Erosika 4f12985cd2 fix(gateway): refuse relay sender fields from a logged-in client and say what the author trusts ...

bot_relay.deliver accepted from_profile, from_handle and from_connection from any admitted JSON-RPC client. The handler now refuses them with error 4095 when the calling transport carries a browser login identity, since a logged-in browser never relays for another connection. The DeliveryAuthor docstring now says the author is trusted because an admitted client relays it, not because the sender is verified.

2026-09-10 10:27:07 -07:00

..

__init__.py

…

_env.py

refactor(tui_gateway): split _apply_model_switch into phase helpers, compact controller/browser/relay/watcher/billing helpers

2026-09-02 22:47:13 -07:00

_stdin_recovery.py

refactor(tui_gateway): AST-neutral layout compaction of group H modules

2026-09-02 23:04:39 -07:00

agent_callbacks.py

fix(desktop): scope tool changes and commit rebuild ownership together

2026-09-07 06:26:22 -07:00

AGENTS.md

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

billing_view.py

refactor(tui_gateway): collapse billing/publisher/method_ctx defensive layers in group H

2026-09-02 23:41:16 -07:00

change_watcher.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

compute_host_bridge.py

fix(tui-gateway): preserve active isolated turns after disconnect

2026-09-06 20:26:11 +05:30

compute_host.py

fix(tui-gateway): preserve active isolated turns after disconnect

2026-09-06 20:26:11 +05:30

entry.py

fix(tui): publish session.control.update on every control mutation path; drop the Desktop-only heartbeat driver

2026-09-06 09:21:45 -07:00

event_publisher.py

refactor(tui_gateway): collapse billing/publisher/method_ctx defensive layers in group H

2026-09-02 23:41:16 -07:00

event_replay.py

fix(tui_gateway): size replay frames outside the lock; document the byte ceilings

2026-09-09 12:20:38 -07:00

git_probe.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

host_supervisor.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

hosted_room_driver.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

hosted_room_peer_http.py

refactor(tui_gateway): hosted-room X1 — inline one-site wrappers, drop dead PeerRunsHTTPError attrs, compact lease/cancel plumbing

2026-09-03 03:59:09 -07:00

hosted_room_peer_transport.py

refactor(tui_gateway): tighten W5 modules (host_supervisor, agent_callbacks, model_switch, change_watcher, compute_host_bridge, browser, hosted-room adapters, git_probe, method_ctx, bot_relay) 3037->2680 LOC, zero behavior change

2026-09-03 02:28:12 -07:00

hosted_room_server_rpc.py

refactor(tui_gateway): tighten W5 modules (host_supervisor, agent_callbacks, model_switch, change_watcher, compute_host_bridge, browser, hosted-room adapters, git_probe, method_ctx, bot_relay) 3037->2680 LOC, zero behavior change

2026-09-03 02:28:12 -07:00

hosted_room_service.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

loop_noise.py

refactor(tui_gateway): table-drive billing error kinds, share pet selection, compact group H docstrings

2026-09-02 23:25:59 -07:00

mcp_oauth_sessions.py

fix(mcp): enforce profile ownership throughout OAuth sessions

2026-09-07 06:10:28 -07:00

mcp_rpc_helpers.py

compat(plugins): temporary import-path shims for external plugins — ONE commit, revert on schedule

2026-09-03 17:13:22 -07:00

method_ctx.py

refactor(tui_gateway): tighten W5 modules (host_supervisor, agent_callbacks, model_switch, change_watcher, compute_host_bridge, browser, hosted-room adapters, git_probe, method_ctx, bot_relay) 3037->2680 LOC, zero behavior change

2026-09-03 02:28:12 -07:00

methods_bot_relay.py

fix(gateway): refuse relay sender fields from a logged-in client and say what the author trusts

2026-09-10 10:27:07 -07:00

methods_browser_control.py

fix(tui_gateway): check steer authority by transport membership under fan-out

2026-09-07 22:25:12 -07:00

methods_browser.py

simplify(compat): tools/browser_tool + browser_supervisor — drop 114 re-exports + 6 legacy aliases + PEP 562 requests/call_llm hook, repoint 21 non-test callers; siblings read sibling names directly

2026-09-03 14:16:54 -07:00

methods_complete_helpers.py

simplify(compat): interrupt — drop _ThreadAwareEventProxy/_interrupt_event legacy alias, repoint 2 test files

2026-09-03 14:00:59 -07:00

methods_complete.py

simplify(compat): hermes_cli/commands — drop the last PEP 562 lazy re-export hook (25 names), repoint 10 callers + 11 test files to commands_platforms/commands_completion

2026-09-03 17:00:26 -07:00

methods_config_set.py

fix(tui-gateway): point the sessionless model rejection at Settings -> Models

2026-09-09 12:26:33 -07:00

methods_config.py

simplify(compat): hermes_cli small facades — drop 7 re-exports/aliases (+relay_runtime alias module), repoint 12 callers/tests

2026-09-03 13:05:57 -07:00

methods_groups.py

simplify(compat): gateway — re-land 92d0bd0d73 (reverted by stale-index commit b818085298)

2026-09-03 13:12:50 -07:00

methods_images.py

refactor(tui_gateway): W4 wave2 pass 4 — profile/config_set docstring+comment compaction, mirror helpers

2026-09-03 02:36:23 -07:00

methods_profiles.py

simplify(compat): hermes_state — drop 81 re-exports + 3 registry aliases + 3 shims, repoint 45 callers + 60 test files

2026-09-03 13:46:50 -07:00

methods_projects.py

simplify(compat): hermes_cli small facades — drop 7 re-exports/aliases (+relay_runtime alias module), repoint 12 callers/tests

2026-09-03 13:05:57 -07:00

methods_prompt.py

fix(bot-mode): carry the relay sender into a live Bot Chat turn

2026-09-10 10:27:07 -07:00

methods_session_control.py

refactor: share CLI goal commands across interactive surfaces

2026-09-07 00:51:41 -07:00

methods_session_foreign.py

refactor(desktop): import-session entry is a sidebar nav row; browser module named as a foreign_sessions sibling

2026-09-06 09:09:41 -07:00

methods_session.py

fix(tui): fail closed on unavailable profile targets matching custom root basenames

2026-09-09 12:39:39 +05:30

methods_slash.py

fix(tui-gateway): /review shows its reviewer in the Desktop subagent stack

2026-09-09 02:00:21 -07:00

methods_subagents.py

fix: preserve subagent controls across attached session peers

2026-09-08 03:06:30 -07:00

methods_tools.py

feat(desktop): one row per plugin; desktop halves are app-level copies, never profile-scoped

2026-09-10 08:19:55 -07:00

methods_voice.py

simplify(compat): voice_mode/transcription_common — drop 9 re-exports + the _configured_stop_phrases seam, repoint 3 callers + 4 test files

2026-09-03 13:30:31 -07:00

model_switch.py

fix(desktop): scope tool changes and commit rebuild ownership together

2026-09-07 06:26:22 -07:00

project_tree.py

refactor(tui_gateway): X2 wave3 — compute_host guarded frame handlers + session-build split, groups profile/kwargs folds, project_tree placement/auto-bucket compaction, projects row/policy folds, entry+oauth plumbing trims (2653->2437 LOC)

2026-09-03 04:15:06 -07:00

prompt_attachments.py

refactor(tui_gateway): predicate-collapse hosted proof, table-driven receipt status, compact attachment staging

2026-09-03 02:36:02 -07:00

prompt_turn.py

fix(bot-mode): carry the relay sender into a live Bot Chat turn

2026-09-10 10:27:07 -07:00

render.py

refactor(tui): render/slash_fuzzy/turn_marker/synthetic_turn/slash_worker — shared import bridge, tier table, marker update helper

2026-09-02 22:39:38 -07:00

server.py

fix(tui): a real named profile "hermes" is not swallowed by the legacy-basename alias

2026-09-09 12:39:39 +05:30

session_auto_continue.py

fix(bot-mode): qualify a relayed author from the local connection too

2026-09-10 10:27:07 -07:00

session_compression.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

session_history.py

fix(agent): a /steer row is human input for every user-turn predicate

2026-09-09 13:08:25 +05:30

session_lifecycle.py

fix: resolve subagent control authority from the live session slot

2026-09-10 10:23:12 -07:00

session_notifications.py

fix(bot-mode): carry the relay sender into a live Bot Chat turn

2026-09-10 10:27:07 -07:00

session_reaper.py

fix(tui_gateway): fan session events out instead of rebinding the transport slot

2026-09-07 22:25:12 -07:00

session_transports.py

fix(tui): bound subscriber delivery without blocking shared turns

2026-09-07 22:25:12 -07:00

session_workdir.py

fix(tui): resolve default profile session names

2026-09-09 12:39:39 +05:30

slash_fuzzy.py

refactor(tui): compact module/function docstrings and comments (WHY preserved)

2026-09-03 00:03:43 -07:00

slash_worker.py

review-fix(comments): restore lost #NNNN rationale comments across non-test source (mechanical sweep, condensed, code unchanged)

2026-09-03 09:44:26 -07:00

synthetic_turn.py

refactor(tui): compact module/function docstrings and comments (WHY preserved)

2026-09-03 00:03:43 -07:00

tool_progress.py

fix(tui-gateway): subagent lifecycle survives display.tool_progress=off

2026-09-07 11:25:20 -07:00

transport.py

fix(tui): bound subscriber delivery without blocking shared turns

2026-09-07 22:25:12 -07:00

turn_marker.py

fix: admit Bot Chat deliveries through the live session owner

2026-09-07 16:48:29 -07:00

ws.py

fix(ws): give the send deadline its own 30s clock and close the stalled socket

2026-09-09 14:20:57 -07:00