JunghwanNA 243ebc7a61 Protect dashboard OAuth credentials with the same file-safety guarantees as other auth paths ... The web dashboard's Anthropic OAuth helper wrote the credential file straight to its final destination and relied on the process umask for permissions. That left the dashboard-specific path weaker than the existing auth writers, which already use owner-only permissions and safer write semantics. This change keeps the scope narrow: make the dashboard helper write via a temp file + replace, chmod the final file to owner-only, and add a focused regression test for both permission handling and atomic-write behavior. Constraint: Must preserve the existing dashboard OAuth flow and credential-pool side effects Rejected: Broader auth-storage refactor | unnecessary scope for a single verified inconsistency Confidence: high Scope-risk: narrow Reversibility: clean Directive: Keep dashboard credential writes aligned with existing auth storage semantics; do not reintroduce direct write_text() here without matching chmod/atomic behavior Tested: pytest -o addopts='' tests/hermes_cli/test_web_server_oauth_write.py tests/hermes_cli/test_web_server.py -q (78 passed) Not-tested: Cross-platform permission semantics on Windows-managed filesystems		2026-05-24 17:47:24 -07:00
..
acp	fix(acp): only deliver final_response after streaming when transformed	2026-05-24 04:31:13 -07:00
acp_adapter	feat(azure-foundry): add Microsoft Entra ID auth	2026-05-18 10:14:38 -07:00
agent	fix(security): close TOCTOU window when saving Claude Code OAuth credentials (#21152)	2026-05-24 17:45:12 -07:00
cli	test(cli): update resume usage-hint assertion for numbered selection	2026-05-24 16:22:48 -07:00
cron	Fix unsafe gateway media path delivery	2026-05-23 01:40:35 -07:00
e2e	refactor(gateway): migrate Discord adapter to bundled plugin (full Teams parity)	2026-05-22 14:21:41 -07:00
fakes
gateway	feat: support numbered resume selection in cli and gateway	2026-05-24 16:22:48 -07:00
hermes_cli	Protect dashboard OAuth credentials with the same file-safety guarantees as other auth paths	2026-05-24 17:47:24 -07:00
hermes_state	feat(session_search): single-shape tool with discovery, scroll, browse — no LLM (#27590)	2026-05-17 23:28:45 -07:00
honcho_plugin	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
integration	refactor(gateway): migrate Discord adapter to bundled plugin (full Teams parity)	2026-05-22 14:21:41 -07:00
openviking_plugin
plugins	fix(opencode-go): emit Kimi reasoning_effort, match KimiProfile shape	2026-05-23 02:20:28 -07:00
providers	fix(custom): pass custom provider extra body	2026-05-21 07:48:53 -07:00
run_agent	fix(agent): abort on HTTP 402 after pool rotation and fallback fail (#31443)	2026-05-24 15:14:13 -07:00
scripts	feat(acp-registry): switch to uvx distribution, drop npm launcher	2026-05-14 22:27:09 -07:00
skills	fix(skills): add timeout to Google OAuth urlopen calls	2026-05-19 00:11:44 -07:00
stress	docs: align kanban readiness docs and smoke tests	2026-05-18 21:07:03 -07:00
tools	fix(security): restrict write access to Anthropic OAuth credential store	2026-05-24 17:47:24 -07:00
tui_gateway	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
website
__init__.py
conftest.py	test: keep tirith checks hermetic	2026-05-23 02:20:14 -07:00
run_interrupt_test.py
test_account_usage.py
test_atomic_replace_symlinks.py
test_base_url_hostname.py
test_batch_runner_checkpoint.py
test_bitwarden_secrets.py	feat(secrets/bitwarden): EU Cloud + self-hosted server URL support (#31378)	2026-05-24 02:19:57 -07:00
test_cli_file_drop.py
test_cli_manual_compress.py	fix(tests): catch up six stale tests after compression/aux/kanban changes (#28465)	2026-05-18 21:43:59 -07:00
test_cli_skin_integration.py
test_ctx_halving_fix.py	fix(cache): kill long-lived prefix layout — system prompt is now byte-static within a session (#24778)	2026-05-12 20:46:04 -07:00
test_empty_model_fallback.py
test_env_loader_secret_sources.py	feat(secrets): label detected credentials with their source (Bitwarden) (#30364)	2026-05-22 03:32:58 -07:00
test_evidence_store.py
test_gateway_streaming_nested_config.py	fix(gateway): load streaming config from nested gateway.streaming key	2026-05-14 14:51:07 -07:00
test_get_tool_definitions_cache_isolation.py
test_hermes_bootstrap.py	fix(entry-points): guard hermes_bootstrap import so partial updates don't brick hermes (#22091)	2026-05-08 14:43:13 -07:00
test_hermes_constants.py	fix(security): guard os.chmod(parent) against / and top-level dirs	2026-05-20 22:56:55 -07:00
test_hermes_home_profile_warning.py
test_hermes_logging.py	fix(tests): catch up 25 stale tests after recent merges (#28626)	2026-05-19 01:28:32 -07:00
test_hermes_state.py	fix(gateway): separate observed Telegram group context	2026-05-23 01:33:42 -07:00
test_hermes_state_wal_fallback.py	fix(sqlite): fall back to journal_mode=DELETE on NFS/SMB/FUSE (#22043)	2026-05-09 02:09:35 -07:00
test_honcho_client_config.py
test_install_sh_browser_install.py	fix(install): support non-sudo service-user installs on apt distros (#25814)	2026-05-14 09:05:31 -07:00
test_install_sh_pythonpath_sanitization.py
test_install_sh_setup_wizard_tty_probe.py
test_install_sh_symlink_stomp.py	fix(install): preserve pip entry point when re-running on symlinked install	2026-05-14 07:08:45 -07:00
test_install_sh_termux_network_prereqs.py	fix: strengthen termux install network prerequisites	2026-05-07 13:04:08 -07:00
test_ipv4_preference.py
test_lazy_session_regressions.py
test_lint_config.py	lint: enable PLW1514 as a blocking ruff rule	2026-05-08 14:27:40 -07:00
test_live_system_guard_self_test.py	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
test_mcp_serve.py	fix(mcp): unwrap platforms key in channels_list	2026-05-07 13:41:16 -07:00
test_mini_swe_runner.py
test_minimax_model_validation.py
test_minimax_oauth.py	fix(minimax-oauth): refresh short-lived access tokens per request (#30619)	2026-05-22 15:16:15 -07:00
test_minisweagent_path.py
test_model_picker_scroll.py
test_model_tools.py	chore: remove Atropos RL environments and tinker-atropos integration (#26106)	2026-05-15 10:36:38 +05:30
test_model_tools_async_bridge.py
test_ollama_num_ctx.py
test_package_json_lazy_deps.py	fix(update): make Camofox lazy-installed instead of eager (#27055)	2026-05-16 12:15:45 -07:00
test_packaging_metadata.py
test_plugin_skills.py
test_process_loop_event_loop_warning.py	fix(cli): replace get_event_loop() with get_running_loop() to silence RuntimeWarning in process_loop thread (#19285)	2026-05-07 06:35:54 -07:00
test_project_metadata.py	fix(packaging): ship dashboard plugin assets in wheel	2026-05-18 20:35:00 -07:00
test_retry_utils.py
test_run_tests_parallel.py	test: use subprocesses for each test file (#29016)	2026-05-21 16:40:04 +05:30
test_sanitize_tool_error.py	security: sanitize tool error strings before injecting into model context (#26823)	2026-05-16 00:57:39 -07:00
test_sql_injection.py
test_subprocess_home_isolation.py	fix: avoid process-wide cron profile home mutation	2026-05-18 17:39:50 +00:00
test_termux_all_extra_compat.py	fix: add termux-all install profile and safe fallbacks	2026-05-07 13:04:08 -07:00
test_timezone.py	chore: ruff auto-fix PLR6201 resweep — tuple → set in membership tests (#27355)	2026-05-17 02:29:41 -07:00
test_toolset_distributions.py
test_toolsets.py	test(toolsets): lock web search into default platform coverage	2026-05-14 08:03:33 -07:00
test_trajectory_compressor.py
test_trajectory_compressor_async.py
test_transform_llm_output_hook.py	test+docs: cover transform_llm_output hook + release author map	2026-05-07 05:46:05 -07:00
test_transform_tool_result_hook.py
test_tui_gateway_server.py	fix(tui): stop slash dropdown from chopping last char of /goal (#31311)	2026-05-23 22:12:55 -07:00
test_utils_truthy_values.py
test_yuanbao_integration.py
test_yuanbao_markdown.py
test_yuanbao_pipeline.py
test_yuanbao_proto.py