herm

About

herm is a coding agent built around the idea that isolation removes the need for constant permission prompts. The CLI runs on the host, but the agent's file edits and shell commands execute inside a Docker container scoped to the current working directory, with alternative isolation backends (in-process sandboxes, macOS sandbox-exec, Linux bubblewrap) for environments without Docker. When a project needs tooling that is not installed, herm writes a per-project Dockerfile itself and rebuilds the environment, so setup happens inside the agent loop rather than as a manual prerequisite. Models are provider-agnostic and can be mixed per role — one model for main coding, a cheaper one for exploration, another for vision — across Anthropic, OpenAI, Gemini, Grok, OpenRouter, and cloud endpoints. System prompts, skills, and tool implementations are all public in the repository, and a native iOS/macOS companion app with an on-device sandbox is in development.