Adolanium 2770f93064 fix(profiles): reject traversal-shaped profile names in get_profile_dir ...

A WS 'profile' param like '../../foo' normalized to a path component that
escaped the profiles root, letting a connected client bind an arbitrary
existing directory as a profile home (state.db opened there, and session
delete chains into per-id file cleanup under <dir>/sessions/).

get_profile_dir now validates the canonical name against the profile id
regex before joining it under profiles/. The regex only, not the reserved
list, so pre-reserved-list dirs like profiles/hermes keep resolving.
Callers that probe existence (profile_exists, _profile_home, the 4064
resolvers) treat ValueError as 'not found'.

2026-09-13 15:45:57 -07:00

..

__init__.py

…

_env.py

refactor(tui_gateway): split _apply_model_switch into phase helpers, compact controller/browser/relay/watcher/billing helpers

2026-09-02 22:47:13 -07:00

_stdin_recovery.py

refactor(tui_gateway): AST-neutral layout compaction of group H modules

2026-09-02 23:04:39 -07:00

agent_callbacks.py

fix(tui_gateway): prompt.background side agent holds its own registry reference

2026-09-13 15:41:01 -07:00

AGENTS.md

refactor(ts): one GatewayEventMap in apps/shared typed from tui_gateway emitters; drop never-emitted tool.progress

2026-09-13 05:42:31 -07:00

billing_view.py

feat(desktop): Nous free tier on Hermes Desktop (#105260)

2026-09-11 03:45:32 +05:30

change_watcher.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

compute_host_bridge.py

fix(tui-gateway): stamp the login on the session record so rebuilds keep it

2026-09-13 19:05:39 +05:30

compute_host.py

fix(tui-gateway): stamp the login on the session record so rebuilds keep it

2026-09-13 19:05:39 +05:30

connector_payload.py

Guided first launch behind HERMES_GUEST_ONBOARDING: intro, guided chat, first task in default (NS-848, PR B1) (#107958)

2026-09-11 15:45:43 +05:30

entry.py

fix(mcp): key the desktop/TUI discovery slot by profile home (#67605)

2026-09-11 19:50:46 -07:00

event_publisher.py

refactor(tui_gateway): collapse billing/publisher/method_ctx defensive layers in group H

2026-09-02 23:41:16 -07:00

event_replay.py

fix(tui_gateway): size replay frames outside the lock; document the byte ceilings

2026-09-09 12:20:38 -07:00

git_probe.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

host_supervisor.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

hosted_room_driver.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

hosted_room_member_activity.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

hosted_room_peer_http.py

refactor(tui_gateway): hosted-room X1 — inline one-site wrappers, drop dead PeerRunsHTTPError attrs, compact lease/cancel plumbing

2026-09-03 03:59:09 -07:00

hosted_room_peer_transport.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

hosted_room_server_rpc.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

hosted_room_service.py

fix(hosted-rooms): local_profiles skips the profile-delete tombstone dir

2026-09-11 06:21:48 -07:00

launch_terminal_policy.py

fix(tui-gateway): launch-profile turns keep their env-only terminal policy once multiplexing is active

2026-09-13 14:31:21 -07:00

loop_noise.py

refactor(tui_gateway): table-drive billing error kinds, share pet selection, compact group H docstrings

2026-09-02 23:25:59 -07:00

mcp_oauth_sessions.py

fix(mcp): enforce profile ownership throughout OAuth sessions

2026-09-07 06:10:28 -07:00

mcp_rpc_helpers.py

fix(profiles): reject traversal-shaped profile names in get_profile_dir

2026-09-13 15:45:57 -07:00

method_ctx.py

refactor(tui_gateway): tighten W5 modules (host_supervisor, agent_callbacks, model_switch, change_watcher, compute_host_bridge, browser, hosted-room adapters, git_probe, method_ctx, bot_relay) 3037->2680 LOC, zero behavior change

2026-09-03 02:28:12 -07:00

methods_bot_relay.py

fix(bot-relay): gateway drain root uses the same formula as the tool-side writers

2026-09-13 05:09:06 -07:00

methods_browser_control.py

fix(tui_gateway): check steer authority by transport membership under fan-out

2026-09-07 22:25:12 -07:00

methods_browser.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

methods_complete_helpers.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

methods_complete.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

methods_config_set.py

fix: normalize empty fast status to normal without changing tier

2026-09-12 07:59:59 -07:00

methods_config.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

methods_connectors.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

methods_free_tier.py

The free tier is created in one place, at boot, only behind HERMES_GUEST_ONBOARDING=1 (NS-847) (#107697)

2026-09-11 03:45:33 +05:30

methods_groups.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

methods_images.py

refactor(tui_gateway): W4 wave2 pass 4 — profile/config_set docstring+comment compaction, mirror helpers

2026-09-03 02:36:23 -07:00

methods_profiles.py

fix(profiles): reject traversal-shaped profile names in get_profile_dir

2026-09-13 15:45:57 -07:00

methods_projects.py

simplify(compat): hermes_cli small facades — drop 7 re-exports/aliases (+relay_runtime alias module), repoint 12 callers/tests

2026-09-03 13:05:57 -07:00

methods_prompt.py

fix(tui_gateway): prompt.background side agent holds its own registry reference

2026-09-13 15:41:01 -07:00

methods_session_control.py

refactor: share CLI goal commands across interactive surfaces

2026-09-07 00:51:41 -07:00

methods_session_foreign.py

refactor(desktop): import-session entry is a sidebar nav row; browser module named as a foreign_sessions sibling

2026-09-06 09:09:41 -07:00

methods_session.py

fix: status falls back to the live agent before the first host frame; recent route ties break deterministically

2026-09-13 14:45:41 -07:00

methods_slash.py

refactor(agent): manual /compress runs through one core with --preview/--aggressive on every surface

2026-09-13 05:20:26 -07:00

methods_subagents.py

fix: preserve subagent controls across attached session peers

2026-09-08 03:06:30 -07:00

methods_tools.py

fix: reload.mcp rediscovers under every live session's profile scope

2026-09-13 14:46:12 -07:00

methods_vault.py

feat(vault): zero-setup UX — save a login on the page that needs it, managers auto-detected, one "Passwords & Logins" surface

2026-09-10 10:35:07 -07:00

methods_voice.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

model_switch.py

refactor(model): one persist writer for /model across CLI, gateway, TUI, dashboard; ACP + dashboard validate through switch_model

2026-09-13 05:21:02 -07:00

onboarding_personalization.py

chore(desktop): literal comments across the onboarding flow (#108438)

2026-09-12 10:00:08 +05:30

project_tree.py

refactor(tui_gateway): X2 wave3 — compute_host guarded frame handlers + session-build split, groups profile/kwargs folds, project_tree placement/auto-bucket compaction, projects row/policy folds, entry+oauth plumbing trims (2653->2437 LOC)

2026-09-03 04:15:06 -07:00

prompt_attachments.py

refactor(tui_gateway): predicate-collapse hosted proof, table-driven receipt status, compact attachment staging

2026-09-03 02:36:02 -07:00

prompt_turn.py

fix(tui-gateway): launch-profile turns keep their env-only terminal policy once multiplexing is active

2026-09-13 14:31:21 -07:00

render.py

refactor(tui): render/slash_fuzzy/turn_marker/synthetic_turn/slash_worker — shared import bridge, tier table, marker update helper

2026-09-02 22:39:38 -07:00

server.py

fix(profiles): reject traversal-shaped profile names in get_profile_dir

2026-09-13 15:45:57 -07:00

session_auto_continue.py

fix(bot-mode): qualify a relayed author from the local connection too

2026-09-10 10:27:07 -07:00

session_compression.py

refactor(agent): manual /compress runs through one core with --preview/--aggressive on every surface

2026-09-13 05:20:26 -07:00

session_history.py

Seeded sessions survive a gateway restart and store their seed once (tui_gateway) (#107549)

2026-09-10 17:55:24 +00:00

session_lifecycle.py

feat(tui_gateway): fire agent_loop_stopped on session.interrupt too

2026-09-12 22:19:44 -07:00

session_notifications.py

fix(tui_gateway): foreign-profile pollers hand back events another profile's lineage owns

2026-09-13 15:41:01 -07:00

session_reaper.py

fix(tui_gateway): fan session events out instead of rebinding the transport slot

2026-09-07 22:25:12 -07:00

session_transports.py

fix(tui-gateway): stamp the login on the session record so rebuilds keep it

2026-09-13 19:05:39 +05:30

session_workdir.py

fix(state): durable _row_id adoption after rewind is opt-in (TUI) instead of every warm caller

2026-09-13 05:20:26 -07:00

slash_fuzzy.py

refactor(tui): compact module/function docstrings and comments (WHY preserved)

2026-09-03 00:03:43 -07:00

slash_worker.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

synthetic_turn.py

refactor(tui): compact module/function docstrings and comments (WHY preserved)

2026-09-03 00:03:43 -07:00

tool_progress.py

feat(plugins): on_room_member_activity hook projects Group Chat member runtime events to plugins

2026-09-11 19:04:58 -07:00

transport.py

fix(tui): bound subscriber delivery without blocking shared turns

2026-09-07 22:25:12 -07:00

turn_marker.py

fix(utils): writers that published through mkstemp on main keep NEW files at 0600

2026-09-13 05:07:11 -07:00

ws.py

fix(honcho): keep observation flags across a flush rebuild, never orphan an evicted session, namespace dashboard logins

2026-09-13 19:05:39 +05:30