Nathan Esquenazi 06e1f11070 fix: revert 3 regressions introduced alongside security fixes ... 1. Restore resolve_model_provider() in _handle_chat_sync -- removed multi-provider model routing, breaking cross-provider selection. 2. Restore new URL(path, location.origin) + credentials:include on fetch calls -- reverted reverse-proxy auth fix from v0.16.1. 3. Revert cron import refactor (_cron_module, _real_hermes_home_env) back to original from cron.jobs import pattern. Tests: 201 passed, 23 pre-existing failures, 0 new regressions. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-02 00:05:09 -07:00
..
boot.js	fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth	2026-03-31 15:00:38 +00:00
index.html	fix(security): 5 security hardening fixes	2026-04-02 06:46:40 +00:00
messages.js	fix: add withCredentials to EventSource for reverse proxy auth	2026-04-01 22:53:50 -07:00
panels.js	Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish	2026-03-31 07:02:47 +00:00
sessions.js	Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish	2026-03-31 07:02:47 +00:00
style.css	fix(security): sandbox _serve_static() to prevent path traversal	2026-04-02 06:39:27 +00:00
ui.js	fix: revert 3 regressions introduced alongside security fixes	2026-04-02 00:05:09 -07:00
workspace.js	fix(frontend): use URL origin for fetch/EventSource to support reverse proxy auth	2026-03-31 15:00:38 +00:00