pprism13 4139695c97 fix(gateway): media delivery denies the session/kanban SQLite stores (#41071) ...

`MEDIA:~/.hermes/state.db` was deliverable in default mode: the denylist
named individual credential files but not the SQLite stores that hold the
whole cross-session conversation history (and every secret ever pasted
into a chat), nor their WAL/SHM sidecars — whose mtime is always fresh, so
strict mode's recency trust would have handed them over too. Same gap for
legacy `sessions/` transcripts, the copied `browser-profile/` cookie store,
and named-board `kanban/boards/<slug>/kanban.db`, which sits right beside
the board attachments the gateway already allowlists.

Add them to the per-file denylist; the rest of HERMES_HOME (skills/, logs/,
memories/, ad-hoc artifacts) stays deliverable — the whole-tree deny from
#32090/#35939 is still deliberately not reintroduced.

Salvaged from #41071 by @pprism13 (root-level state.db/kanban.db entries);
named-board and sessions/browser-profile coverage added on top.

2026-09-05 15:54:34 +05:30

..

assets

chore: limit generic status phrases to long-running notifications

2026-07-05 06:29:26 -07:00

builtin_hooks

…

platforms

fix(gateway): media delivery denies the session/kanban SQLite stores (#41071)

2026-09-05 15:54:34 +05:30

relay

fix(gateway): stop dropping the first message after an Azure agent sleeps (#99736)

2026-09-04 15:41:27 -03:00

__init__.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

agent_cache_pressure.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

AGENTS.md

docs(agents): split AGENTS.md into root + per-area files (≤8k each, the subdirectory-hint cap)

2026-09-04 02:12:35 -07:00

authz_mixin.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

browser_control_artifacts.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

browser_control_broker.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

cgroup_cleanup.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

channel_directory.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

code_skew.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

config_env.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

config_loader.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

config.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

control_socket.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

cwd_placeholder.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

dead_targets.py

refactor(gateway): second-pass compaction of delivery ledger/router, control socket, dead targets

2026-09-02 20:13:08 -07:00

delivery_ledger.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

delivery.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

disk_status.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

display_config.py

refactor(gateway): wave-2 final compaction — Platform._missing_ single exit, _cleanup_expired keep-set, expression-form display normalisers and small predicates

2026-09-02 22:42:55 -07:00

drain_control.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

hooks.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

hosted_room_discussion.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_driver.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_execution_policy.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_links.py

refactor(gateway): reflow hosted-room module/function docstrings to <=120 cols (every sentence kept)

2026-09-03 00:09:14 -07:00

hosted_room_peer.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_policy_checkpoint.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

hosted_room_replicas.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

hosted_rooms_common.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

hosted_rooms.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

kanban_watchers_common.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

kanban_watchers_dispatcher.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_watchers_notifier.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

kanban_watchers.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

lifecycle_ledger.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

media_policy.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

media_repair.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

memory_monitor.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

memory_status.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

message_timestamps.py

refactor(gateway): collapse defensive layers, drop dead loggers, compact call sites across lifecycle/monitoring/media modules

2026-09-02 19:21:46 -07:00

mirror.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

pairing.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

platform_registry.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

profile_routing.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

readiness.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

response_filters.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

restart_loop_guard.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

restart.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

rich_sent_store.py

refactor(gateway): second-pass compaction of delivery ledger/router, control socket, dead targets

2026-09-02 20:13:08 -07:00

run_adapters.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_agent_cache.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_busy.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_common.py

refactor(gateway): split GatewayRunner into 13 run_* mixins + TurnRunner module (run.py 31332 -> 6957)

2026-09-02 16:11:50 -07:00

run_config_loaders.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

run_goals.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_inbound.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

run_notifications.py

simplify(compat): file_tools/send_message_tool/cronjob_tools/process_registry — drop 34 re-exports, repoint 5 callers + 27 test files

2026-09-03 13:30:27 -07:00

run_shutdown.py

fix(gateway): stop dropping the first message after an Azure agent sleeps (#99736)

2026-09-04 15:41:27 -03:00

run_startup.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_topics.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

run_turn_runner.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

run_turn.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

run_voice.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

run_watchers.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

run.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

runtime_footer.py

refactor(gateway): third pass on scale_to_zero/wake/status_phrases/runtime_footer/systemd_notify

2026-09-02 21:14:22 -07:00

scale_to_zero.py

fix(gateway): stop dropping the first message after an Azure agent sleeps (#99736)

2026-09-04 15:41:27 -03:00

session_context.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_db_recovery.py

refactor(gateway): session — checkpoint: phase helpers for get_or_create_session, shared clock/id helpers in lifecycle, context/state/stall folding

2026-09-02 19:21:38 -07:00

session_lifecycle.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_persistence.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

session_recovery.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_stall.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_state.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_transcript.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

session.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

shutdown_flush.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

shutdown_forensics.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

shutdown_watchdog.py

review-fix(suppress-audit): skill_usage hub-lock walk, watchdog tick finally, session.create cwd — restore BASE exception semantics

2026-09-03 10:00:07 -07:00

slash_access.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

slash_commands_goals.py

simplify(compat): approval — drop 43 facade re-exports + _command_detection_variants late-bind seam, repoint 30 callers + 46 test files

2026-09-03 13:49:57 -07:00

slash_commands_model.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

slash_commands_session.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

slash_commands_status.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

slash_commands.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

startup_watchdog.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

status_phrases.py

refactor(gateway): third pass on scale_to_zero/wake/status_phrases/runtime_footer/systemd_notify

2026-09-02 21:14:22 -07:00

status.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

sticker_cache.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

stream_consumer_fallback.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

stream_consumer_fences.py

refactor(gateway): stream/runner — checkpoint: consumer init/reset helpers, sentinel dispatch table, fallback/transport dedupe, watcher/voice/lease compaction

2026-09-02 19:19:38 -07:00

stream_consumer_think.py

refactor(gateway): stream transport — preview-id tracking, probe gates, hook wrappers folded

2026-09-02 19:52:43 -07:00

stream_consumer_transport.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

stream_consumer.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

stream_dispatch.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00

stream_events.py

refactor(gateway): stream transport/fallback/events — docstrings to summary + invariant

2026-09-02 20:24:52 -07:00

streaming_tts_consumer.py

simplify(compat): tts_tool — drop 57 re-exports/aliases, repoint 10 callers + 23 test files

2026-09-03 13:20:22 -07:00

systemd_notify.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

turn_context.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

turn_lease.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

wake.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

whatsapp_identity.py

fix(live-qa): nous_subscription managed table indexes only selectable features (KeyError 'modal' crashed status/tools/dashboard toolsets); restore PluginManager public API (has_portable_mcp_servers, get_telegram_handler_factories, register_approval_transport), extract_json_candidate public name, canonical_whatsapp_identifier main semantics

2026-09-03 08:16:44 -07:00