2 Commits

Author	SHA1	Message	Date
nesquena-hermes	b82954ee70	feat(ui): session attention indicators — streaming spinner, unread dot, timestamps (#856) ... Closes #856. Co-authored-by: Frank Song <138988108+franksong2702@users.noreply.github.com> Reviewed-by: nesquena (709bd37 — test isolation fix also included)	2026-04-23 09:05:57 -07:00
nesquena-hermes	cbb4ba3f28	fix(profiles): profile isolation — new_session uses per-request profile, not process global (#800) ... Fixes the multi-client profile isolation bug (#798). - get_hermes_home_for_profile(): pure path resolver, validates name against _PROFILE_ID_RE (rejects path traversal), never mutates os.environ or globals - new_session() accepts explicit profile= param from POST body (S.activeProfile), short-circuits the process-level _active_profile global - streaming handler resolves HERMES_HOME from s.profile instead of the global - sessions.js sends profile: S.activeProfile in every new-session POST 10 tests in tests/test_issue798.py including concurrency and traversal coverage. Co-authored-by: nesquena <nesquena@users.noreply.github.com>	2026-04-21 16:16:51 +00:00