Code

History

Commits on master to api/workspace.py35+
  1. #5142: office-doc preview + safe docx editing (#540), rebased on master; optional depsnesquena-hermes committed 4 months ago76d6cc7
  2. fix(profiles): use profile-scoped resolver for /api/profile/active default_workspace (Codex gate #5169)claw-io committed 4 months ago159298d
  3. Prevent stale escape errors from collapsing live browse grantsRod Boev committed 4 months agod20e9dd
  4. Prevent file escape grants from breaking anchored reads (#4582)Rod Boev committed 4 months ago3401f58
  5. Preserve escape grants while locking second-hop regressionsRod Boev committed 4 months ago8caca99
  6. feat(workspace): allow browser-only escape-target navigation (#4582)Rod Boev committed 4 months ago0f80113
  7. harden(#4581): display-only escape symlinks must not disclose target path/metadatanesquena-hermes committed 4 months ago077de54
  8. stage #4581 onto master (v0.51.556) — surface escape-target symlinks as display-only workspace rowsnesquena-hermes committed 4 months ago1e18c33
  9. fix(#4326): reject embedded null byte in remote workspace candidateRod Boev committed 5 months ago34efedc
  10. fix review: fail-closed null-byte handling for workspace paths (#4273)nesquena-hermes committed 5 months agoc521937
  11. fix(workspace): harden remote POSIX workspace trust boundaries (#3664) (#4273)nesquena-hermes committed 5 months agob3e0896
  12. Release v0.51.296 — stage-3731 (remote-workspace blocked-root security fix #3731) (#3744)nesquena-hermes committed 5 months ago91a89fb
  13. Release v0.51.274 — Release IP (stage-p3c — symlink-swap TOCTOU hardening #3630) (#3680)nesquena-hermes committed 5 months ago9c6a96f
  14. Release v0.51.234 — Release HB (stage-q4) (#3488)nesquena-hermes committed 5 months agoed46c65
  15. Release v0.51.231 — Release GY (stage-q1) (#3484)nesquena-hermes committed 5 months ago0b0a179
  16. Release v0.51.221 — Release GO (stage-p3e — block all workspace symlink escapes + portable TOCTOU hardening [security]) (#3398) (#3451)nesquena-hermes committed 5 months ago7c48c37
  17. fix: preserve tilde workspace suggestionsai-ag2026 committed 5 months agocb01e04
  18. feat(workspace): add backend Git operationsstocky789 committed 5 months ago5fc7aee
  19. refactor: reduce stale workspace recovery fixdobby-d-elf committed 6 months ago516d942
  20. fix: recover from stale deleted workspacesdobby-d-elf committed 6 months agoe03c197
  21. fix: preserve inaccessible workspace entriesMichael Lam committed 6 months ago1192a0a
  22. fix(workspace): strip surrounding quotes from Add Space path inputnesquena-hermes committed 6 months agoff0d25f
  23. fix: batch v0.50.234-235 — XSS hardening, workspace validation, profile switch fixes (#1206)nesquena-hermes committed 6 months ago7189416
  24. fix(workspace): Allow /var/home workspaces (#1199)nesquena-hermes committed 6 months ago1f07d3d
  25. fix: batch v0.50.231 — macOS symlink bypass, workspace panel, fenced code leak (#1194)nesquena-hermes committed 6 months agoe61a405
  26. fix: batch v0.50.229 — session perf, ephemeral sessions, iOS zoom (#1183)nesquena-hermes committed 6 months agoa091be6
  27. fix: batch triage — 12 contributor PRs (v0.50.227) (#1168)nesquena-hermes committed 6 months ago8b8ff33
  28. fix(workspace): allow adding external paths not under home directory (#991)nesquena-hermes committed 6 months ago2800ebd
  29. feat(workspaces): autocomplete trusted workspace paths — v0.50.162 (PR #880 by @franksong2702, closes #616)Frank Song committed 6 months ago62c5617
  30. fix: HERMES_WEBUI_DEFAULT_WORKSPACE wins over settings.json; trust DEFAULT_WORKSPACE subtree (#610)nesquena-hermes committed 7 months ago2484409
  31. fix: allow /root workspace path; guard against split on missing [Attached files]Hermes Agent committed 7 months agoeb760a2
  32. fix: workspace list cleaner — all 1055 tests pass (#418)nesquena-hermes committed 7 months ago37850a4
  33. fix: cross-platform multi-workspace trust boundary (#417)nesquena-hermes committed 7 months ago415270f
  34. [security] fix(workspace): restrict session workspaces to trusted roots (#416)nesquena-hermes committed 7 months ago2a7a5dd
  35. security: bandit fixes B310/B324/B110 + QuietHTTPServer (#354)nesquena-hermes committed 7 months agodd17a0e