hermes-agent/tools/environments
Teknium 556e0f4b43 fix(docker): add explicit env allowlist for container credentials (#1436)
Docker terminal sessions are secret-dark by default. This adds
terminal.docker_forward_env as an explicit allowlist for env vars
that may be forwarded into Docker containers.

Values resolve from the current shell first, then fall back to
~/.hermes/.env. Only variables the user explicitly lists are
forwarded — nothing is auto-exposed.

Cherry-picked from PR #1449 by @teknium1, conflict-resolved onto
current main.

Fixes #1436
Supersedes #1439
2026-03-17 02:34:35 -07:00
..
__init__.py feat(environments): add Daytona cloud sandbox backend 2026-03-05 10:02:21 -08:00
base.py fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths 2026-03-13 21:32:53 -07:00
daytona.py fix(security): pipe sudo password via stdin instead of shell cmdline 2026-03-10 06:34:59 -07:00
docker.py fix(docker): add explicit env allowlist for container credentials (#1436) 2026-03-17 02:34:35 -07:00
local.py fix(security): block sandbox backend creds from subprocess env (#1264) 2026-03-17 02:20:42 -07:00
modal.py fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths 2026-03-13 21:32:53 -07:00
persistent_shell.py add different polling intervals for ssh and local backends. ssh has a 2026-03-15 02:54:32 +05:30
singularity.py fix(terminal): add Singularity/Apptainer preflight availability check 2026-03-16 18:25:20 +03:00
ssh.py merge: resolve conflicts with origin/main (SSH preflight check) 2026-03-15 21:13:40 -07:00