Skip to content

fix(mobile): session search and overview withhold transcript text (2.157.1) - #222

Merged
drknowhow merged 1 commit into
mainfrom
fix/mobile-sessions-privacy
Oct 14, 2026
Merged

drknowhow merged 1 commit into
mainfrom
fix/mobile-sessions-privacy

Conversation

@drknowhow

Copy link
Copy Markdown
Owner

Two leaks in the v7 session routes from #221, found while building the phone's Sessions screen. Both apply only when mobile_sessions_transcripts is off, which is the default.

  • GET /api/mobile/sessions?q= matched on prompts and first-prompt titles before they were blanked, so a search revealed which sessions contained a word. session_catalog._matches and filter_rows, plus list_sessions and list_many, now take transcripts=. It defaults to true, so the Hub behaves as before. With false, search sees only the id, branch, note, stale reason, and a title that did not come from the first prompt.
  • /api/mobile/sessions/overview passed a first-prompt title through as newest.title, because session_catalog.overview() did not include title_source, so the withholding check never fired. The test mocked overview with that field present, which hid the bug. newest now carries title_source, and a new test runs the real overview.

Tests: tests/test_mobile_fleet.py (+3), hub session routes and session catalog suites, 77 passed locally.

https://claude.ai/code/session_01HoyUtV4U8rmvyMqDPQdhxT

…157.1)

With mobile_sessions_transcripts off, ?q= still matched hidden prompts
and first-prompt titles, and the overview's newest title carried no
title_source, so a first-prompt title went out as is. Search now skips
text the caller cannot see, and overview says where its title came from.

Claude-Session: https://claude.ai/code/session_01HoyUtV4U8rmvyMqDPQdhxT
@groyep

groyep Bot commented Oct 14, 2026

Copy link
Copy Markdown

Gro could not finish this review.

@drknowhow
drknowhow merged commit 7050c32 into main Oct 14, 2026
12 checks passed
@drknowhow
drknowhow deleted the fix/mobile-sessions-privacy branch October 14, 2026 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant