..
__init__.py
auth.py
security: bandit fixes B310/B324/B110 + QuietHTTPServer ( #354 )
2026-04-13 11:11:56 -07:00
clarify.py
feat: harden clarify dialog flow and refresh recovery
2026-04-15 13:10:50 +08:00
config.py
fix(config): default model empty string — no unavailable OpenAI model for non-OpenAI users — closes #646 (PR #649 )
2026-04-18 06:46:43 +00:00
gateway_watcher.py
fix(sessions): return None instead of 'unknown' for missing gateway session model ( fixes #443 )
2026-04-14 19:06:22 +00:00
helpers.py
fix(csp): allow external https images in img-src — closes #608
2026-04-16 23:34:21 -07:00
models.py
fix(sessions): return None instead of 'unknown' for missing gateway session model ( fixes #443 )
2026-04-14 19:06:22 +00:00
onboarding.py
fix: HERMES_WEBUI_SKIP_ONBOARDING unconditional + guard against config writes + 10 skipped tests fixed — v0.50.65
2026-04-16 10:19:10 -07:00
profiles.py
v0.50.25: mobile scroll, import timestamps, profile security, mic fallback ( #404 )
2026-04-13 22:11:45 -07:00
routes.py
fix: add favicon (SVG + PNG + ICO), fix static MIME types ( #613 )
2026-04-16 20:11:02 -07:00
startup.py
v0.46.0: security, Docker UID/GID, model discovery, i18n, cancel fix
2026-04-11 10:17:52 -07:00
state_sync.py
security: bandit fixes B310/B324/B110 + QuietHTTPServer ( #354 )
2026-04-13 11:11:56 -07:00
streaming.py
fix(streaming): strip Gemma 4 thinking token delimiter in all paths — closes #607
2026-04-18 06:45:39 +00:00
updates.py
fix: improve self-update git pull diagnostics ( #287 )
2026-04-12 00:19:33 -07:00
upload.py
v0.50.25: mobile scroll, import timestamps, profile security, mic fallback ( #404 )
2026-04-13 22:11:45 -07:00
workspace.py
fix: HERMES_WEBUI_DEFAULT_WORKSPACE wins over settings.json; trust DEFAULT_WORKSPACE subtree ( #610 )
2026-04-16 18:09:16 -07:00
ec48c482e2