hermes - 💡(How to fix) Fix Docker backend: `network` capability exists but no `terminal.docker_network` config key [1 comments, 2 participants]

Version: v0.14.0

Summary: In v0.14.0, DockerEnvironment.__init__ accepts a network: bool argument and emits --network=none when false, but the factory in tools/terminal_tool.py never passes network=, and no config key feeds it. Docker sandboxes therefore always get network access.

Impact: Operators cannot restrict networking for sandboxes that do not need it — a useful defense-in-depth control against data exfiltration when a sandbox runs untrusted code or is prompt-injected.

Ask: Add a terminal.docker_network config key wired through the factory to DockerEnvironment.