hermes-agent/tools/environments
teknium1 b177b4abad fix(security): block gateway and tool env vars in subprocesses
Extend subprocess env sanitization beyond provider credentials by blocking Hermes-managed tool, messaging, and related gateway runtime vars. Reuse a shared sanitizer in LocalEnvironment and ProcessRegistry so background and PTY processes honor the same blocklist and _HERMES_FORCE_ escape hatch. Add regression coverage for local env execution and process_registry spawning.
2026-03-15 02:51:04 -07:00
..
__init__.py feat(environments): add Daytona cloud sandbox backend 2026-03-05 10:02:21 -08:00
base.py fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths 2026-03-13 21:32:53 -07:00
daytona.py fix(security): pipe sudo password via stdin instead of shell cmdline 2026-03-10 06:34:59 -07:00
docker.py fix: clearer docker backend preflight errors (#1276) 2026-03-14 02:53:02 -07:00
local.py fix(security): block gateway and tool env vars in subprocesses 2026-03-15 02:51:04 -07:00
modal.py fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths 2026-03-13 21:32:53 -07:00
singularity.py fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths 2026-03-13 21:32:53 -07:00
ssh.py fix(security): pipe sudo password via stdin instead of shell cmdline 2026-03-10 06:34:59 -07:00