Brooklyn Nicholson 6c3aae398a fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal ...

Chromium debug profile, media-cache and vision/computer-use cache dirs were
created with bare makedirs inheriting the umask (0755); their files landed
0644. Under the documented HERMES_HOME_MODE=0701 traversal hatch those stores
(Cookies, Login Data, screenshots, inbound media) were readable by every
other local account. Dirs are now created owner-only (0700) with the mode
passed to mkdir (no post-chmod window) and reconciled via the house
hermes_cli.config._secure_dir / _secure_file policy helpers, which keep the
managed/NixOS group-share carve-out and HERMES_UID/HERMES_GID ownership.
Cache files are written 0600 via os.open.

Deleting a session also left its journaled in-flight turn tail (user prompt
+ tool calls) in localStorage to age out on its own; purgeInFlightTurnJournals
now runs on both delete surfaces (sidebar removeSession and Settings
permanent delete), draining every id the delete holds.

Refs #77486

2026-10-01 01:50:16 -05:00

..

__init__.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

backend.py

fix(computer_use): the backend reports the AX-walk bound it actually sent

2026-09-22 16:16:30 +05:30

cua_backend_capture.py

refactor(computer_use): capture() derives the AX-walk bound from the args it sends

2026-09-22 16:16:30 +05:30

cua_backend_daemon.py

Merge origin/main into ethie/pm-clean

2026-09-23 20:04:27 -04:00

cua_backend_driver.py

…

cua_backend_input.py

…

cua_backend_parse.py

…

cua_backend_session.py

feat(bot_desktop): Bot Screen, computer_use and the browser run inside the terminal backend (#121169)

2026-09-28 03:34:07 -07:00

cua_backend.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

doctor.py

merge origin/main (2 commits) into ethie/pm-clean

2026-09-21 07:32:26 -04:00

permissions.py

Old pre-decomposition import paths are gone: plugin compat layer removed on schedule (#126164)

2026-09-28 10:21:41 -07:00

schema.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-23 07:36:31 -04:00

tool.py

fix(security): harden at-rest secrets in browser profiles, media caches, and the in-flight journal

2026-10-01 01:50:16 -05:00

vision_routing.py

fix: capture route is exactly the shared vision gate (review follow-up)

2026-09-20 10:16:27 -07:00