nesquena-hermes a823ab5ff8 fix(#5307): recover subagent child transcript view-only (Codex hardening) ...

Reworked per the Codex gate finding: the first approach widened the client
import predicate, which (a) conflicted with #3603's intentional _isExternalSession
gate and (b) let import_cli persist the subagent child as a WRITABLE, CLI-classified
session that then passed the poll-skip/active-refresh gates.

Corrected to a server-side, view-only recovery:
- api/routes.py: mark source='subagent' as NON-claimable in _is_claimable_cli_source
  (both cli_meta and state.db source denylists). A subagent child now resolves via
  the not_claimable branch -> read-only Session with its state.db transcript, and
  build_session takes is_cli_flag (False for subagent children) so the recovered
  session is NOT CLI-classified and can't widen the frontend _isExternalSession gates.
- static/sessions.js: REVERTED to master (no client change needed; #3603 contract intact).
- tests: assert reason=not_claimable, read_only=True, is_cli_session!=True, transcript present;
  #2782 deleted-webui 404 preserved; #3603 _isExternalSession contract preserved.

58 tests green (5307 + 3603 + claim-cli + core-data-loss). Fixes #5307

2026-07-01 07:24:16 +00:00

..

__init__.py

…

agent_health.py

…

agent_sessions.py

…

auth_oidc.py

…

auth.py

…

background_process.py

…

background.py

…

clarify.py

…

commands.py

…

compression_anchor.py

…

config.py

…

dashboard_probe.py

…

extensions.py

…

gateway_chat.py

…

gateway_restart.py

…

gateway_watcher.py

…

goals.py

…

helpers.py

…

kanban_bridge.py

…

metering.py

…

models.py

…

oauth.py

…

onboarding.py

…

passkeys.py

…

paths.py

…

plugin_providers.py

…

plugins.py

…

profiles.py

…

providers.py

…

request_diagnostics.py

…

rollback.py

…

route_approvals.py

…

route_session_list_cache.py

…

routes.py

fix(#5307): recover subagent child transcript view-only (Codex hardening)

2026-07-01 07:24:16 +00:00

run_journal.py

…

runner_client.py

…

runtime_adapter.py

…

session_discoverability.py

…

session_events.py

…

session_lifecycle.py

…

session_ops.py

…

session_recovery.py

…

skill_usage.py

…

sse_chunked.py

…

startup.py

…

state_sync.py

…

streaming.py

…

system_health.py

…

terminal.py

…

todo_state.py

…

turn_journal.py

…

updates.py

…

upload.py

…

usage.py

…

webui_session_db.py

…

workspace_git.py

…

workspace.py

…

worktrees.py

…