teknium1 b177b4abad fix(security): block gateway and tool env vars in subprocesses ...

Extend subprocess env sanitization beyond provider credentials by blocking Hermes-managed tool, messaging, and related gateway runtime vars. Reuse a shared sanitizer in LocalEnvironment and ProcessRegistry so background and PTY processes honor the same blocklist and _HERMES_FORCE_ escape hatch. Add regression coverage for local env execution and process_registry spawning.

2026-03-15 02:51:04 -07:00

..

__init__.py

feat(environments): add Daytona cloud sandbox backend

2026-03-05 10:02:21 -08:00

base.py

fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths

2026-03-13 21:32:53 -07:00

daytona.py

fix(security): pipe sudo password via stdin instead of shell cmdline

2026-03-10 06:34:59 -07:00

docker.py

fix: clearer docker backend preflight errors (#1276)

2026-03-14 02:53:02 -07:00

local.py

fix(security): block gateway and tool env vars in subprocesses

2026-03-15 02:51:04 -07:00

modal.py

fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths

2026-03-13 21:32:53 -07:00

singularity.py

fix(cli): respect HERMES_HOME in all remaining hardcoded ~/.hermes paths

2026-03-13 21:32:53 -07:00

ssh.py

fix(security): pipe sudo password via stdin instead of shell cmdline

2026-03-10 06:34:59 -07:00