Cairn

embedded agent host worker-scope isolation opt-in

NousResearch/hermes-agent · cluster 116936 · agent

Data as of

4 open items. Fix attempted, not merged.

The short answer

1open issue
3open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 3 PRs.

These items concern a bug where background terminal commands from embedded agent hosts bypass per-worker scope isolation, causing leaked processes, and the associated fixes to add an opt-in mechanism and background command lifetime limits.

Open issues1

  • Issue#116936[Bug]: Background terminal commands from an embedded agent host (hermes-webui) skip worker-scope isolation and are never reaped; leaked Chromium trees exhausted the host

Open PRs3

  • PR#117020fix(tools): let embedded agent hosts opt into per-worker scope isolation (#116936)
  • PR#117054fix(terminal): worker-scope isolation opt-in + background lifetime cap
  • PR#117598fix(terminal): embedded agent hosts can opt into per-worker cgroup scopes; timeout schema says it does not bound background commands (#116936, salvage #117020)
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/116936.json
cluster/116936.md