Nathan Esquenazi e0a95193d8 fix: CSRF check supports reverse proxy headers (#218) (#219) ...

Tests pass: 20/21 QA suite (1 known skip), all browser API sanity checks green, CSRF fix verified end-to-end.

2026-04-10 01:24:18 -07:00

..

__init__.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

auth.py

fix(auth): prune expired sessions on every verify to prevent memory leak (#196)

2026-04-09 18:05:23 -07:00

config.py

fix: do not build phantom Custom group when active provider is set (#206)

2026-04-09 18:33:24 -07:00

helpers.py

fix(security): add unsafe-inline and CDN allowlist to CSP script-src (#209)

2026-04-09 19:07:51 -07:00

models.py

fix: broaden session ID validator to support new hermes-agent format (#212)

2026-04-10 00:00:02 -07:00

profiles.py

chore: add missing type hints across 10 files

2026-04-05 13:30:20 +07:00

routes.py

fix: CSRF check supports reverse proxy headers (#218) (#219)

2026-04-10 01:24:18 -07:00

startup.py

feat: auto-install missing agent deps on startup (#215)

2026-04-10 00:42:02 -07:00

state_sync.py

fix: sync message_count to state.db for /insights (#163) (#164)

2026-04-06 22:56:27 -07:00

streaming.py

fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)

2026-04-08 20:16:22 -07:00

updates.py

fix: use current branch upstream for update checks instead of default branch (#201)

2026-04-09 18:10:11 -07:00

upload.py

chore: add missing type hints across 10 files

2026-04-05 13:30:20 +07:00

workspace.py

chore: add missing type hints across 10 files

2026-04-05 13:30:20 +07:00