mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-11-06 05:17:15 +00:00
Yicheng-Mark
e1f356c10f
The monorepo's head adds a Windows CI matrix that runs every plugin's suite, and fixes the windows-ops packaged-payload scan so it no longer counts the bytecode the test run itself writes. No plugin behaviour changed: the only files touched between the two pins are the workflow and one test file.
21 lines
1.7 KiB
YAML
21 lines
1.7 KiB
YAML
name: hermes-wslc-sandbox
|
|
repo: https://github.com/Yicheng-Mark/hermes-windows-plugins
|
|
sha: 5bad3fb2baf04ce6befecfefce6d14f4c9c98934
|
|
subdir: wslc-sandbox
|
|
version: "0.1.0"
|
|
description: "Run Hermes' terminal, file and execute_code tools in a Linux container on Microsoft's WSL Containers (wslc) runtime, so Windows users who run WSL Containers get a sandbox without Docker Desktop. Disclosure — the plugin spawns the wslc CLI (one short-lived process per command, plus one long-lived container per environment) and every call runs inside that container; containers have outbound network access unless docker_network is false; persistent sandboxes are left stopped on disk until removed; host environment variables enter the container only when named in docker_forward_env, and only paths listed in docker_volumes are bind-mounted. wslc rejects --cap-drop, --security-opt, --pids-limit, --init and --storage-opt, so this sandbox is not capability-dropped the way the Docker backend's is, container_disk is reported but not enforced, and dangerous-command approval deliberately stays enabled for this backend. The plugin reads no credentials, stores none, and makes no network calls of its own."
|
|
maintainer: Yicheng-Mark
|
|
tier: community
|
|
category: tools
|
|
requires_hermes: ">=0.21.3"
|
|
docs_url: https://github.com/Yicheng-Mark/hermes-windows-plugins/tree/main/wslc-sandbox
|
|
platforms: [windows]
|
|
known_issues:
|
|
- "container_disk is reported but not enforced: wslc has no --storage-opt."
|
|
- "No capability dropping: wslc rejects --cap-drop and --security-opt, so dangerous-command approval stays enabled."
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks: []
|
|
provides_middleware: []
|
|
requires_env: []
|