Description

When Hermes encounters a command that triggers the terminal safety filter (e.g. sudo tee to system dirs), it displays an approval prompt ([o]nce | [s]ession | [a]lways | [d]eny). The prompt freezes the CLI input area, making it impossible for the user to type a response.

Steps to Reproduce

1. Run a command triggering the danger classifier, e.g. sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg
2. Approval prompt appears
3. Input area is frozen — cannot type [a], [o], [s], or [d]
4. Times out after 60s: BLOCKED: User denied. Do NOT retry.

Environment

• Platform: WSL (Windows Subsystem for Linux)
• Hermes CLI interface
• approvals.mode: manual

Workaround

• Set approvals.mode: auto in ~/.hermes/config.yaml
• Use direct .deb downloads instead of sudo tee for apt repos

Expected Behavior

Approval prompt should accept keyboard input.

Actual Behavior

Input area freezes completely. User cannot respond, resulting in timeout and blocked command.