Brooklyn Nicholson 28e6496a5e fix(web): scrub a session's on-disk artifacts in the delete endpoint ...

DELETE /api/sessions/{id} removed the DB row but never passed the
profile's sessions dir to SessionDB.delete_session, so the on-disk
transcript artifacts survived the UI delete: legacy session_<id>.json
snapshots (which can carry plaintext secrets) and the gateway's
request_dump_<id>_*.json dumps. The CLI delete path threaded the
directory all along; the endpoint was the outlier.

Also sweep the legacy session_<id>.json snapshot name in
SessionDB._remove_session_files so deletes and prunes clear it from
installs whose older builds wrote it.

Fixes #60207

Co-authored-by: izumi0uu <izumi0uu@gmail.com>

2026-09-26 22:52:51 -05:00

..

__init__.py

…

_common.py

refactor(dashboard): key the 503 payload by classify_persistence_error bucket

2026-09-24 16:47:38 +05:30

actions.py

fix(update): stop rendering 'managed outside dashboard' as a shell command

2026-09-26 06:23:43 +05:30

analytics.py

…

audio.py

fix(tts): stream Edge speak-stream per sentence instead of whole-text fallback

2026-09-24 19:28:05 -05:00

chat_workspaces.py

…

chat_ws_errors.py

…

chat_ws.py

fix(dashboard): report a PM node failure on /api/pty; give E2E sandboxes node

2026-09-24 13:06:06 -04:00

config_env.py

fix(desktop): pass provider_primary through /api/env so a card keeps its own key

2026-09-26 16:51:19 -05:00

cron.py

fix(cron): reconcile run history per execution and read it in the owner's scope

2026-09-26 17:19:04 -05:00

dashboard_ui.py

fix(profile): preserve scoped dashboard and launcher behavior

2026-09-23 11:00:15 -04:00

display.py

…

files.py

fix(desktop): decode UTF-8 child output explicitly on the serve/agent path (#83851)

2026-09-23 18:52:49 -05:00

git.py

…

local_models.py

fix(local-runtime): move models from the old per-profile models dir into the machine dir

2026-09-25 22:06:58 -04:00

mcp.py

…

memory_providers.py

…

messaging.py

Merge remote-tracking branch 'origin/main' into ethie/pm-clean

2026-09-24 06:08:20 -04:00

models.py

fix(web): bound the /api/model/info context-length probe

2026-09-25 17:17:48 -05:00

oauth.py

fix(accounts): stop stale Claude Code connections and false removal success

2026-09-25 14:25:49 -05:00

ops.py

…

profiles.py

fix(sessions): add sessions.show_subagents to list delegate runs

2026-09-26 20:40:40 -05:00

sessions.py

fix(web): scrub a session's on-disk artifacts in the delete endpoint

2026-09-26 22:52:51 -05:00

skills.py

fix(skills): keep built-in provenance for skills the catalog dropped

2026-09-25 14:24:56 -05:00

status.py

fix(desktop): show how far past the release an install is, not its commit

2026-09-24 14:23:48 -04:00

tools.py

…