Files
hermes-agent/tools/environments
teknium1 9d66f96340 fix: HASS_TOKEN stays out of child processes when the Home Assistant plugin is absent
Moving HA out of core dropped HASS_TOKEN/HASS_URL from the static provider blocklist and HASS_TOKEN
from the Tier-1 always-strip set. Once installed, the plugin's manifest declares them, but with the
plugin absent (migration pending, declined or failed) the token reached every terminal/subprocess
child. Each left-core row now names the env core stripped while it shipped the feature
(secret_env -> Tier 1, private_env -> provider blocklist) and local_env_policy keeps stripping it.
2026-10-04 00:08:20 -07:00
..
…
…