2 Commits

Author	SHA1	Message	Date
Teknium	e807b7106c	test: set returncode on fake Popen proc (main's player loop reads returncode, not wait())	2026-07-28 18:12:26 -07:00
峯岸　亮	3ae25e0fbd	fix(security): scrub credentials from voice playback subprocesses ... ## Summary - Spawn system audio players (`ffplay` / `afplay` / `aplay`) with `hermes_subprocess_env(inherit_credentials=False)`. - Prevent gateway tokens and provider API keys from leaking into OS media helpers. - Add a regression test asserting scrubbed env on `Popen`. ## Salvage / credit Sibling of #70342 / incomplete #56332 (TTS/STT command scrub) on the voice-mode playback path.	2026-07-28 18:12:26 -07:00