nesquena-hermes f79c975842 fix(#4928): redact tool args at all render/copy sites now that content args are full-length ...

Codex gate: raising content args from 120->4000 chars newly surfaces secrets on
non-first lines / past char 120 in render paths that print tc.args directly and
bypass the #4926 label redaction. Apply _redactToolTargetLabel to arg values at
every such site: the transparent Full-tab args render (_transparentToolDetailHtml),
the non-transparent tool-card args block (buildToolCard visibleArgs), the
clipboard copy path (_copyEventToClipboard), and the _toolArgsSnapshot itself.
+ node regression proving a secret past char 120 in a long command is masked in
the Full tab while the non-secret command structure is retained.

2026-06-25 18:28:06 +00:00

..

vendor

fix: protect pipes inside backtick code spans in renderMd tables

2026-06-25 08:25:58 +00:00

apple-touch-icon.png

feature: add manifest and icons to enable app install on android

2026-05-02 19:06:39 +02:00

assistant_turn_anchors.js

Add assistant turn anchor renderer snapshot adapter

2026-06-14 02:03:45 +08:00

boot.js

fix(#4728): use configured default for new conversations

2026-06-24 20:09:30 +00:00

commands.js

fix(steer): rename typo, catch retry rejection, update JSDoc (#4749)

2026-06-25 03:23:36 +00:00

favicon-32.png

fix: add favicon (SVG + PNG + ICO), fix static MIME types (#613)

2026-04-16 20:11:02 -07:00

favicon-192.png

feature: add manifest and icons to enable app install on android

2026-05-02 19:06:39 +02:00

favicon-512.png

feature: add manifest and icons to enable app install on android

2026-05-02 19:06:39 +02:00

favicon-512.svg

feature: add manifest and icons to enable app install on android

2026-05-02 19:06:39 +02:00

favicon.ico

fix: add favicon (SVG + PNG + ICO), fix static MIME types (#613)

2026-04-16 20:11:02 -07:00

favicon.svg

fix: add favicon (SVG + PNG + ICO), fix static MIME types (#613)

2026-04-16 20:11:02 -07:00

i18n.js

feat(extensions): add gallery browse, install, and uninstall (#4746)

2026-06-25 04:21:50 +00:00

icons.js

stage #4581 onto master (v0.51.556) — surface escape-target symlinks as display-only workspace rows

2026-06-21 09:15:22 +00:00

index.html

feat(extensions): add gallery browse, install, and uninstall (#4746)

2026-06-25 04:21:50 +00:00

login.js

feat: add passkey sign-in

2026-05-25 00:14:38 +00:00

manifest.json

Stage 405: PR #2842 — feat: polish installed PWA startup by @AJV20

2026-05-24 18:28:52 +00:00

messages.js

fix(#4771): block duplicate approval submits

2026-06-25 13:09:42 +00:00

onboarding.js

docs: clarify Anthropic auth choices in onboarding

2026-05-06 06:26:43 +00:00

outline.js

fix(outline): keep outline valid on the todos sidebar panel (Opus follow-up)

2026-06-10 23:55:05 +00:00

panels.js

fix(#4891): show header in read-only Memory sections + Profiles help view

2026-06-25 06:20:20 +00:00

pwa-startup.js

Stage 405: PR #2842 — feat: polish installed PWA startup by @AJV20

2026-05-24 18:28:52 +00:00

sessions.js

fix(#4728): clear stale custom:* base_url + default wins without loaded session (gate findings)

2026-06-24 20:17:29 +00:00

style.css

fix(#4856): mobile transcript collapses unscrollable — overflow-x:hidden coerces overflow-y:auto

2026-06-25 05:18:32 +00:00

sw.js

fix: focus the existing chat tab when a notification is clicked instead of opening a new tab

2026-06-13 14:42:41 -07:00

terminal.js

fix(#4313): guard EventSource.close() calls to suppress ERR_ABORTED noise

2026-06-18 17:25:18 +00:00

ui.js

fix(#4928): redact tool args at all render/copy sites now that content args are full-length

2026-06-25 18:28:06 +00:00

workspace.js

Keep escape grants browser-confirmed and refreshable (#4582)

2026-06-23 02:53:12 -04:00