HERMES-GIELIE/api
nesquena-hermes cb7efedc38 harden(#4589): protect HERMES_WEBUI_ISOLATED_PROFILE from profile-.env override
Codex gate (CORE, reproduced): _reload_dotenv() copies a profile's .env into os.environ, so a
contained user could set HERMES_WEBUI_ISOLATED_PROFILE=0 in their own profile .env and silently
escape isolation. Fix: _PROTECTED_ENV_KEYS — _reload_dotenv refuses to override operator/deployment
keys from a profile .env (logs a warning). + regression test proving .env can't disable isolation.
2026-06-21 05:17:20 +00:00
..
__init__.py
agent_health.py
agent_sessions.py fix(#4385): keep archived cron sessions hidden after list refresh 2026-06-18 00:28:02 +00:00
auth.py harden(#4023): apply Opus security findings — verify-side name-pattern gate + require handler when auth enabled 2026-06-12 07:37:48 +00:00
background.py
background_process.py test: cover malformed wakeup edge cases 2026-06-18 19:30:24 +02:00
clarify.py stage #4524: clarify 409-terminal (id-guarded, loading-cleared) + SSE-notify on expiry (#4504) + v0.51.534 CHANGELOG 2026-06-20 05:36:56 +00:00
commands.py Merge #4112 (skill bundles in WebUI slash commands, #4087) onto master 2026-06-13 23:13:28 +00:00
compression_anchor.py
config.py rebase #3581 onto master (v0.51.546) for review+ship-gate — require current password before disabling auth 2026-06-21 02:26:20 +00:00
dashboard_probe.py
extensions.py rebase #4569 onto master (v0.51.547) for ship-gate — extension status diagnostics (#4561 follow-up) 2026-06-21 04:08:44 +00:00
gateway_chat.py fix(#4550): harden gateway reasoning forwarding follow-up 2026-06-20 18:44:25 +00:00
gateway_watcher.py Release PF (v0.51.445): scope gateway watcher to active profile (#2848) (#4275) 2026-06-15 15:41:21 -07:00
goals.py
helpers.py fix: keep session sidebar visible on slow loads (#4167) 2026-06-16 18:42:01 +00:00
kanban_bridge.py stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG 2026-06-19 22:09:17 +00:00
metering.py
models.py rebase #4411 onto master (v0.51.542) for deep-review — Stable Assistant Turn Anchors capstone 2026-06-20 21:48:55 +00:00
oauth.py Avoid blocking OAuth flow lock during Codex start 2026-06-17 00:20:49 +00:00
onboarding.py
passkeys.py
paths.py
plugin_providers.py
plugins.py
profiles.py harden(#4589): protect HERMES_WEBUI_ISOLATED_PROFILE from profile-.env override 2026-06-21 05:17:20 +00:00
providers.py fix(#4365): wrap /api/provider/quota in profile_env_for_active_request 2026-06-19 05:27:42 +00:00
request_diagnostics.py
rollback.py fix(#4410): pre-check workspace leaf type via lstat + close fd on non-regular (Codex gate v2) 2026-06-18 19:22:29 +00:00
route_approvals.py fix(approval): extract _webui_mirror_token literal into named constant 2026-06-14 17:48:37 +00:00
routes.py rebase #4569 onto master (v0.51.547) for ship-gate — extension status diagnostics (#4561 follow-up) 2026-06-21 04:08:44 +00:00
run_journal.py fix(streaming): tighten tool limit terminal guards 2026-06-12 10:03:31 +08:00
runner_client.py fix(gateway): correct approval URL and thread session history into runs API (#4479) 2026-06-19 13:16:39 -04:00
runtime_adapter.py
session_discoverability.py
session_events.py feat(sessions): carry changed session_id in session-list-changed events (#4221) (#4233) 2026-06-15 00:10:01 -07:00
session_lifecycle.py
session_ops.py
session_recovery.py
skill_usage.py
sse_chunked.py stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG 2026-06-19 22:09:17 +00:00
startup.py
state_sync.py
streaming.py stage #4492: reconcile stale active-run registry (#4492) [CHANGELOG pending post-4501] 2026-06-19 19:53:04 +00:00
system_health.py
terminal.py
todo_state.py
turn_journal.py
updates.py stage #4486: untracked-file update collision recovery (#4310) [CHANGELOG pending post-4502] 2026-06-19 20:09:30 +00:00
upload.py fix(voice): recognize command STT providers in capability probe (#4312) 2026-06-16 17:21:11 +00:00
usage.py
webui_session_db.py
workspace.py fix(#4326): reject embedded null byte in remote workspace candidate 2026-06-16 22:19:43 +00:00
workspace_git.py release: v0.51.506 — harden destructive workspace Git paths vs repo-local execution (#3879, #3777) 2026-06-19 02:14:13 +00:00
worktrees.py