Hermes Bot 8f58688b66 test: lock /session/static MIME-type + auth fix; drop unused import ...

- Add tests/test_session_static_assets.py (5 tests):
  * /session/static/style.css must return text/css (not text/html)
  * /session/static/ui.js must return application/javascript
  * /session/<id> still serves the HTML index (catch-all not weakened)
  * Path-traversal still sandboxed after prefix strip
  * /session/static/* matches /static/* auth-exemption policy
- Drop unused 'from urllib.parse import urlparse as _up' import from
  PR #1505's added block (parsed._replace already gives a usable result).

Co-authored-by: Rick Chew <rickchew@users.noreply.github.com>

2026-05-03 05:20:19 +00:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_sessions.py

fix(sqlite): close state.db connections explicitly to stop FD leak in sidebar polling (#1494)

2026-05-03 01:15:26 +00:00

auth.py

fix: serve static assets correctly under /session/* routes

2026-05-03 13:05:15 +08:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

feat(clarify): SSE long-connection for real-time clarify notifications (#1355)

2026-04-30 21:32:51 +00:00

commands.py

feat: slash command parity + skill autocomplete — v0.50.91 (PR #711)

2026-04-19 05:37:44 +00:00

config.py

chore(release): stamp v0.50.267 — 7 contributor PR batch + Opus follow-up

2026-05-02 17:03:25 +00:00

extensions.py

Opus pre-release follow-ups for PR #1445

2026-05-02 03:49:40 +00:00

gateway_watcher.py

release: v0.50.241 (#1293)

2026-04-29 19:54:07 -07:00

helpers.py

v0.50.255: Opus follow-ups (4 fixes) + CHANGELOG

2026-05-01 17:19:53 +00:00

metering.py

v0.50.207: batch of 10 PRs — TPS stat, SSE guard, session polish, cron UX, folder create, model errors, session speed, title gen (#1031)

2026-04-25 13:07:35 -07:00

models.py

Stage 272: PR #1492 — P0 bugfixes (tool-card args + CLI rename + scroll pinning + sw.js relative-path regression test)

2026-05-03 01:34:10 +00:00

oauth.py

v0.50.257: 4 Opus pre-release follow-ups + CHANGELOG + test fixes for #1415

2026-05-01 18:30:41 +00:00

onboarding.py

fix(onboarding,probe): refuse HTTP redirects on probe path (reviewer-flagged on PR #1501)

2026-05-03 03:21:22 +00:00

profiles.py

fix(cancel-stream): rename tool_calls to _partial_tool_calls (Opus MUST-FIX)

2026-04-30 23:43:23 +00:00

providers.py

fix(onboarding,providers): probe LM Studio /models + align env var with agent CLI (#1499 #1500)

2026-05-03 02:46:24 +00:00

rollback.py

v0.50.255: Opus follow-ups (4 fixes) + CHANGELOG

2026-05-01 17:19:53 +00:00

routes.py

test: lock /session/static MIME-type + auth fix; drop unused import

2026-05-03 05:20:19 +00:00

session_ops.py

Show profile home in /status command (refs #463) (#1380)

2026-05-01 04:46:37 +00:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

security: bandit fixes B310/B324/B110 + QuietHTTPServer (#354)

2026-04-13 11:11:56 -07:00

streaming.py

v0.50.259: Opus pre-release follow-up — close _session_db on LRU eviction + CHANGELOG + 5 regression tests

2026-05-01 22:42:53 +00:00

terminal.py

absorb: address Opus review findings (security + correctness)

2026-04-29 05:06:34 +00:00

updates.py

fix: update banner — conflict recovery path + server self-restart after update (#816)

2026-04-21 17:10:41 -07:00

upload.py

Merge remote-tracking branch 'refs/remotes/pr/1229' into stage/batch-v0.50.238

2026-04-29 15:17:57 +00:00

workspace.py

fix: batch v0.50.234-235 — XSS hardening, workspace validation, profile switch fixes (#1206)

2026-04-27 21:39:30 -07:00