Nathan Esquenazi e0a95193d8 fix: CSRF check supports reverse proxy headers (#218) (#219) ... Tests pass: 20/21 QA suite (1 known skip), all browser API sanity checks green, CSRF fix verified end-to-end.		2026-04-10 01:24:18 -07:00
..
__init__.py	Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish	2026-03-31 07:02:47 +00:00
auth.py	fix(auth): prune expired sessions on every verify to prevent memory leak (#196)	2026-04-09 18:05:23 -07:00
config.py	fix: do not build phantom Custom group when active provider is set (#206)	2026-04-09 18:33:24 -07:00
helpers.py	fix(security): add unsafe-inline and CDN allowlist to CSP script-src (#209)	2026-04-09 19:07:51 -07:00
models.py	fix: broaden session ID validator to support new hermes-agent format (#212)	2026-04-10 00:00:02 -07:00
profiles.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
routes.py	fix: CSRF check supports reverse proxy headers (#218) (#219)	2026-04-10 01:24:18 -07:00
startup.py	feat: auto-install missing agent deps on startup (#215)	2026-04-10 00:42:02 -07:00
state_sync.py	fix: sync message_count to state.db for /insights (#163) (#164)	2026-04-06 22:56:27 -07:00
streaming.py	fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)	2026-04-08 20:16:22 -07:00
updates.py	fix: use current branch upstream for update checks instead of default branch (#201)	2026-04-09 18:10:11 -07:00
upload.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
workspace.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00