mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-26 17:38:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

fix(kanban): harden delegated-child mutation boundary

Browse source
This commit is contained in:
trkim 2026-07-22 20:35:32 +00:00 • committed by Teknium
parent 47bbc12e18
commit a7dcf9787b
11 changed files with 555 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tests/tools/test_execute_code_approval_cluster.py
View file

@ -464,6 +464,7 @@ def test_env_scrub_hermes_allowlist_and_secret_blocks():
# operational allowlist → kept
"HERMES_HOME": "/h", "HERMES_PROFILE": "p",
"HERMES_CONFIG": "/c.yaml", "HERMES_ENV": "/e",
"HERMES_DELEGATED_CHILD_CONTEXT": "1",
# other HERMES_* → dropped (broad prefix removed)
"HERMES_BASE_URL": "https://x", "HERMES_INTERACTIVE": "1",
"HERMES_KANBAN_DB": "postgres://u:p@h/db",
@ -475,7 +476,10 @@ def test_env_scrub_hermes_allowlist_and_secret_blocks():
}
out = _scrub_child_env(env, is_passthrough=lambda _: False, is_windows=False)
for kept in ("HERMES_HOME", "HERMES_PROFILE", "HERMES_CONFIG", "HERMES_ENV", "PATH"):
for kept in (
"HERMES_HOME", "HERMES_PROFILE", "HERMES_CONFIG", "HERMES_ENV",
"HERMES_DELEGATED_CHILD_CONTEXT", "PATH",
):
assert kept in out, f"{kept} should be kept"
for dropped in (
"HERMES_BASE_URL", "HERMES_INTERACTIVE", "HERMES_KANBAN_DB",