nesquena-hermes ffbc91343a fix(#6056): redact display_title/_state_db_title/parent_title on the sidebar API ... Codex gate found the #6056 derived display_title (from raw user-message content) bypassed sidebar redaction — the serializer redacted only 'title', so a credential in a delegated goal leaked to the sidebar even with api_redact_enabled=True. Redact display_title + _state_db_title + parent_title on the same path; +regression test (proven to fail on the unfixed serializer).		2026-07-15 20:57:31 +00:00
..
__init__.py
agent_health.py	fix: fail closed on wrapped gateway pid helpers	2026-07-14 16:36:23 +08:00
agent_sessions.py	Release exp-v0.52.40: ACP sessions in sidebar (#5939) + date-stamped Claude 3.0 reasoning fix (#5934) (#5951)	2026-07-11 15:20:41 -07:00
auth.py	Release exp-v0.52.43: trusted-header auth / reverse-proxy SSO (#5568, #3351) (#5956)	2026-07-11 16:34:14 -07:00
auth_oidc.py	fix(#3825): harden oidc endpoint and claim validation	2026-06-30 20:59:19 -04:00
background.py
background_process.py	Merge remote-tracking branch 'origin/master' into paperclip/pr-5732	2026-07-09 09:43:54 +08:00
clarify.py	stage #4524: clarify 409-terminal (id-guarded, loading-cleared) + SSE-notify on expiry (#4504) + v0.51.534 CHANGELOG	2026-06-20 05:36:56 +00:00
commands.py	fix(webui): guard non-dict resolve_moa_preset result in resolve_moa_config	2026-07-01 07:54:48 -05:00
compression_anchor.py	Address compaction marker and redaction review	2026-06-26 00:12:09 +00:00
compression_recovery.py	Live Stream: add compression recovery action	2026-07-04 21:42:32 +08:00
config.py	feat(#5979): persisted explicit-pick provenance for cold custom-proxy resolution	2026-07-13 01:43:17 +00:00
crash_visibility.py	fix(webui): crash visibility — faulthandler + thread excepthook + exit audit (#4633)	2026-07-01 18:01:39 +00:00
dashboard_probe.py
extensions.py	fix: prefer IPv4 for extension gallery downloads to prevent timeout on broken IPv6	2026-07-03 20:26:18 +00:00
gateway_chat.py	fix(#5940): drop unused gateway error adapter	2026-07-13 03:41:39 +00:00
gateway_restart.py	fix: harden gateway restart recovery targeting	2026-07-14 16:01:56 +08:00
gateway_watcher.py	fix(sessions): open state.db read-only for lineage reads + watcher projection	2026-07-08 20:17:45 +00:00
goals.py
helpers.py	Release exp-v0.52.43: trusted-header auth / reverse-proxy SSO (#5568, #3351) (#5956)	2026-07-11 16:34:14 -07:00
kanban_bridge.py	rebase(#2814): resolve i18n onto current master + add kanban_view_* keys to all 13 locales	2026-06-23 23:40:45 +00:00
metering.py	feat(#6006): instrument send-to-first-token latency	2026-07-13 17:56:44 -04:00
models.py	Merge commit 'refs/pull/6056/head' of github.com:nesquena/hermes-webui into stage/6056-delegtitles	2026-07-15 20:46:34 +00:00
oauth.py	Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)	2026-07-09 10:54:06 -07:00
office_documents.py	#5142: office-doc preview + safe docx editing (#540), rebased on master; optional deps	2026-07-02 01:15:57 +00:00
onboarding.py	Release exp-v0.52.42: ?profile= deep links (#5730) + Russian locale refresh (#5778) (#5953)	2026-07-11 15:58:47 -07:00
passkeys.py	Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)	2026-07-09 10:54:06 -07:00
paths.py	fix(profiles): avoid config import cycle	2026-06-01 05:05:16 +00:00
plugin_providers.py	Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)	2026-06-05 11:35:26 -07:00
plugins.py	fix(#2622): plugin card UX — legible Open button, single badge, visible toggle + reject protocol-relative tab.path	2026-06-02 03:58:02 +00:00
profiles.py	fix(#5696): revert profiles cache TTL 60s->4s (stale profile rows); contributor-flagged follow-up	2026-07-06 20:40:08 +00:00
providers.py	Require fingerprint evidence for wakeup credential recovery	2026-07-10 12:23:02 +08:00
request_diagnostics.py	perf(webui/session-load-latency) tier4: fix CI failures — lint B009/B905 + _emit_slow format args	2026-07-09 04:22:21 +00:00
rollback.py	fix(#4410): pre-check workspace leaf type via lstat + close fd on non-regular (Codex gate v2)	2026-06-18 19:22:29 +00:00
route_approvals.py	fix(#5000): relay mirrored gateway approvals after stream loss	2026-06-27 06:03:24 +00:00
route_session_list_cache.py	feat: add Webhooks sidebar filter parity	2026-06-30 17:06:31 +00:00
routes.py	fix(#6056): redact display_title/_state_db_title/parent_title on the sidebar API	2026-07-15 20:57:31 +00:00
run_journal.py	fix(#4812): re-sync idle no-cursor SSE subscriber on run completing during keepalive wait	2026-07-10 20:15:49 +00:00
runner_client.py	fix(gateway): correct approval URL and thread session history into runs API (#4479)	2026-06-19 13:16:39 -04:00
runtime_adapter.py
session_discoverability.py	Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)	2026-07-09 10:54:06 -07:00
session_events.py	feat(sessions): carry changed session_id in session-list-changed events (#4221) (#4233)	2026-06-15 00:10:01 -07:00
session_export_html.py	#4968: export chat to self-contained themed HTML, rebased on master	2026-07-02 02:36:09 +00:00
session_lifecycle.py	fix(#5543): fire-and-forget commit_session_memory + drain-safe managed stop	2026-07-04 21:40:21 +00:00
session_ops.py	fix(#5563): align forked context to display for large (compacted) sessions	2026-07-04 20:55:06 +00:00
session_recovery.py	Merge latest master into compression recovery action	2026-07-05 10:23:15 +08:00
shares.py	fix(share): reject dict-valued text-blocks and dict titles (re-gate edge)	2026-07-11 02:14:07 +00:00
skill_usage.py
sse_chunked.py	stage #4447: opt-in chunked SSE for buffering proxies (#4447) + v0.51.524 CHANGELOG	2026-06-19 22:09:17 +00:00
startup.py
state_sync.py	fix(state-sync): mirror WebUI API call counts	2026-07-07 19:48:19 +00:00
streaming.py	fix tool-limit final answer classification	2026-07-15 19:38:25 +00:00
system_health.py	fix: keep psutil optional for system health	2026-06-26 20:49:13 +00:00
terminal.py	Release Batch D: terminal resource-leak fix + fsync atomic writers (#5835, #5843) (#5848)	2026-07-09 10:54:06 -07:00
todo_state.py	Release v0.51.261 — Release IC (stage-r11) (#3616)	2026-06-04 16:46:20 -07:00
turn_journal.py	Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)	2026-06-07 23:18:51 -07:00
updates.py	fix: pin agent update gateway restart profile	2026-07-14 14:46:00 +08:00
upload.py	Release: write Office upload sidecars (#5734, #540) (#5859)	2026-07-09 15:57:21 -07:00
usage.py
webui_session_db.py	fix: preserve compression recovery child markers in sidecar rebuild	2026-07-05 06:45:50 +08:00
workspace.py	#5142: office-doc preview + safe docx editing (#540), rebased on master; optional deps	2026-07-02 01:15:57 +00:00
workspace_git.py	fix(workspace-git): hide git subprocess console windows on Windows (#5692)	2026-07-07 02:07:39 +00:00
worktrees.py	fix(worktrees): unlock before remove so WebUI-created worktrees can be reaped	2026-07-13 17:47:58 +00:00