hermes-agent

Commit Graph

Author	SHA1	Message	Date
Teknium	e807b7106c	test: set returncode on fake Popen proc (main's player loop reads returncode, not wait())	2026-07-28 18:12:26 -07:00
峯岸　亮	3ae25e0fbd	fix(security): scrub credentials from voice playback subprocesses ## Summary - Spawn system audio players (`ffplay` / `afplay` / `aplay`) with `hermes_subprocess_env(inherit_credentials=False)`. - Prevent gateway tokens and provider API keys from leaking into OS media helpers. - Add a regression test asserting scrubbed env on `Popen`. ## Salvage / credit Sibling of #70342 / incomplete #56332 (TTS/STT command scrub) on the voice-mode playback path.	2026-07-28 18:12:26 -07:00

Author

SHA1

Message

Date

Teknium

e807b7106c

test: set returncode on fake Popen proc (main's player loop reads returncode, not wait())

2026-07-28 18:12:26 -07:00

峯岸　亮

3ae25e0fbd

fix(security): scrub credentials from voice playback subprocesses

## Summary
- Spawn system audio players (`ffplay` / `afplay` / `aplay`) with `hermes_subprocess_env(inherit_credentials=False)`.
- Prevent gateway tokens and provider API keys from leaking into OS media helpers.
- Add a regression test asserting scrubbed env on `Popen`.

## Salvage / credit
Sibling of #70342 / incomplete #56332 (TTS/STT command scrub) on the voice-mode playback path.

2026-07-28 18:12:26 -07:00

2 Commits