Rose 3bdf430413 merge: upgrade to upstream v0.50.95 + keep custom additions ...

Upstream v0.50.95 features merged (Russian localization, slash commands,
mic toggle fix, gateway sync fix, KaTeX/Prism.js, etc.)

Custom additions preserved:
- Tier-2 agent switching commands in commands.js
- MC panel in index.html + MC CSS
- _resolve_cli_toolsets() in config.py
- Custom routes.py, server.py, boot.js, i18n.js, messages.js, workspace.js

Files with conflict resolution (took upstream, custom code in other files):
- CHANGELOG.md, config.py, commands.js, index.html, panels.js, style.css, ui.js

2026-04-19 10:06:28 +02:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

auth.py

security: bandit fixes B310/B324/B110 + QuietHTTPServer (#354)

2026-04-13 11:11:56 -07:00

clarify.py

feat: harden clarify dialog flow and refresh recovery

2026-04-15 13:10:50 +08:00

commands.py

feat: slash command parity + skill autocomplete — v0.50.91 (PR #711)

2026-04-19 05:37:44 +00:00

config.py

merge: upgrade to upstream v0.50.95 + keep custom additions

2026-04-19 10:06:28 +02:00

gateway_watcher.py

fix(sessions): return None instead of 'unknown' for missing gateway session model (fixes #443)

2026-04-14 19:06:22 +00:00

helpers.py

fix(csp): allow external https images in img-src — closes #608

2026-04-16 23:34:21 -07:00

models.py

feat(/compress): manual session compression with focus topic — closes #469 (PR #619 by @franksong2702)

2026-04-18 06:55:04 +00:00

onboarding.py

fix(onboarding): remove CLI fast path from _provider_oauth_authenticated — fixes 4 test failures

2026-04-18 07:23:16 +00:00

profiles.py

fix: explicit UTF-8 encoding on all read_text() calls — v0.50.89 (PR #700 by @woaijiadanoo)

2026-04-19 04:22:28 +00:00

routes.py

merge: upgrade to upstream v0.50.95 + keep custom additions

2026-04-19 10:06:28 +02:00

session_ops.py

feat: slash command parity + skill autocomplete — v0.50.91 (PR #711)

2026-04-19 05:37:44 +00:00

startup.py

v0.46.0: security, Docker UID/GID, model discovery, i18n, cancel fix

2026-04-11 10:17:52 -07:00

state_sync.py

security: bandit fixes B310/B324/B110 + QuietHTTPServer (#354)

2026-04-13 11:11:56 -07:00

streaming.py

fix: XML tool-call leak + workspace empty-state + notification text — v0.50.92 (PR #712)

2026-04-19 05:40:37 +00:00

updates.py

fix: improve self-update git pull diagnostics (#287)

2026-04-12 00:19:33 -07:00

upload.py

v0.50.25: mobile scroll, import timestamps, profile security, mic fallback (#404)

2026-04-13 22:11:45 -07:00

workspace.py

fix: HERMES_WEBUI_DEFAULT_WORKSPACE wins over settings.json; trust DEFAULT_WORKSPACE subtree (#610)

2026-04-16 18:09:16 -07:00