Adolanium 2770f93064 fix(profiles): reject traversal-shaped profile names in get_profile_dir ...

A WS 'profile' param like '../../foo' normalized to a path component that
escaped the profiles root, letting a connected client bind an arbitrary
existing directory as a profile home (state.db opened there, and session
delete chains into per-id file cleanup under <dir>/sessions/).

get_profile_dir now validates the canonical name against the profile id
regex before joining it under profiles/. The regex only, not the reserved
list, so pre-reserved-list dirs like profiles/hermes keep resolving.
Callers that probe existence (profile_exists, _profile_home, the 4064
resolvers) treat ValueError as 'not found'.

2026-09-13 15:45:57 -07:00

..

__init__.py

…

test_attach_does_not_wait_for_agent.py

…

test_auto_continue.py

fix: admit Bot Chat deliveries through the live session owner

2026-09-07 16:48:29 -07:00

test_backend_heartbeat.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_billing_rpc.py

…

test_bot_live_owner_delivery.py

fix(bot-mode): carry the relay sender into a live Bot Chat turn

2026-09-10 10:27:07 -07:00

test_bot_relay_methods.py

fix(bot-relay): gateway drain root uses the same formula as the tool-side writers

2026-09-13 05:09:06 -07:00

test_change_watcher.py

fix(desktop): refresh routed-profile Bot Chat transcripts (salvage #99333)

2026-09-02 06:47:55 -07:00

test_codex_app_server_live_events.py

…

test_cold_start_gil_stall.py

simplify(compat): tests — repoint 638 web_server.<name> references (321 attr, 217 monkeypatch/patch.object, 60 from-imports, 40 patch() strings) across 65 test files to the owning modules

2026-09-03 14:21:52 -07:00

test_command_description_fidelity.py

fix(desktop): reveal complete slash help across the window

2026-09-07 06:10:15 -07:00

test_compaction_status.py

test(tui): cover idle compaction status retag and FaceTicker freeze

2026-08-31 09:57:04 -07:00

test_composite_carrier_rewind.py

fix(history): keep carrier rewinds race-safe after refresh

2026-08-22 17:30:35 +02:00

test_compress_lock_skip.py

…

test_compression_config_hot_reload.py

refactor(tui): extract the prompt turn into prompt_turn.py; compact methods_*/session_*/agent_callbacks; split _start_agent_build into scope/wiring helpers

2026-09-02 14:09:13 -07:00

test_compute_host_late_compress_ack.py

fix(tui-gateway): adopt late compute-host compress acks instead of a false 120s timeout (#97948)

2026-09-02 01:35:59 -07:00

test_compute_host_phase1.py

fix(gateway): relay compute-host clarify state

2026-08-31 12:18:00 -07:00

test_compute_host_turn_protocol.py

fix(tui-gateway): stamp the login on the session record so rebuilds keep it

2026-09-13 19:05:39 +05:30

test_compute_host.py

refactor(tui_gateway): drop compute_host spike path, unify frame/reply builders, extend _room_method, compact layout (group E)

2026-09-02 23:27:53 -07:00

test_config_profile_scope.py

fix(tui_gateway): scope config.get/set RPC to params.profile

2026-08-31 04:33:20 -07:00

test_config_set_display_toggles.py

fix(gateway): let config.set write the desktop's Appearance switches

2026-08-31 21:11:11 -05:00

test_config_set_voice_chat_mode.py

feat(voice): pick the voice chat engine from the composer

2026-09-11 19:14:24 -07:00

test_cross_process_orphan_ownership.py

fix(sessions): never reap an own lease younger than the vouch snapshot

2026-09-03 03:48:31 +05:30

test_custom_provider_session_persistence.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

test_default_profile_session_name.py

fix(tui): a real named profile "hermes" is not swallowed by the legacy-basename alias

2026-09-09 12:39:39 +05:30

test_deferred_model_switch_confirm.py

fix(tui_gateway): ask before queueing a guarded model picked mid-turn (#91043)

2026-08-26 13:38:53 -05:00

test_delegation_session_lifecycle.py

…

test_diagnostics_share_nous.py

fix(desktop): Send Diagnostics review fixes — consent accuracy, log-grade redaction, dismissal guard, linkless-success (review feedback)

2026-08-21 23:01:30 -07:00

test_empty_fast_status.py

test: trim fast-status regression test to the invariant cases

2026-09-12 07:59:59 -07:00

test_entry_import_off_main_thread.py

…

test_entry_picker_prewarm.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_entry_sys_path.py

…

test_ephemeral_profile_override.py

…

test_failed_agent_build_retry.py

feat: local models — managed llama.cpp runtime with one-click desktop setup

2026-09-01 16:01:53 -04:00

test_failed_turn_retention.py

fix(desktop): error card honors the classifier's retry verdict + failing-session identity (review feedback)

2026-08-21 15:24:03 -07:00

test_fast_session_scope.py

…

test_finalize_session_persist.py

fix: remove automatic session JSON snapshots

2026-09-07 08:08:41 -07:00

test_free_tier_rpc.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

test_gateway_event_contract.py

refactor(ts): one GatewayEventMap in apps/shared typed from tui_gateway emitters; drop never-emitted tool.progress

2026-09-13 05:42:31 -07:00

test_gateway_owned_session_reap.py

…

test_goal_command.py

refactor: share CLI goal commands across interactive surfaces

2026-09-07 00:51:41 -07:00

test_groups_methods.py

test(hosted-rooms): pin the coordination store off the master state.db; label sidecars

2026-09-11 06:21:48 -07:00

test_groups_replication_methods.py

fix(bot-mode): cancel re-routes on worker races instead of failing disband

2026-08-30 22:19:06 -07:00

test_gui_surface_toolsets.py

test: sweep sibling tests stale on the tool renames + deferral default

2026-08-29 18:23:07 -07:00

test_heartbeat_tui_tick.py

fix(tui): heartbeat ticks share the /loop idle poll and rewind when no turn starts

2026-09-06 07:20:24 -07:00

test_hosted_room_driver_runtime.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

test_hosted_room_member_activity_hook.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

test_hosted_room_peer_http.py

refactor(tui_gateway): hosted-room X1 — inline one-site wrappers, drop dead PeerRunsHTTPError attrs, compact lease/cancel plumbing

2026-09-03 03:59:09 -07:00

test_hosted_room_peer_transport.py

feat(bot-mode): add scoped cross-gateway Group Chat transport

2026-08-31 01:04:11 -07:00

test_hosted_room_prompt_fence.py

feat(bot-mode): add scoped cross-gateway Group Chat transport

2026-08-31 01:04:11 -07:00

test_hosted_room_server_rpc.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

test_hosted_room_service.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

test_hosted_room_settled_retry.py

test: preserve late retry supersession and isolate profile fixtures

2026-09-07 05:58:52 -07:00

test_hosted_room_two_gateway_scoped.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

test_hud_surface_note.py

test: sweep sibling tests stale on the tool renames + deferral default

2026-08-29 18:23:07 -07:00

test_image_ref_message.py

…

test_image_routing_stale_model.py

…

test_inline_rpc_gil_starvation.py

…

test_interim_assistant_callback.py

…

test_interrupt_agent_loop_stopped_hook.py

feat(tui_gateway): fire agent_loop_stopped on session.interrupt too

2026-09-12 22:19:44 -07:00

test_iso_certify_seam.py

…

test_isolated_orphan_activity.py

fix(tui-gateway): preserve active isolated turns after disconnect

2026-09-06 20:26:11 +05:30

test_kanban_notify_poller.py

simplify(compat): kanban_db — drop 73 re-exports/aliases, repoint 794 callers

2026-09-03 13:48:14 -07:00

test_launch_db_home_override_race.py

fix(tui_gateway): foreign-profile pollers hand back events another profile's lineage owns

2026-09-13 15:41:01 -07:00

test_lazy_session_regressions.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_local_model_session_identity.py

fix(desktop): preserve local provider identity across new chats

2026-09-11 02:49:36 -04:00

test_loop_command.py

feat(loop): first wakeup fires immediately by default

2026-08-29 17:43:38 -07:00

test_make_agent_personality_prompt.py

…

test_make_agent_provider.py

refactor(model): one persist writer for /model across CLI, gateway, TUI, dashboard; ACP + dashboard validate through switch_model

2026-09-13 05:21:02 -07:00

test_mcp_late_refresh_thread_owner.py

test(multiplex): invariants for the residue fixes; retire allowlist tests

2026-09-11 19:50:46 -07:00

test_mcp_oauth_cancel.py

fix(mcp): enforce profile ownership throughout OAuth sessions

2026-09-07 06:10:28 -07:00

test_mcp_oauth_client_callback.py

fix(mcp): enforce profile ownership throughout OAuth sessions

2026-09-07 06:10:28 -07:00

test_mcp_profile_rpcs.py

refactor(mcp): keep the passive status RPC, drop the SDK contract and reason codes

2026-09-06 13:18:19 -07:00

test_mcp_reload_all_sessions.py

fix: reload.mcp rediscovers under every live session's profile scope

2026-09-13 14:46:12 -07:00

test_mcp_reload_rev.py

simplify(compat): terminal/file/environments — drop 42 re-exports/aliases, repoint 20 callers + 41 test files

2026-09-03 13:29:55 -07:00

test_moa_reference_emit.py

…

test_model_options_profile_scope.py

fix(desktop): scope remote model catalog and primary-label REST to the focused profile

2026-08-31 20:40:09 -05:00

test_model_switch_marker_role.py

…

test_multi_client_fanout.py

fix(tui): bound subscriber delivery without blocking shared turns

2026-09-07 22:25:12 -07:00

test_personality_clobbers_system_prompt.py

…

test_pet_generate_rpc.py

…

test_ping_probe.py

fix(desktop): probe half-open gateway socket on wake and reconnect

2026-08-24 03:14:19 -07:00

test_plugins_manage_install_ref.py

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

test_plugins_manage_install.py

feat(desktop): one row per plugin; desktop halves are app-level copies, never profile-scoped

2026-09-10 08:19:55 -07:00

test_profile_rebuild_commit.py

fix: reject unavailable desktop profile and session targets

2026-09-07 06:26:22 -07:00

test_profile_shell_hooks.py

fix(desktop): honor configured shell hooks for each chat profile

2026-09-07 04:55:48 -07:00

test_profile_target_unavailable.py

fix(profiles): reject traversal-shaped profile names in get_profile_dir

2026-09-13 15:45:57 -07:00

test_profile_terminal_scope_entrypoints.py

test(tui-gateway): invariants for secondary side-worker/build terminal scope and launch env-only policy

2026-09-13 14:31:21 -07:00

test_profiles_configure_model_guard.py

refactor(model): one persist writer for /model across CLI, gateway, TUI, dashboard; ACP + dashboard validate through switch_model

2026-09-13 05:21:02 -07:00

test_profiles_list_canonical_session.py

fix(bot-mode): keep Bot Chat resume on a proven compression tip

2026-08-31 20:47:53 -05:00

test_profiles_list_worker_session.py

fix(bot-mode): running kanban/tool workers now light the Bots roster (#90268)

2026-08-19 19:30:12 -07:00

test_profiles_ui_meta_cas.py

fix(gateway): serialize shared bot room updates

2026-08-20 21:54:18 -07:00

test_project_tree.py

…

test_projects_rpc.py

test: enforce fail-closed project profile targeting

2026-09-07 06:26:22 -07:00

test_prompt_accept_logging.py

feat(tui_gateway): INFO 'prompt accepted / turn finished' records on the Desktop/TUI turn path

2026-08-15 02:45:03 -07:00

test_protocol.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

test_reasoning_config_per_model.py

refactor(config): one effective-user-config loader replaces 9 hand-rolled raw→overlay→expand pipelines

2026-09-13 05:09:06 -07:00

test_reasoning_session_scope.py

…

test_relay_live_author.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

test_render.py

test: prune low-value tests suite-wide (wave 1) — 46,820 → 28,106 test functions

2026-07-29 13:10:23 -07:00

test_resume_live_lazy_session.py

fix(tui-gateway): messaging a never-used bot no longer fails with 'session not found'

2026-08-23 04:57:50 -07:00

test_resume_live_profile_scope.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

test_review_summary_callback.py

…

test_routing_provenance_reopen.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_seeded_session_create.py

fix(tui-gateway): a hidden seed row stays out of search, a partial seed copy is rolled back, live resume counts the wire (#107562)

2026-09-10 18:05:33 +00:00

test_serve_exit_flush.py

fix(serve): bounded flush-on-SIGTERM + periodic incremental session flush

2026-08-27 02:18:16 -07:00

test_session_control.py

refactor: share CLI goal commands across interactive surfaces

2026-09-07 00:51:41 -07:00

test_session_cwd_follow.py

…

test_session_db_ownership_teardown.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

test_session_foreign.py

refactor(desktop): import-session entry is a sidebar nav row; browser module named as a foreign_sessions sibling

2026-09-06 09:09:41 -07:00

test_session_git_metadata_generation.py

simplify(compat): hermes_cli small facades — drop 7 re-exports/aliases (+relay_runtime alias module), repoint 12 callers/tests

2026-09-03 13:05:57 -07:00

test_session_hidden_rpc.py

…

test_session_history_codex_sidecar.py

fix: restore persisted assistant replies alongside tools and reasoning

2026-09-07 04:56:22 -07:00

test_session_id_injection.py

…

test_session_images_dir.py

…

test_session_platform_resolution.py

…

test_session_profile_db.py

fix: editing a message in an old session fails (profile DB + window-relative ordinal) (#91302)

2026-08-21 06:02:19 +00:00

test_session_reclaim_notify.py

…

test_session_resume_db_ownership.py

test(tui): cover launch SessionDB binding under profile override windows

2026-09-11 06:24:11 -07:00

test_shared_session_delivery.py

fix(tui): bound subscriber delivery without blocking shared turns

2026-09-07 22:25:12 -07:00

test_slash_fuzzy.py

…

test_slash_review_owner.py

fix(tui-gateway): /review shows its reviewer in the Desktop subagent stack

2026-09-09 02:00:21 -07:00

test_slash_worker_ansi.py

…

test_slash_worker_mcp_discovery.py

…

test_slash_worker_profile_home.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

test_slash_worker_sys_path.py

…

test_slash_worker_watchdog.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_stale_provider_resume_live.py

test(tui-gateway): live E2E for stale-provider session.resume (real dispatch + state.db)

2026-08-28 02:59:17 -07:00

test_startup_orphan_sweep.py

simplify(compat): setup/model_switch/nous_subscription — drop 34 re-exports, repoint 14 callers + 26 test files (~100 sites)

2026-09-03 13:33:10 -07:00

test_stranded_session_adoption.py

fix(adoption): re-check donor growth at retire time, not just at export

2026-08-24 15:07:18 +05:30

test_subagent_child_mirror.py

…

test_subagent_snapshot.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

test_subprocess_encoding.py

simplify(compat): repoint the last stragglers (run_agent computer_use import, 8 test files patching old facade paths)

2026-09-03 15:15:53 -07:00

test_todo_state_events.py

fix(tui-gateway): subagent lifecycle survives display.tool_progress=off

2026-09-07 11:25:20 -07:00

test_tour_bridge_fail_fast.py

fix(tour): an unanswered tour bridge no longer costs 45s per action

2026-08-19 11:20:28 -05:00

test_tui_entry_mcp_owner.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_gateway_event_replay.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_gateway_loop_noise.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_gateway_queue_on_busy.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_gateway_server_crash_history.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_gateway_server.py

fix: status falls back to the live agent before the first host frame; recent route ties break deterministically

2026-09-13 14:45:41 -07:00

test_tui_gateway_ws.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_tui_mcp_late_refresh.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_turn_finished_failure_cause.py

fix(tui_gateway): keep a quoted prompt out of the turn-finished cause

2026-09-01 23:56:58 -07:00

test_undo_command.py

…

test_vault_methods.py

feat: agent signs into sites from an encrypted local vault (CLI, browser fill, Desktop Settings)

2026-09-10 10:35:07 -07:00

test_voice_live_delegation.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

test_wait_for_mcp_discovery.py

…

test_ws_keepalive_config.py

test: make tests/ mirror the source tree; drop issue numbers from filenames

2026-09-13 09:18:02 -07:00

test_ws_keepalive.py

fix(tui_gateway): enable TCP keepalive on websocket sockets (dead-peer detection)

2026-08-23 18:58:40 -07:00

test_ws_orphan_races.py

fix(tui-gateway): start each detachment with a fresh settlement budget

2026-09-07 07:05:21 -07:00

test_ws_send_timeout.py

fix(ws): give the send deadline its own 30s clock and close the stalled socket

2026-09-09 14:20:57 -07:00

test_ws_surrogate_send.py

fix(tui-gateway): keep the WebSocket open when a frame has a lone surrogate

2026-09-03 03:47:26 +05:30