hermes-agent

mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-12 21:33:04 +08:00

Files

georgex8001 62b9fb6623 fix(acp): thread-safe interactive approval via contextvars

Concurrent ACP sessions run on a shared ThreadPoolExecutor (max_workers=4).
Each _run_agent mutated the process-global os.environ["HERMES_INTERACTIVE"]
and restored it in finally, so one session's restore could clobber another's
set mid-run — dropping the second session onto the non-interactive
auto-approve path, executing a dangerous command without the approval
callback firing (GHSA-96vc-wcxf-jjff).

Replace the env-var flag with a thread/task-local contextvar in
tools.approval. The two HERMES_INTERACTIVE read sites in approval.py now go
through _is_interactive_cli() (contextvar-first, env fallback for legacy
single-threaded CLI callers). The ACP executor sets the contextvar instead
of os.environ; the existing contextvars.copy_context() wrapper isolates each
session's write.

Co-authored-by: Hermes Agent <127238744+teknium1@users.noreply.github.com>

2026-06-30 03:24:58 -07:00

__init__.py

feat: restore ACP server implementation from PR #949 (#1254 )

2026-03-14 00:09:05 -07:00

__main__.py

feat: restore ACP server implementation from PR #949 (#1254 )

2026-03-14 00:09:05 -07:00

auth.py

feat(azure-foundry): add Microsoft Entra ID auth

2026-05-18 10:14:38 -07:00

edit_approval.py

fix(acp): use tempfile.gettempdir() in workspace auto-approve