{"repo":"NousResearch/hermes-agent","public_id":"72892","display_label":"CORS headers missing on SSE stream endpoints","summary":"These members address missing CORS headers on server-sent event (SSE) stream responses in the API server, specifically affecting session chat stream endpoints. The work involves identifying the root cause and applying fixes to ensure CORS headers are consistently included on SSE responses.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":121745,"merged_at":"2026-09-25T16:00:23+00:00"},"resolution":{"state":"resolved","by":"pr-121745"},"freshness":{"state":"verified","last_verified_at":"2026-09-25T16:00:23+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":6358,"pr_number":121745,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-25T16:00:23+00:00"},{"issue_number":70503,"pr_number":121745,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-25T16:00:23+00:00"},{"issue_number":72892,"pr_number":121745,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-25T16:00:23+00:00"},{"issue_number":80757,"pr_number":121745,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-25T16:00:23+00:00"}],"members":[{"kind":"issue","number":72892,"title":"[Bug]: POST /api/sessions/{id}/chat/stream missing CORS headers — same root cause as #6358, different call site","url":null,"state":"closed"},{"kind":"pr","number":72945,"title":"fix(api-server): resolve CORS headers on session chat stream SSE response (#72892)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"346c14a9c5","number":0},{"kind":"pr","value":"#121745","number":121745},{"kind":"pr","value":"#72892","number":72892}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":121745,"title":"fix(api-server): CORS on every SSE stream, flush run-events head, report failed tools as tool.failed","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["contributors/emails/195337306+0xGr1mm@users.noreply.github.com","gateway/platforms/api_server.py","gateway/platforms/api_server_openai_routes.py","gateway/platforms/api_server_runs.py","tests/gateway/test_api_server.py","tests/gateway/test_api_server_runs.py","tests/gateway/test_session_api.py","website/docs/user-guide/features/api-server.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}