nesquena-hermes 03799f8e4a harden(#4023): apply Opus security findings — verify-side name-pattern gate + require handler when auth enabled ...

Opus independent security review concurred SAFE and surfaced 2 LOW defense-in-depth
items, both applied: (1) verify_profile_cookie_value now validates the profile name
against _PROFILE_ID_RE itself (not only in get_profile_cookie) so a future second
caller can't return an unvalidated name; (2) build_profile_cookie raises when auth is
enabled and no handler is passed, so a future call site can't silently emit an
unsigned (session-unbound) profile cookie. +3 regression tests.

2026-06-12 07:37:48 +00:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

agent_health.py

Release v0.51.260 — Release IB (stage-r8) (#3614)

2026-06-04 15:21:41 -07:00

agent_sessions.py

fix(sidebar): prime idx_messages_session before CLI-session scan (#3887) (#3888)

2026-06-09 12:35:13 -07:00

auth.py

harden(#4023): apply Opus security findings — verify-side name-pattern gate + require handler when auth enabled

2026-06-12 07:37:48 +00:00

background_process.py

[HELD — independent review pending] Release v0.51.340 — bg_task agent wakeup (trio #2968+#2971+#2979) (#3867)

2026-06-08 22:36:18 -07:00

background.py

feat(commands): /background, /btw slash commands + undo button + reasoning chip

2026-04-24 01:24:51 +00:00

clarify.py

feat: add distinct attention request sound

2026-05-30 19:40:40 +00:00

commands.py

Release v0.51.263 — Release IE (stage-r13) (#3625)

2026-06-04 23:56:44 -07:00

compression_anchor.py

fix(sidebar): keep newer continuation visible over older snapshot

2026-05-28 13:38:06 -06:00

config.py

fix(#3958): keep reasoning effort status on the active session model

2026-06-11 18:46:17 -04:00

dashboard_probe.py

fix: preserve IPv6 dashboard link brackets

2026-05-19 21:35:10 -04:00

extensions.py

Opus pre-release follow-ups for PR #1445

2026-05-02 03:49:40 +00:00

gateway_chat.py

[HELD — independent review pending] Release v0.51.294 — stage-3401 (live-to-final redesign #3401 + 4 deep-review fixes) (#3741)

2026-06-06 12:12:37 -07:00

gateway_watcher.py

Release v0.51.256 — Release HX (stage-r4) (#3596)

2026-06-04 12:28:06 -07:00

goals.py

fix(i18n): localize /goal runtime status strings

2026-05-10 15:21:24 +08:00

helpers.py

harden(#4023): apply Opus security findings — verify-side name-pattern gate + require handler when auth enabled

2026-06-12 07:37:48 +00:00

kanban_bridge.py

Release v0.51.348 — Release LL (Phase 0 hotfix: timeout regression + data-loss + leaks) (#3917)

2026-06-10 01:12:48 -07:00

metering.py

fix: show TPS in assistant message headers

2026-05-04 21:26:43 +00:00

models.py

Release v0.51.347 — Release LK (streaming & render reliability cluster #3892 #3898 #3885 #3882 #3868) (#3902)

2026-06-09 17:02:35 -07:00

oauth.py

Release v0.51.330 — Release KT (#3716 api docstring backfill, partial) (#3841)

2026-06-08 12:22:22 -07:00

onboarding.py

Classify onboarding DNS probe failures consistently

2026-05-15 08:51:30 +08:00

passkeys.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

paths.py

fix(profiles): avoid config import cycle

2026-06-01 05:05:16 +00:00

plugin_providers.py

Release v0.51.270 — Release IL (stage-u1 — un-hold batch: #3517 #3624 #3613) (#3674)

2026-06-05 11:35:26 -07:00

plugins.py

fix(#2622): plugin card UX — legible Open button, single badge, visible toggle + reject protocol-relative tab.path

2026-06-02 03:58:02 +00:00

profiles.py

fix(profiles): scope the detached models-rebuild worker to the active profile (#3957)

2026-06-11 01:41:24 +00:00

providers.py

Release v0.51.318 — Release KH (Phase 3 light: warm account-usage probe worker pool, #3722) (#3792)

2026-06-07 12:07:13 -07:00

request_diagnostics.py

fix: add request wedge diagnostics

2026-05-08 15:37:08 +00:00

rollback.py

v0.50.255: Opus follow-ups (4 fixes) + CHANGELOG

2026-05-01 17:19:53 +00:00

route_approvals.py

Release v0.51.275 — Release IQ (stage-p3d — approval SSE state extraction #3575) (#3681)

2026-06-05 13:10:45 -07:00

routes.py

Merge #4023 — bind active profile cookie to session (#803)

2026-06-12 07:19:46 +00:00

run_journal.py

Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)

2026-06-07 23:18:51 -07:00

runner_client.py

harden: runner client rejects non-http(s) base_url + no redirect-follow (#3073)

2026-05-31 17:49:26 +00:00

runtime_adapter.py

Stage 398: PR #2696 — feat(runtime): add runner-local adapter selection (RuntimeAdapter slice 4c, feature-flagged)

2026-05-21 17:43:54 +00:00

session_discoverability.py

Merge PR #3048

2026-05-28 17:47:33 +00:00

session_events.py

Release v0.51.266 — Release IH (stage-r16) (#3641)

2026-06-05 00:44:03 -07:00

session_lifecycle.py

Release v0.51.256 — Release HX (stage-r4) (#3596)

2026-06-04 12:28:06 -07:00

session_ops.py

Release v0.51.276 — Release IR (stage-p3e — preserve manually-named session titles #3542) (#3682)

2026-06-05 13:34:54 -07:00

session_recovery.py

Release v0.51.329 — Release KS (#3814 O(n) index map + #3815 startup recovery skip) (#3840)

2026-06-08 11:49:26 -07:00

skill_usage.py

fix: remove webui-side writer to avoid conflict with agent

2026-05-27 20:57:32 +08:00

startup.py

fix: P0 hotfixes — API regression, code block parser, chmod override

2026-05-01 12:10:48 +00:00

state_sync.py

fix: use Optional[T] for default None parameters in state_sync.py

2026-06-01 17:20:17 +00:00

streaming.py

fix(#3929): preserve partial work on turn-level errors

2026-06-10 19:11:58 +00:00

system_health.py

feat: add VPS resource health panel

2026-05-05 17:30:56 +00:00

terminal.py

Release v0.51.304 — Release JT (stage-p2a — un-held terminal reaper + opt-in Docker GPU) (#3757)

2026-06-06 18:04:16 -07:00

todo_state.py

Release v0.51.261 — Release IC (stage-r11) (#3616)

2026-06-04 16:46:20 -07:00

turn_journal.py

Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)

2026-06-07 23:18:51 -07:00

updates.py

Release v0.51.312 — Release KB (brick-wave: purge stale __pycache__ after self-update, fixes #3774) (#3778)

2026-06-07 08:26:36 -07:00

upload.py

Release v0.51.326 — Release KP (#3618 + #3802 + #3762 + #3810) (#3816)

2026-06-07 23:18:51 -07:00

usage.py

fix: display canonical cache hit percentage

2026-05-19 02:27:12 -06:00

webui_session_db.py

Release v0.51.305 — Release JU (stage-p2b — dormant unified-SessionDB adapter) (#3759)

2026-06-06 18:16:07 -07:00

workspace_git.py

Release v0.51.311 — Release KA (brick-wave: workspace Git RCE hardening #3769 + stale-snapshot sidebar visibility #3770) (#3776)

2026-06-07 08:05:30 -07:00

workspace.py

Release v0.51.296 — stage-3731 (remote-workspace blocked-root security fix #3731) (#3744)

2026-06-06 13:49:59 -07:00

worktrees.py

Harden worktree removal safeguards

2026-05-13 09:49:15 +08:00