mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-08 13:12:08 +00:00
Adds approvals.deny to config.yaml — a list of fnmatch globs matched against terminal commands. A match blocks unconditionally, BEFORE the --yolo / /yolo / approvals.mode=off bypass, making it the user-editable counterpart to the code-shipped hardline blocklist. - Checked in both command gates (check_dangerous_command and check_all_command_guards), after the hardline floor and sudo-stdin guard, before the yolo bypass and permanent allowlist. - Matching runs over the same normalized/deobfuscated command variants as the dangerous-pattern detector, case-insensitive. - Opt-in: empty/absent list is a no-op; behavior unchanged. Supersedes the trust-engine approach from #21500 with a minimal config-native design: the only capability the existing stack lacked was deny-that-beats-yolo. Allow already exists (command_allowlist), ask already exists (session approvals). |
||
|---|---|---|
| .. | ||
| docs | ||
| i18n/zh-Hans/docusaurus-plugin-content-docs/current | ||
| scripts | ||
| src | ||
| static | ||
| .gitignore | ||
| docusaurus.config.ts | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||
| sidebars.ts | ||
| tsconfig.json | ||
Website
This website is built using Docusaurus, a modern static website generator.
Installation
yarn
Local Development
yarn start
This command starts a local development server and opens up a browser window. Most changes are reflected live without having to restart the server.
Build
yarn build
This command generates static content into the build directory and can be served using any static contents hosting service.
Deployment
Using SSH:
USE_SSH=true yarn deploy
Not using SSH:
GIT_USER=<Your GitHub username> yarn deploy
If you are using GitHub pages for hosting, this command is a convenient way to build the website and push to the gh-pages branch.
Diagram Linting
CI runs ascii-guard to lint docs for ASCII box diagrams. Use Mermaid (````mermaid`) or plain lists/tables instead of ASCII boxes to avoid CI failures.