r.kulbaev 2fe0ece991 fix(upload): scope archive extraction to per-session attachment dir ...

handle_upload_extract() used Path(s.workspace) as the extraction root,
bypassing HERMES_WEBUI_ATTACHMENT_DIR entirely. Route through
_session_attachment_dir(session_id) so archives land alongside
single-file uploads and session cleanup covers them.

Add tests and CHANGELOG entry.

Ref #2247

2026-05-18 21:22:02 +03:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_health.py

fix(agent-health): treat stale running gateway as unknown

2026-05-11 23:13:09 +00:00

agent_sessions.py

fix: label email gateway sessions

2026-05-17 02:49:25 -07:00

auth.py

Add session-bound CSRF token checks

2026-05-18 07:14:26 +08:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

feat(clarify): SSE long-connection for real-time clarify notifications (#1355)

2026-04-30 21:32:51 +00:00

commands.py

fix(security): drop unsafe-eval + add jsdelivr to CSP, sanitize plugin error

2026-05-11 17:53:02 +00:00

compression_anchor.py

docs: clarify compression anchor helpers

2026-05-12 01:43:16 -07:00

config.py

Stage 379: PR #2473

2026-05-17 23:35:18 +00:00

dashboard_probe.py

feat: link official Hermes dashboard

2026-05-05 01:23:55 +00:00

extensions.py

Opus pre-release follow-ups for PR #1445

2026-05-02 03:49:40 +00:00

gateway_watcher.py

release: v0.50.241 (#1293)

2026-04-29 19:54:07 -07:00

goals.py

fix(i18n): localize /goal runtime status strings

2026-05-10 15:21:24 +08:00

helpers.py

stage-348: apply Opus SHOULD-FIX-pre-merge — add '://' to _SENSITIVE_LOWER_MARKERS

2026-05-13 16:54:36 +00:00

kanban_bridge.py

stage-315 absorb: document handle_kanban_* three-valued return contract

2026-05-07 18:52:01 +00:00

metering.py

fix: show TPS in assistant message headers

2026-05-04 21:26:43 +00:00

models.py

Recover journal output after core transcript sync

2026-05-17 12:28:05 +08:00

oauth.py

fix(oauth): serialize Anthropic env fallback reads

2026-05-07 02:47:19 +00:00

onboarding.py

Classify onboarding DNS probe failures consistently

2026-05-15 08:51:30 +08:00

profiles.py

fix: route background worker credentials through profile env

2026-05-16 01:02:19 -07:00

providers.py

Stage 374: PR #2418 — fix(cost-history): provider-specific POSIX file lock for snapshot updates by @Michaelyklam (fixes #2402)

2026-05-17 02:49:15 +00:00

request_diagnostics.py

fix: add request wedge diagnostics

2026-05-08 15:37:08 +00:00

rollback.py

v0.50.255: Opus follow-ups (4 fixes) + CHANGELOG

2026-05-01 17:19:53 +00:00

routes.py

Stage 382: PR #2500 (with whitespace polish on panels.js + ARCHITECTURE.md)

2026-05-18 03:45:02 +00:00

run_journal.py

Address run journal replay review

2026-05-16 02:58:34 +00:00

runtime_adapter.py

Stage 374: PR #2424 — feat(runtime): add default-off RuntimeAdapter seam (HERMES_WEBUI_RUNTIME_ADAPTER=legacy-journal) by @Michaelyklam (refs #1925)

2026-05-17 02:49:35 +00:00

session_lifecycle.py

fix: align WebUI memory commits with CLI boundaries

2026-05-17 05:04:57 -06:00

session_ops.py

Show profile home in /status command (refs #463) (#1380)

2026-05-01 04:46:37 +00:00

session_recovery.py

fix: audit turn journal terminal collisions

2026-05-12 05:20:06 -07:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

security: bandit fixes B310/B324/B110 + QuietHTTPServer (#354)

2026-04-13 11:11:56 -07:00

streaming.py

Stage 379: PR #2461

2026-05-17 23:35:18 +00:00

system_health.py

feat: add VPS resource health panel

2026-05-05 17:30:56 +00:00

terminal.py

absorb: address Opus review findings (security + correctness)

2026-04-29 05:06:34 +00:00

turn_journal.py

fix: lock turn journal appends

2026-05-15 16:39:45 -07:00

updates.py

Stage 378: PR #2146

2026-05-17 19:55:09 +00:00

upload.py

fix(upload): scope archive extraction to per-session attachment dir

2026-05-18 21:22:02 +03:00

workspace.py

refactor: reduce stale workspace recovery fix

2026-05-12 06:28:35 -06:00

worktrees.py

Harden worktree removal safeguards

2026-05-13 09:49:15 +08:00