[idea] Add configurable agent launch wrappers

[tan-yong-sheng]

idea / problem

I run some agents through a wrapper instead of launching them directly.

Example:

HERDR_AGENT=claude nono run --allow-cwd --profile claude -- claude --dangerously-skip-permissions

Today, I have to use shell aliases or wrapper scripts.

Herdr cannot launch agents through a custom wrapper.

requested change

Add configurable agent launch wrappers.

Example:

[[agent.launch_wrappers]]
match = "claude"

argv = [
  "nono",
  "run",
  "--allow-cwd",
  "--profile",
  "claude",
  "--",
  "{command}",
  "--dangerously-skip-permissions",
  "{args}"
]

Then:

herdr agent start --kind claude

would execute:

nono run --allow-cwd --profile claude -- claude --dangerously-skip-permissions

The wrapper should work with any executable, not only nono.

why you want this

• Run agents inside a sandbox.
• Improve security.
• Avoid shell aliases.
• Avoid wrapper scripts.
• Keep the configuration in Herdr.
• Support tools like nono, fence, bubblewrap, firejail, Docker, SSH, or other wrappers.

[kimchh]

I was also running into this issue and opened a discussion at #2136. I have working changes kimchh#1 if you would like to test locally for your use case.

[tan-yong-sheng]

I thought agent detection can be user-defined: https://herdr.dev/docs/agents/#vms-and-sandbox-wrappers

For example,

HERDR_AGENT=claude nono run --allow-cwd --profile claude 

With HERDR_AGENT=claude being specified, although it runs through wrappers, the agent detection can be detected ... But I am using nono sandbox but not other sandboxing solutions, so I am not sure if HERDR_AGENT=claude prefix can be applied to other coding agents or not ...

[tan-yong-sheng]

My problem is that I wish to have an easy way to start the coding agents with nono sandbox, for example, if the llm runs herdr agent start reviewer --kind codex , I hope that codex app is started with nono sandbox by default instead of without sandbox ... That's why I request for agent launch wrappers ...

Thanks a lot for your reply here.