{"repo":"NousResearch/hermes-agent","public_id":"116936","display_label":"embedded agent host worker-scope isolation opt-in","summary":"These items concern a bug where background terminal commands from embedded agent hosts bypass per-worker scope isolation, causing leaked processes, and the associated fixes to add an opt-in mechanism and background command lifetime limits.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":3,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":116936,"title":"[Bug]: Background terminal commands from an embedded agent host (hermes-webui) skip worker-scope isolation and are never reaped; leaked Chromium trees exhausted the host","url":null,"state":"open"},{"kind":"pr","number":117020,"title":"fix(tools): let embedded agent hosts opt into per-worker scope isolation (#116936)","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":117054,"title":"fix(terminal): worker-scope isolation opt-in + background lifetime cap","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#116774","number":116774},{"kind":"pr","value":"#116936","number":116936}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":117598,"title":"fix(terminal): embedded agent hosts can opt into per-worker cgroup scopes; timeout schema says it does not bound background commands (#116936, salvage #117020)","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#117054","number":117054}],"category":"wontfix_bydesign","implication":"wontfix"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}