Skip to content

fix: honor approvals.timeout across CLI and ACP#13088

Open
tomgreeEn wants to merge 1 commit into
NousResearch:mainfrom
tomgreeEn:fix/approval-timeout-config
Open

fix: honor approvals.timeout across CLI and ACP#13088
tomgreeEn wants to merge 1 commit into
NousResearch:mainfrom
tomgreeEn:fix/approval-timeout-config

Conversation

@tomgreeEn

Copy link
Copy Markdown

Summary

  • make ACP approvals inherit approvals.timeout from config when no explicit timeout is provided
  • allow non-positive ACP timeout values to wait indefinitely
  • make the main terminal CLI approval UI also honor approvals.timeout instead of a hardcoded 60s limit
  • add regression tests for both ACP and terminal CLI approval flows

Problem

Hermes had two separate 60-second approval timeouts:

  • the ACP approval bridge defaulted to 60 seconds
  • the main terminal CLI approval UI also hardcoded 60 seconds

This meant approvals.timeout in config.yaml was not fully honored, and users could still hit 1-minute expiry in regular terminal sessions even after fixing the ACP path.

Test Plan

  • run ./venv/bin/python -m pytest tests/acp/test_permissions.py tests/cli/test_cli_approval_ui.py -q -o 'addopts='
  • run ./venv/bin/python -m py_compile cli.py acp_adapter/permissions.py tests/cli/test_cli_approval_ui.py tests/acp/test_permissions.py
  • manually verify that dangerous-command approval prompts no longer expire after 60 seconds when approvals.timeout is set higher

Fixes #3765.

@alt-glitch alt-glitch added type/bug Something isn't working P2 Medium — degraded but workaround exists comp/cli CLI entry point, hermes_cli/, setup wizard comp/acp Agent Communication Protocol adapter area/config Config system, migrations, profiles labels Apr 22, 2026
- make ACP approvals inherit approvals.timeout when no explicit timeout is provided
- allow non-positive ACP timeout values to wait indefinitely
- make terminal CLI approval UI honor approvals.timeout instead of a hardcoded 60s limit
- add focused regression tests for ACP and terminal CLI approval flows

Fixes NousResearch#3765.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/config Config system, migrations, profiles comp/acp Agent Communication Protocol adapter comp/cli CLI entry point, hermes_cli/, setup wizard P2 Medium — degraded but workaround exists type/bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: make dangerous command approval timeout configurable

2 participants