nesquena-hermes 64ca1f8686 harden(#2980): profile-scope continuation lookup + safe-sid + no speculative restore write ...

Gate findings (Codex 2-CORE / Opus SHIP-WITH-FIXES), both fixed:
1. cross-profile leak — _pre_compression_continuation_session_id scanned all profiles' sessions,
   matched only by parent_session_id; now filters children by _profiles_match(child, snapshot)
   + validates returned sid with is_safe_session_id. +cross-profile regression test.
2. restore-state poison — frontend wrote continuationSid to localStorage/URL BEFORE the inner
   loadSession proved it loadable; removed the speculative write (success path at the loaded id
   handles it). Updated the source-grep test to assert the safe form.
Bounded BFS (range(20)+seen) + recursion guard confirmed safe by both gates.

2026-06-21 08:17:32 +00:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_health.py

Release v0.51.260 — Release IB (stage-r8) (#3614)

2026-06-04 15:21:41 -07:00

agent_sessions.py

fix(#4385): keep archived cron sessions hidden after list refresh

2026-06-18 00:28:02 +00:00

auth.py

harden(#4023): apply Opus security findings — verify-side name-pattern gate + require handler when auth enabled

2026-06-12 07:37:48 +00:00

background_process.py

test: cover malformed wakeup edge cases

2026-06-18 19:30:24 +02:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

stage #4524: clarify 409-terminal (id-guarded, loading-cleared) + SSE-notify on expiry (#4504) + v0.51.534 CHANGELOG

2026-06-20 05:36:56 +00:00

commands.py

Merge #4112 (skill bundles in WebUI slash commands, #4087) onto master

2026-06-13 23:13:28 +00:00

compression_anchor.py

fix(sidebar): keep newer continuation visible over older snapshot

2026-05-28 13:38:06 -06:00

config.py

rebase #3581 onto master (v0.51.546) for review+ship-gate — require current password before disabling auth

2026-06-21 02:26:20 +00:00

dashboard_probe.py

fix: preserve IPv6 dashboard link brackets

2026-05-19 21:35:10 -04:00

extensions.py

rebase #4569 onto master (v0.51.547) for ship-gate — extension status diagnostics (#4561 follow-up)

2026-06-21 04:08:44 +00:00

gateway_chat.py

fix(#4550): harden gateway reasoning forwarding follow-up

2026-06-20 18:44:25 +00:00

gateway_watcher.py

Release PF (v0.51.445): scope gateway watcher to active profile (#2848) (#4275)

2026-06-15 15:41:21 -07:00

goals.py

fix(i18n): localize /goal runtime status strings

2026-05-10 15:21:24 +08:00

helpers.py

fix: keep session sidebar visible on slow loads (#4167)

2026-06-16 18:42:01 +00:00

kanban_bridge.py

stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG

2026-06-19 22:09:17 +00:00

metering.py

fix: show TPS in assistant message headers

2026-05-04 21:26:43 +00:00

models.py

rebase #4411 onto master (v0.51.542) for deep-review — Stable Assistant Turn Anchors capstone

2026-06-20 21:48:55 +00:00

oauth.py

Avoid blocking OAuth flow lock during Codex start

2026-06-17 00:20:49 +00:00

onboarding.py

Classify onboarding DNS probe failures consistently

2026-05-15 08:51:30 +08:00

passkeys.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

paths.py

fix(profiles): avoid config import cycle

2026-06-01 05:05:16 +00:00

plugin_providers.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

plugins.py

fix(#2622): plugin card UX — legible Open button, single badge, visible toggle + reject protocol-relative tab.path

2026-06-02 03:58:02 +00:00

profiles.py

harden(#4589): close the SECOND isolation-escape door (runtime-env path)

2026-06-21 05:23:09 +00:00

providers.py

fix(#4365): wrap /api/provider/quota in profile_env_for_active_request

2026-06-19 05:27:42 +00:00

request_diagnostics.py

fix: add request wedge diagnostics

2026-05-08 15:37:08 +00:00

rollback.py

fix(#4410): pre-check workspace leaf type via lstat + close fd on non-regular (Codex gate v2)

2026-06-18 19:22:29 +00:00

route_approvals.py

fix(approval): extract _webui_mirror_token literal into named constant

2026-06-14 17:48:37 +00:00

routes.py

harden(#2980): profile-scope continuation lookup + safe-sid + no speculative restore write

2026-06-21 08:17:32 +00:00

run_journal.py

fix(streaming): tighten tool limit terminal guards

2026-06-12 10:03:31 +08:00

runner_client.py

fix(gateway): correct approval URL and thread session history into runs API (#4479)

2026-06-19 13:16:39 -04:00

runtime_adapter.py

Stage 398: PR #2696 — feat(runtime): add runner-local adapter selection (RuntimeAdapter slice 4c, feature-flagged)

2026-05-21 17:43:54 +00:00

session_discoverability.py

Merge PR #3048

2026-05-28 17:47:33 +00:00

session_events.py

feat(sessions): carry changed session_id in session-list-changed events (#4221) (#4233)

2026-06-15 00:10:01 -07:00

session_lifecycle.py

Release v0.51.256 — Release HX (stage-r4) (#3596)

2026-06-04 12:28:06 -07:00

session_ops.py

Release v0.51.276 — Release IR (stage-p3e — preserve manually-named session titles #3542) (#3682)

2026-06-05 13:34:54 -07:00

session_recovery.py

Release v0.51.329 — Release KS (#3814 O(n) index map + #3815 startup recovery skip) (#3840)

2026-06-08 11:49:26 -07:00

skill_usage.py

fix: remove webui-side writer to avoid conflict with agent

2026-05-27 20:57:32 +08:00

sse_chunked.py

stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG

2026-06-19 22:09:17 +00:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

fix: use Optional[T] for default None parameters in state_sync.py

2026-06-01 17:20:17 +00:00

streaming.py

stage #4492: reconcile stale active-run registry (#4492) [CHANGELOG pending post-4501]

2026-06-19 19:53:04 +00:00

system_health.py

feat: add VPS resource health panel

2026-05-05 17:30:56 +00:00

terminal.py

Release v0.51.304 — Release JT (stage-p2a — un-held terminal reaper + opt-in Docker GPU) (#3757)

2026-06-06 18:04:16 -07:00

todo_state.py

Release v0.51.261 — Release IC (stage-r11) (#3616)

2026-06-04 16:46:20 -07:00

turn_journal.py

Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)

2026-06-07 23:18:51 -07:00

updates.py

stage #4486: untracked-file update collision recovery (#4310) [CHANGELOG pending post-4502]

2026-06-19 20:09:30 +00:00

upload.py

fix(voice): recognize command STT providers in capability probe (#4312)

2026-06-16 17:21:11 +00:00

usage.py

fix: display canonical cache hit percentage

2026-05-19 02:27:12 -06:00

webui_session_db.py

Release v0.51.305 — Release JU (stage-p2b — dormant unified-SessionDB adapter) (#3759)

2026-06-06 18:16:07 -07:00

workspace_git.py

release: v0.51.506 — harden destructive workspace Git paths vs repo-local execution (#3879, #3777)

2026-06-19 02:14:13 +00:00

workspace.py

fix(#4326): reject embedded null byte in remote workspace candidate

2026-06-16 22:19:43 +00:00

worktrees.py

Harden worktree removal safeguards

2026-05-13 09:49:15 +08:00