Issues

• Request routes still act on a session whose file names another session (#9000 class): remaining routes and a boundary fix

  bug
  nesquena/hermes-webui#9019 · Filter by author nesquena-hermes opened on Nov 11, 2026 · Critical Bug Fix
  1

• Metadata-only reads of older sidecar layouts return a detached full session: stale-stream cleanup can drop a newer send, and the read can rewrite the file

  bug
  nesquena/hermes-webui#9017 · Filter by author nesquena-hermes opened on Nov 11, 2026 · Critical Bug Fix
  3

• Index rows keep a stale owner: the refresh drops a sidecar's None, and complete rows an older build wrote never refresh

  bug
  nesquena/hermes-webui#9012 · Filter by author nesquena-hermes opened on Nov 11, 2026 · Critical Bug Fix

• bug(sidebar): "WebUI sessions (N)" badge counts child sessions whose archived ancestor is hidden, so the rows never render

  bug
  nesquena/hermes-webui#9011 · Filter by author chaostracker opened on Nov 11, 2026 · Critical Bug Fix
  1

• test_approval_unblock.py never runs: it imports _ApprovalEntry from tools.approval, which moved to tools.approval_gateway_wait

  bug
  nesquena/hermes-webui#9008 · Filter by author nesquena-hermes opened on Nov 11, 2026 · Critical Bug Fix

• perf(transcript): the done event replaces the bounded tail window with the full session, so long sessions get slow right after every reply

  bugperformancesessionsprint-candidatestreaming
  nesquena/hermes-webui#8989 · Filter by author carlosagv86 opened on Nov 10, 2026 · Critical Bug Fix
  1

• perf(sessions): rate-floor hold can serve a stale title/count for up to 10 s after a commit hidden by a colliding stat pair (#8986 follow-up)

  bugperformance
  nesquena/hermes-webui#8987 · Filter by author nesquena-hermes opened on Nov 10, 2026 · Critical Bug Fix

• Feature request: per-profile appearance (theme / skin / font size) that follows the active profile

  enhancementux
  nesquena/hermes-webui#8985 · Filter by author zunami opened on Nov 10, 2026 · Backlog - Product Review
  2

• Server log: Agent warnings bypass the Agent's RedactingFormatter, so a base_url's user:password@ is logged in clear

  bugsecurity
  nesquena/hermes-webui#8984 · Filter by author nesquena-hermes opened on Nov 10, 2026 · Critical Bug Fix

• Context-length lookup: a non-string base_url becomes a URL string and is handed to the lookup with the route's key

  bug
  nesquena/hermes-webui#8982 · Filter by author nesquena-hermes opened on Nov 10, 2026 · Critical Bug Fix

• An unresolved ${VAR} in a named profile's custom provider api_key is sent to the provider as the literal key

  bug
  nesquena/hermes-webui#8976 · Filter by author nesquena-hermes opened on Nov 10, 2026

• Context-length lookup's credential choice differs from the chat's merge (cost-only)

  bug
  nesquena/hermes-webui#8975 · Filter by author nesquena-hermes opened on Nov 10, 2026

• Streaming drops the Agent's switched-off refusal: resolve_runtime_provider errors are printed and the turn routes through WebUI's merge

  buginvestigationprioritysecurity
  nesquena/hermes-webui#8974 · Filter by author nesquena-hermes opened on Nov 10, 2026 · Critical Bug Fix

• Chat pairs a named custom provider's key with another record's URL (credential-pool seeding and _runtime_preferred_base_url)

  buginvestigationprioritysecurity
  nesquena/hermes-webui#8973 · Filter by author nesquena-hermes opened on Nov 10, 2026 · Critical Bug Fix

• Gateway mode refusals: follow-ups to #8860 (owning profile, handoff summary, UI, test coverage)

  buginvestigationsecurity
  nesquena/hermes-webui#8971 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern
  2

• Manual compression worker reads the process-default profile's WebUI config

  buginvestigationprioritysecuritysprint-candidate
  nesquena/hermes-webui#8970 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Critical Bug Fix
  2

• /goal stores contract lines as plain goal text, and /goal gate add replaces the goal

  bugcli-parityprioritysprint-candidate
  nesquena/hermes-webui#8965 · Filter by author starship-s opened on Nov 9, 2026 · Critical Bug Fix
  1

• Context-length lookup selects alias and placeholder records for sessions the chat routes elsewhere

  buginvestigationsecurity
  nesquena/hermes-webui#8964 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern

• Chat sends a provider record's key to the model block's base_url when the Agent resolved that record at its own URL

  buginvestigationprioritysecurity
  nesquena/hermes-webui#8962 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Critical Bug Fix
  1

• Context-length lookup sends a built-in provider's record or model-block key that the chat never sends

  buginvestigationsecurity
  nesquena/hermes-webui#8960 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern

• Chat sends the keyless placeholder for a legacy custom_providers entry whose key is set with api_key_env

  buginvestigationpriority
  nesquena/hermes-webui#8959 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Critical Bug Fix

• Session update and chat start look up a key_cmd route's context window without a key, so the chat falls back to 256,000

  bugupstream-change
  nesquena/hermes-webui#8957 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern

• Context-length lookup takes its URL and context-length override from the first matching providers record, even a disabled one

  bug
  nesquena/hermes-webui#8955 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern

• Chat sends a built-in provider's key to a switched-off spelling's base_url when that record lists the model

  bugprioritysecurity
  nesquena/hermes-webui#8954 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Critical Bug Fix
  1

• Session context lookup asks the model block's URL when the chat's custom route uses key_cmd, a credential pool or a host-gated env key

  bugupstream-change
  nesquena/hermes-webui#8953 · Filter by author nesquena-hermes opened on Nov 9, 2026 · Backlog - Holding Pattern
  1