 -07:00

worktrees.py

Harden worktree removal safeguards

2026-05-13 09:49:15 +08:00