emozilla d67c9d2a28 fix(dashboard): apply the sensitive-path guard to fs_read_text and fs_list ...

_is_sensitive_path documents itself as the read-side guard for list/read/
download (#57505), but only fs_read_data_url and fs_download called it.
fs_read_text returned .env / auth.json / mcp-tokens/* contents to an
authenticated dashboard session and fs_list enumerated them.

Move the check into _fs_regular_file, the resolver every fs reader goes
through, and drop the two per-handler copies. fs_list filters on the same
predicate alongside _FS_READDIR_HIDDEN.

Reported-by: Brian Grablin <bgrablin@gmail.com>

2026-09-13 23:20:01 -04:00

..

__init__.py

refactor(hermes_cli/web): compact git router (module-level imports, _probe_gh_auth), urllib_security, verify_cmd (_readiness_status), vercel_auth (_present inlined), seam docstrings

2026-09-02 21:28:23 -07:00

_common.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

actions.py

feat(dashboard): "Migrate to a single multiplexed gateway" on the System page

2026-09-12 01:49:28 -07:00

analytics.py

fix(web): report a corrupt state.db as a throttled 503 status instead of a traceback per poll

2026-09-11 06:37:27 -07:00

audio.py

feat(voice): GPT-Live voice chat mode — a full-duplex voice frontend that delegates to Hermes (Desktop)

2026-09-11 19:14:24 -07:00

chat_ws.py

fix(console): cancel/timeout interrupts the command's agent and waits for the worker

2026-09-09 10:58:16 -07:00

config_env.py

refactor(model): one persist writer for /model across CLI, gateway, TUI, dashboard; ACP + dashboard validate through switch_model

2026-09-13 05:21:02 -07:00

cron.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

dashboard_ui.py

feat(plugins): pin a plugin to a commit from Desktop, and show pins in every list

2026-09-10 05:09:15 -07:00

files.py

fix(dashboard): apply the sensitive-path guard to fs_read_text and fs_list

2026-09-13 23:20:01 -04:00

git.py

simplify(compat): web_routers — repoint 231 web_server.<name> seams to the owning module (105 direct imports, 113 late()/LateState() with module arg, 12 lazy imports + kanban plugin _ws_auth_ok)

2026-09-03 14:21:43 -07:00

local_models.py

fix(config): kanban decompose and local-models status keep their fail-open config reads

2026-09-13 05:09:06 -07:00

mcp.py

fix(dashboard): every MCP router site that expands ${VAR} refs runs under the requested profile's secret scope

2026-09-13 15:41:01 -07:00

memory_providers.py

fix(honcho): every honcho.json writer holds _refresh_lock and reads strictly

2026-09-13 19:05:28 +05:30

messaging.py

fix(gateway): hot-serve reaches pooled Desktop backends; deleted profiles leave no stale runtime entries

2026-09-12 08:49:16 -07:00

models.py

feat(desktop): persist auxiliary reasoning_effort through the models router

2026-09-13 19:19:32 -07:00

oauth.py

fix(dashboard): OAuth start routes resolve pollers late so test mocks intercept the spawned thread

2026-09-12 21:00:55 -07:00

ops.py

fix(multiplex): dashboard and gateway stop see a served profile's gateway as the multiplexer

2026-09-11 19:38:36 -07:00

profiles.py

fix(dashboard): profile-create validates the model in the dashboard's home, reports rejections

2026-09-13 05:21:02 -07:00

sessions.py

fix(desktop): key the page under the stamp its rows already carry

2026-09-11 13:08:19 +05:30

skills.py

revert: remove Collective Wisdom V1 (#94266)

2026-09-11 11:54:49 -07:00

status.py

fix(desktop,dashboard): served profile's api_server/webhook read connected with their /p/<profile>/ URL; shared-gateway restart asks first

2026-09-12 12:52:19 -07:00

tools.py

compat(plugins): warn once per name when a plugin resolves an old import path; lint step restored in CI

2026-09-04 00:15:16 -07:00