Commit graph

3284 commits

Author SHA1 Message Date
nesquena-hermes
f7b4c6b0f4 Merge PR #3087
# Conflicts:
#	CHANGELOG.md
2026-05-28 19:38:10 +00:00
nesquena-hermes
d2265aaca3 Merge PR #3084 2026-05-28 19:37:11 +00:00
AJV20
2cb3c9f10b Merge remote-tracking branch 'origin/master' into HEAD
# Conflicts:
#	CHANGELOG.md
#	tests/test_workspace_git.py
2026-05-28 14:50:33 -04:00
nesquena-hermes
20f8c7c02d
Merge pull request #3089 from nesquena/release/stage-batch37
stage-batch37: v0.51.155 / Release EA — 3-PR very low-risk cleanup
2026-05-28 11:47:06 -07:00
nesquena-hermes
2893f87e19 stage-batch37: stamp v0.51.155 / Release EA
3-PR very low-risk cleanup:
- #3039 api(): timeoutToast:false opt-in for passive pollers
- #3085 _merged_session_messages_for_display: preserve sidecar order when longer
- #3086 subsecond timestamps for gateway turns + compaction batches
2026-05-28 18:28:04 +00:00
nesquena-hermes
ad9b38c945 Merge PR #3086
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes
88bdc99a49 Merge PR #3085
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes
2f73eb0f8d Merge PR #3039
# Conflicts:
#	CHANGELOG.md
2026-05-28 18:27:03 +00:00
nesquena-hermes
6267716ba4
Merge pull request #3088 from nesquena/release/stage-batch36
stage-batch36: v0.51.154 / Release DZ — 9-PR medium-risk cleanup
2026-05-28 11:24:31 -07:00
nesquena-hermes
0a2dabc730 stage-batch36: tighten #3064 MEDIA: token gate to non-user-role messages
Per Opus advisor on stage-batch36: skip role='user' messages in
_session_media_token_allows_image_path so a user-injected MEDIA: token
cannot mint an allow-list entry for the user's own request. Preserves
the original use case (assistant/tool emitted artifacts outside the
active workspace) while making the implicit threat model explicit.

Defense-in-depth — the single-user WebUI scope means same-origin user
input already had the same effective access, but multi-user / shared
WebUI deployments would benefit from the restriction.
2026-05-28 18:20:25 +00:00
george-andraws
0f6eab301c Fix browser chat provider fallback on fresh sessions 2026-05-28 11:10:14 -07:00
nesquena-hermes
371f77c9b9 stage-batch36: stamp v0.51.154 / Release DZ
9-PR medium-risk cleanup:
- #3037 routes.py: argv-style prefill hook + env-var override for notes drawer
- #3046 models.py: compression parent not repaired as stale interrupted turn
- #3048 session_discoverability.py: --repair-safe CLI with default dry-run
- #3053 ui.js: streaming KaTeX guard for parser-owned equations
- #3059 models.py: empty partial activity rows excluded from sidebar recency
- #3060 profiles.py: API key writes to .env (chmod 600), not config.yaml
- #3064 routes.py: MEDIA: image tokens allow exact session-referenced paths
- #3069 models.py: cron sessions with project_id surface via Cron Jobs chip
- #3077 gateway_chat.py: HTTP 401 maps to gateway_auth_error event
2026-05-28 18:04:24 +00:00
ai-ag2026
07aed6b7ff fix(session): preserve subsecond message timestamp order 2026-05-28 19:58:18 +02:00
ai-ag2026
1cd58f6f5a fix(session): preserve sidecar order in display merges 2026-05-28 19:58:17 +02:00
AJV20
cf6e3111c4 Merge remote-tracking branch 'origin/master' into fix/webui-bugfix-sweep
# Conflicts:
#	CHANGELOG.md
2026-05-28 13:56:00 -04:00
nesquena-hermes
a3fc305aeb Merge PR #3077
# Conflicts:
#	CHANGELOG.md
#	tests/test_webui_gateway_chat_backend.py
2026-05-28 17:47:56 +00:00
nesquena-hermes
1c89c7d327 Merge PR #3064
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:35 +00:00
nesquena-hermes
4412aea9e8 Merge PR #3059
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes
921b94a287 Merge PR #3046
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes
c642c1e438 Merge PR #3069
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes
83f8080103 Merge PR #3053
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:34 +00:00
nesquena-hermes
11ea6c3023 Merge PR #3060 2026-05-28 17:47:33 +00:00
nesquena-hermes
007ba46c3f Merge PR #3048
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:33 +00:00
nesquena-hermes
dc5b4b1697 Merge PR #3037
# Conflicts:
#	CHANGELOG.md
2026-05-28 17:47:33 +00:00
nesquena-hermes
b103f4ad68
Merge pull request #3081 from nesquena/release/stage-batch35
stage-batch35: v0.51.153 / Release DY — 11-PR low-risk cleanup
2026-05-28 10:46:25 -07:00
AJV20
60d4b2d990 fix: harden WebUI bugfix sweep 2026-05-28 13:38:50 -04:00
nesquena-hermes
95aa69f951 stage-batch35: stamp v0.51.153 / Release DY
11-PR low-risk cleanup:
- #3043 openai-codex models.dev reasoning passes xhigh
- #3044 reset _messagesTruncated on new session
- #3047 discoverability: api lineage representative for stale CLI flag
- #3049 title-language detection threshold + English false-positive fix
- #3051 docker docs: sudo compose + Linux host-gateway
- #3054 SSE reconnect: visible-but-unfocused current pane
- #3055 fallback title: drop German-only Session Bilder case
- #3056 title prompt: language-neutral instruction
- #3070 /api/upload reports actual stored filename
- #3071 clarify SSE fallback preserves owner session id
- #3072 gateway-chat forwards image attachments as image_url parts
2026-05-28 16:13:58 +00:00
nesquena-hermes
34d7585bb7 Merge PR #3051
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:17 +00:00
nesquena-hermes
4058c741b6 Merge PR #3072
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00
nesquena-hermes
2107160bf7 Merge PR #3054
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00
nesquena-hermes
50a0d254a3 Merge PR #3047
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00
nesquena-hermes
167ed85e8e Merge PR #3070
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:16 +00:00
nesquena-hermes
2443db60b6 Merge PR #3071
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:11:15 +00:00
nesquena-hermes
d446a6c304 Merge PR #3049
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:10:49 +00:00
nesquena-hermes
0fd12b2365 Merge PR #3056
# Conflicts:
#	CHANGELOG.md
2026-05-28 16:10:12 +00:00
nesquena-hermes
0147f05c0d Merge PR #3055 2026-05-28 16:09:47 +00:00
nesquena-hermes
b77398abbf Merge PR #3043 2026-05-28 16:09:45 +00:00
nesquena-hermes
fa34c7220d Merge PR #3044 2026-05-28 16:09:44 +00:00
AJV20
923b719ed1 fix: surface gateway auth errors in browser 2026-05-28 11:12:58 -04:00
AJV20
790fc70e87 test: keep bare git fixtures on master 2026-05-28 10:37:38 -04:00
AJV20
8e6ed66815 fix: clarify gateway chat auth errors 2026-05-28 09:59:35 -04:00
AJV20
04e0f905dd test: force master in git workspace fixtures 2026-05-28 09:50:07 -04:00
AJV20
cbd3704a7f fix: preserve literal prefill script paths 2026-05-28 09:31:07 -04:00
AJV20
e4ef50a0da test: cover provider-neutral notes sources 2026-05-28 09:26:09 -04:00
ai-ag2026
3469a2f898 fix: avoid interruption marker for completed journal runs 2026-05-28 15:19:09 +02:00
AJV20
3f22902423 fix: forward gateway image attachments 2026-05-28 08:40:51 -04:00
AJV20
0f26b99a11 fix: preserve clarify fallback ownership 2026-05-28 08:35:26 -04:00
AJV20
0458a0a065 fix: report stored upload filenames 2026-05-28 08:33:50 -04:00
AJV20
9e69db9920 fix: show cron sessions in project filter 2026-05-28 08:10:15 -04:00
AJV20
1b5e6f6fae fix: mirror WebUI prefill env for AI-recent notes 2026-05-28 07:19:31 -04:00