Hermes Agent

~/NousResearch/hermes-agent

Self-improving AI agent with persistent memory, learning loop, and multi-platform support (Telegram, Discord, CLI, WhatsApp, Signal, Slack). 40+ built-in tools, cron scheduling, and autonomous subagents.

latest

v0.22.4

total

stable

first tracked

May 28, 2026

updated

7h ago

last checked: 7h ago │ Tier 2 refresh

#ai #agent #self-improving #persistent-memory #multi-platform #open-source

●●● clwatch

Check if your agent is current:

$ clwatch diff hermes-agent

$ clwatch refresh hermes-agent

learn more about clwatch →

/changelog

v0.22.4 [Oct 21, 2026] (23h ago) details → github →

# Hermes Agent v0.22.4

Hermes Agent v0.22.4

Release Date: October 21, 2026

> Patch release. Desktop stops showing suggestion pills above the composer, plus small plugin and dashboard fixes, for the CLI and installer, the Microsoft Store app, Docker and Hermes Cloud.

Fixes

Desktop no longer shows suggestion pills above the composer. The pills appeared for no clear reason, mostly nudging you to set up MCP servers. They and the helpers that only they used are gone. (#142559)
Plugins that install nothing skip the dependency consent step. A plugin that declares no dependencies, or whose pyproject.toml installs nothing, now enables without an empty consent prompt. (#142569)
Dashboard: WhatsApp can be safely re-paired after logging out. (#142439)
Desktop plugin review: the surface lint no longer flags prototype writes; reviewers check them by hand. (#142586)
Desktop: the approval-mode chip follows the active profile's mode. (#142565)
Release builds: the desktop bundle's pre-build check gets enough time to verify archived build inputs when storage is slow. (#142623)

Also new in the plugin catalog: bubblewrap (bwrap terminal backend on Linux), Singularity/Apptainer, mcp-serve (Hermes as an MCP server), agent-importers (hermes import-agent, now with Cursor), inbox and workflow-record from Hermes Labs. Telegram Business moves to the Hermes Labs community tier.

About this release

Measured at commit 4d04303818b, the window since v0.22.3 contains 14 non-merge commits across 82 changed files (+1,475 / −3,022) and 13 merged PRs.

Updating

Microsoft Store app: updates through the Store.
Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
CLI: hermes update, or re-run the installer one-liner.
Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.3...v0.22.4

v0.22.3 [Oct 21, 2026] (1d ago) details → github →

# Hermes Agent v0.22.3

Hermes Agent v0.22.3

Release Date: October 21, 2026

> Patch release. This tag rolls up the ~620 PRs merged since v0.22.2 into a stable release for the CLI and installer, the Microsoft Store app, Docker and Hermes Cloud. Full curated notes for this window ship with v0.23.0.

About this release

Measured at commit 5b147ab036d, the window since v0.22.2 contains 2,911 non-merge commits across 4,206 changed files (+360,278 / −64,308), about 620 merged PRs and 326 closed issues.

Also in the window, undocumented here on purpose: MCP progress notifications streamed as live tool progress, a refreshed classic CLI layout (glyph transcript, status line under the composer, two-line header), OAuth clients that plugins declare and Hermes signs in and refreshes, hermes plugins update offering every available plugin update plus an Update button for git-installed plugins in Desktop, steering and editing a queued prompt from Desktop, a guided subagent model and provider picker in Desktop, a live /loop countdown row in the CLI and TUI, opt-in Telegram DM topic transfer, a post_compaction plugin hook, a capabilities catalog, the Microsoft Store build going live automatically when a release publishes, session auto-prune back to opt-in with a one-time prompt when disk runs low, Nemotron 3.5 Bolt and one-slot DFlash drafts in the local runtime, and dozens of new plugin catalog entries.

Full curated release notes for this window ship with v0.23.0, which will document everything from v0.22.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

Microsoft Store app: updates through the Store.
Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
CLI: hermes update, or re-run the installer one-liner.
Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.2...v0.22.3

v0.22.2 [Oct 15, 2026] (7d ago) details → github →

# Hermes Agent v0.22.2

Hermes Agent v0.22.2

Release Date: October 15, 2026

v0.22.1 was built from the wrong commit. It shipped unreleased gateway work, and the Microsoft Store app could stick on "Connecting." 0.22.2 is the release 0.22.1 was meant to be.

> Known issue: Sessions that ran under the 0.22.1 gateway can't be deleted in 0.22.2.

Highlights

The gateway starts after a reboot again. After a restart, Linux can hand an early PID to an unrelated process, and the gateway could mistake it for a running gateway, so a supervised gateway (systemd, launchd, Docker) refused to start. Hermes now records the boot it started in, and when it can't tell, it asks the host lock, which only a live gateway holds. (#138594, fixes #133744)
Long local-model turns survive on laptops. Local requests always stream with prompt-reading progress (shown in the status line), stall timers skip time the machine was asleep, a recovered local server gets another try instead of a breaker that failed every later message, and compression no longer times out while the server is still reading a long conversation. On Windows unified-memory machines, model launch and the prompt cache are sized to free memory. (#138560)

Below is everything in the 0.22 release line since v0.22.0: the fixes 0.22.1 was meant to ship, plus the two above. Work that is only on main ships with v0.23.0.

✨ Features

Release: split the Microsoft Store bundle into its own windows-store lane (f9d8a740) — @ethernet8023
Agent: add nemotron super 3.5 default parameters (c59d2994) — @elisam0
Cli: add nemotron to NVIDIA NIM default model list (cc55270e) — @elisam0
Cli: add curated model list at the top in the model picker list (e6835fd3) — @elisam0
Release: choose what a stable release builds and tests with lanes (36a8ee18) — @ethernet8023
Plugin-catalog: add hermes-lang-ko — Korean Desktop language pack (e5f49b6a) — @dandacompany
Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) — @StudioCodeAI
Contributors: add 2867297362mjb-sketch email mapping (9ab40641) — @2867297362mjb-sketch
Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) — @2867297362mjb-sketch
Plugin-catalog: add author-feed (5f6d6836) — @TakeshiTGAL
Plugin-catalog: bump aux-ledger to 1.4.0 (6048066e) — @olric3015
Plugin-catalog: add the wait-ledger catalog card (77cb58e5) — @olric3015
Plugin-catalog: add wait-ledger (97e65322) — @olric3015
Community plugin: lightningai + lightningai-rate-limit (07515466) — @dinosauria123
Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) — @TREE-Ind
Plugin-catalog: add openinvest (b6e86101) — @longsizhuo
Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) — @Sahil-SS9
Plugins: move Kumiho Memory to memory catalog shelf (46f95e08) — @kaveone
Release: dispatch Stable Release from the default branch (667e6639) — @ethernet8023

🔧 Improvements

Agent: keep the Mistral tool-id rule beside its only consumer (c5fc0958) — @kshitijk4poor
Profiles: build the seed routing view once; expand enabled too (311155fa) — @kshitijk4poor
Profiles: simplify the model seed and trim its tests (d9dfb124) — @kshitijk4poor
Update nemotron super 3.5 name (3224993a) — @elisam0
Hermes_cli: update nemotron 3.5 name (108ae4e7) — @elisam0
Catalog: re-pin showly to the build without the upstream self-update check (6462f64a) — @slchris
Catalog: update Model Router to v0.4.3 native preferences (6a097ee9) — @metamindedu

🐛 Bug Fixes

Gateway: a recorded boot epoch that cannot be compared is unprovable (79b3b724) — @ethernet8023
Local: keep long local-model turns alive on laptops (518ce272) — @emozilla
Gateway: a read-only host-record check never creates the lock file (91e63f84) — @kshitijk4poor
Gateway: let the host lock decide a legacy record that looks older than this boot (4d984677) — @ethernet8023
Gateway: anchor the legacy host-record check on boot time, not a live create_time (5b416e42) — @ethernet8023
Gateway: drop argv identity from host rendezvous liveness (c7fa3cbf) — @sin5ddd
Gateway: reject a recycled PID that only matches start ticks (7934442e) — @sin5ddd
Tui: keep a ${VAR} bare-custom endpoint as a ref in the new profile (dd2db134) — @kshitijk4poor
Tui: a new profile inherits a bare custom launch model with its endpoint (463d4019) — @kshitijk4poor
Release: a Store-only Windows build gets no signing vars; Store-plus-macOS smokes record only macOS (a8cc19eb) — @ethernet8023
Agent: keep composite tool ids paired on Mistral routes (0c1bfb7d) — @kshitijk4poor
Agent: rewrite split tool ids before Mistral sees them (b33ed359) — @xxxigm
Release: macOS smoke runs when no receipt was staged (f546ea2f) — @ethernet8023
Install-e2e: preserve bundled Windows process arrays (6db1934d) — @Oceanswave
Profiles: match env-referenced endpoint names when seeding a profile (7b755ed5) — @kshitijk4poor
Profiles: drop every same-identity destination entry when merging (9a9a6e43) — @kshitijk4poor
Profiles: match endpoint identity the way runtime does when merging (ef57cbd9) — @kshitijk4poor
Profiles: keep URL-less destination entries when merging the endpoint seed (2aa469f7) — @kshitijk4poor
Profiles: inherited endpoint is not shadowed by the profile's own entries (ac0b63af) — @kshitijk4poor
Profiles: select the seeded endpoint from an env-referenced provider (c85302a2) — @kshitijk4poor
Profiles: keep bare custom provider tuning in the model seed (424aa90f) — @kshitijk4poor
Profiles: reuse named provider lookup without credential reads (c8a777ff) — @helix4u
Profiles: align model seed with provider resolution (5fee8d77) — @helix4u
Profiles: inherit canonical and legacy custom endpoints (2d3e75aa) — @helix4u
Drop the VPN/proxy advice from the CDN-block message (300228d2)
Scope the no-cf-cache-status block signal to our R2 host; keep it on 429s (ec5fa1e4)
Name a CDN firewall block instead of a bare HTTP 403 (#128295) (#128295)
Release: termux-only claims finish and partial releases keep the shared downloads page (6743ab71) — @ethernet8023
Ci: packaged-update acceptance retries a download whose connection resets (db4a6a9e) — @ethernet8023
Catalog: re-pin Agent Mixer after maintainer review (4297a692) — @Sahil-SS9
Pin Activity v0.2.1 public credential routes (3dac1f07) — @hassan-kamel
Plugin-catalog: update jp-egov-law to f1dd47e (c029046d) — @TakeshiTGAL
Plugin-catalog: update switchbot-control to d0e6f77 (c4bf61b1) — @TakeshiTGAL
Install-e2e: the Windows packaged-app feed serves byte ranges (1f6c02c0)
Pm: re-merge the uv cache seed on volumes marked by a seedless image (1226894b) — @ethernet8023
Release: publish replaces the stable head instead of create-only (df8c3ca5)
Release: keep a stable run on main from using the controller commit or cancelling pushes (0dbd96ab) — @ethernet8023
Pm: stage a version for version-less buildable plugin members too (3d8dfc1d) — @ethernet8023
Pm: don't stamp project.version on members declaring it dynamic (2a10164c) — @Ieqzya
Pm: give generated virtual workspace members a project.version (357986e5) — @Ieqzya
Pm: retry sync without bytecode compile when that step fails (10619939) — @smfworks
Deps: bump httpx2/httpcore2 2.7.0 -> 2.12.0 for the audit advisories (bc8545bd) — @guthixboss1
Doctor: stop mislabeling the root npm audit row as agent-browser (7b1dc974) — @chelsealong
Doctor: say recreating the same Docker image does not fix npm findings (dee35e1d) — @ethernet8023
Doctor: describe full workspace npm audit scope (b9dda06b) — @dwaxe
Doctor: clarify Docker npm audit remediation (e21caa27) — @KoNit-K
Deps: bump the WhatsApp bridge lock past its npm-audit findings (231cb757) — @ethernet8023
Deps: land source-map-js 1.2.2 and sync the workspace pins to the overrides (f57d12eb) — @ethernet8023
Deps: bump pinned npm packages to clear npm audit findings (732f0f17) — @sajidhaleem
Windows: packaged-npx install failures degrade to plain npx; payload venv must be real (84e2250b) — @ethernet8023
Docker: ship the build's uv cache at the PM seed path (f4e70b9d) — @ethernet8023
Release: publish the final vX.Y.Z Docker tag again (c1100232) — @ethernet8023
Pm: npm on PATH is the pinned npm, not the copy bundled inside node (8d3b5ab5) — @ethernet8023
Windows: an MSIX with no Node to copy runs npx MCP servers on its packaged node (8ef7654b) — @ethernet8023
Windows: MSIX terminal and MCP children get node, npm and python copied outside the package (c7abf4fb) — @ethernet8023
Terminal: the user's own tools come before Hermes's in the terminal (162b457c) — @ethernet8023
Search: local file search runs Hermes's pinned ripgrep, not the first rg on PATH (9b4710b8) — @ethernet8023
Terminal: strip a sealed payload's venv from child PYTHONPATH (671996b1) — @ethernet8023

📚 Documentation

Agent: use the released model name Nemotron 3.5 Super VL (79651b71) — @j-nolan
Agent: name the guidance blocks and drop the unsupported claims (ba498735) — @j-nolan
Agent: note that the guidance blocks were tested on Nemotron without effect (2b57b0db) — @j-nolan
Providers: rephrased content (4f8df7e1) — @nv-pberard
Env: add NVIDIA NIM to .env example (3dd96101) — @elisam0
Providers: use a non-cloud example key for local NIM (da463310) — @rroverin
Providers: update NVIDIA NIM example to Nemotron 3.5 Super VL (c5bab4af) — @rroverin
Local Models is on by default on macOS, Windows and Linux (1e8bf3ee)

🧪 Tests

Agent: pin Mistral's 9-character tool id on the wire (9a90a825) — @xxxigm
Profiles: pin same-identity eviction of URL-less and disabled entries (0f447876) — @kshitijk4poor
Profiles: pin that the model seed copies only the selected endpoint (29db211b) — @kshitijk4poor
Agent: add reasoning timeout default test (73a07104) — @elisam0
Relay: the OpenAI-stream e2e no longer self-deadlocks when the stream is buffered (6e84ce66)
Pm: one streamed-sync test covers the bytecode-compile retry (7f21aad1) — @ethernet8023
Deps: fail the build if an httpx2 pin or lock entry drops below 2.12.0 (3ca10d88) — @jarvistwil
Doctor: point the root-row label test at the staged-npm seam (40441695) — @ethernet8023
Pm: allow-list the packaged-npx node lookups in the resolution ratchet (c4f9a169) — @ethernet8023

🏗️ Infrastructure

Release: admit stable releases from release/* branches, not just main (9686d55c) — @ethernet8023
Map contributor email for sin5ddd (#133750 salvage) (#133750) — @kshitijk4poor
Map Oceanswave noreply email to GitHub login (f343bdff) — @ethernet8023
Map contributor email for ashmoonori-afk (6a1ee825)
Plugins: pin birkin-mnemosyne to core 0.7.1 (e216cd74) — @ashmoonori-afk
Catalog: review disclosure for huddo (85d27a51)
Map contributor email for StudioCodeAI (c708b34f)
Plugin-catalog: update Telegram Client to 1.3.1 (27aaade9) — @guberm
Plugin-catalog: bump Gmail to v1.0.20 (c6ac0565) — @guberm
Plugin-catalog: bump Gmail to v1.0.19 (74324f11) — @guberm
Plugin-catalog: update Gmail to v1.0.18 (8050d9ea) — @guberm
Kiwi: bump pin to [email protected], plugin v1.2.2 (a08f5894) — @harrylabsj
Map contributor email for dinosauria123 (06c81873)
Lightningai-rate-limit to v1.1.0 (wall-clock aligned window) (e28d64e8) — @dinosauria123
Map contributor email for TREE-Ind (71f78b3f)
Catalog: review disclosure for hermes-aac (0567d017)
Catalog: review disclosure for openinvest (c179b286)
Map contributor email for Sahil-SS9 (d8b5bd8a)
Catalog: review disclosure for hermes-agent-mixer (a98cc310)
Catalog: review disclosure for hermes-activity (e891815c)
Update Activity catalog to v0.2.0 (908c525d) — @hassan-kamel
Map contributor email for slchris (eaf08400)
Catalog: showly reviewed disclosure + requires_hermes >=0.21.6 (2ee820e7)
Map contributor email for Neboy72 (d9971f13)
Catalog: review disclosure for nexus (1a5f5c7b)
Catalog: review disclosure for kumiho-memory (63da5f7b)
Catalog: review disclosure for model-router (92790c6d)
Catalog: review disclosures for anatomy-museum, agent-janitor (560b2507)
Contributors: map [email protected] to Ieqzya (c98162bb) — @ethernet8023
Contributors: map [email protected] to guthixboss1 (8c5c9ac4) — @ethernet8023
Release: pass the commit under test through every stable lane (66facf4a) — @ethernet8023

📦 Other Changes

Repin hermes-insight to a61cdf6 (1.0.3) (0e427d78) — @BrokeSkill
Repin hermes-insight to afb08fb (1.0.2) (51e663da) — @BrokeSkill
Plugin-catalog: bump huddo to 0.9.0 (eeacc00a) — @hellohanchen
Plugin-catalog: re-pin hermes-lang-pt-br to 7548ff1 (pack verifier + CI) (82fbd41f) — @StudioCodeAI
Plugin-catalog: re-pin hermes-lang-pt-br to 69efb2f (credits/timeline README) (2c20d9a3) — @StudioCodeAI
Catalog: bump speechify to 0.1.1 (3a5b9e84) — @Lokeshm24
Catalog: re-pin qdrant-memory to 0.2.1 (e14adc06) (720552bb) — @cnkang
Catalog: repin Hermes AAC 0.1.1 SDK-only reduced features (473e2847) — @TREE-Ind
Plugin-catalog: openinvest re-pin to 106e5ba (bounded backend deps, 0.41.6) (6cc9a434) — @longsizhuo
Plugin-catalog: openinvest re-pin to 3a0c816 (review fixes, backend 0.41.4) (00c311c8) — @longsizhuo
Plugin-catalog: openinvest re-pin to 3e1a9d7 (review fixes) (cb223633) — @longsizhuo
Plugin-catalog: bump plan-mode to 0.4.4 (2a5617f8) — @100yenadmin
Plugin-catalog: bump plan-mode to 0.4.3 (6fafdd4f) — @100yenadmin
Catalog: pin the Showly community plugin (5da3156c) — @slchris
Catalog(nexus): repin the sha to 4392e6d — /embed and /mcp demand a per-installation key (64425a06) — @Neboy72
Catalog(nexus): repin to v0.22.24 — the embedder comes from the service, not from a shadowed path (0ee11795) — @Neboy72
Catalog(nexus): repin to v0.22.23 — the plugin reaches its own venv again (a442c9a5) — @Neboy72
Catalog(nexus): pin the engine to the full sha of the reviewed commit (1f295ae0) — @Neboy72
Catalog(nexus): repin to v0.22.22 — the engine rev is one resolvable tag, the docs match the code (7f495184) — @Neboy72
Catalog(nexus): repin to v0.22.21 — five access-level gaps closed (0f8a2a17) — @Neboy72
Catalog(nexus): repin to v0.22.20 — conversation history is private (14aaf8e1) — @Neboy72
Catalog(nexus): repin to v0.22.18 (Claude Code writes memory again) (2165eed9) — @Neboy72
Catalog(nexus): repin to v0.22.17 (memory provider can embed again) (f60e16fc) — @Neboy72
Catalog(nexus): repin to v0.22.16 (named-vector fixes in the root package) (dab47696) — @Neboy72
Catalog(nexus): repin to v0.22.15 (review findings: stricter trust matching) (3952f2b5) — @Neboy72
Catalog(nexus): repin to 3f77b2a (plugin.yaml version parity) (ca1c2261) — @Neboy72
Catalog(nexus): repin to v0.22.13 (named collection model) (c7b035c1) — @Neboy72
Plugin-catalog: bump account-pool to 4.0.2 (e5d2cebe) — @roqianjas
Plugin-catalog: bump alans-way and alans-way-computer to 0.21.5 (a8d61e30) — @capthvnsen
Plugin-catalog: bump tinyfish to 0.2.2 (6ebd92d9) — @Zechereh
Plugin-catalog: nvidia pins -> de75692 (Broadcast troubleshooting uses tool_search, not a shell probe) (66cd37c9) — @alt-glitch
Plugin-catalog: nvidia-app + nvidia-broadcast pin -> 729e25c (first-run setup when the app side is not ready) (f18948e4) — @alt-glitch
Catalog: agent-janitor (from #137875) (#137875) — @ZidoCode
Catalog: anatomy-museum (from #138166) (#138166) — @danrudy33
Catalog: secure-env-ingress (from #132272) (#132272) — @web3blind

👥 Contributors

Thank you to everyone who contributed to this release!

@ethernet8023 (33 commits)
@kshitijk4poor (17 commits)
@Neboy72 (13 commits)
@elisam0 (7 commits)
@guberm (4 commits)
@longsizhuo (4 commits)
@helix4u (3 commits)
@j-nolan (3 commits)
@StudioCodeAI (3 commits)
@TakeshiTGAL (3 commits)
@olric3015 (3 commits)
@sin5ddd (2 commits)
@xxxigm (2 commits)
@rroverin (2 commits)
@BrokeSkill (2 commits)
@2867297362mjb-sketch (2 commits)
@dinosauria123 (2 commits)
@TREE-Ind (2 commits)
@100yenadmin (2 commits)
@Sahil-SS9 (2 commits)
@hassan-kamel (2 commits)
@slchris (2 commits)
@alt-glitch (2 commits)
@Ieqzya (2 commits)
@emozilla (1 commit)
@predatorheard-byte (1 commit)
@Oceanswave (1 commit)
@nv-pberard (1 commit)
@dandacompany (1 commit)
@ashmoonori-afk (1 commit)
@hellohanchen (1 commit)
@Lokeshm24 (1 commit)
@harrylabsj (1 commit)
@cnkang (1 commit)
@kaveone (1 commit)
@roqianjas (1 commit)
@capthvnsen (1 commit)
@Zechereh (1 commit)
@metamindedu (1 commit)
@ZidoCode (1 commit)
@danrudy33 (1 commit)
@web3blind (1 commit)
@smfworks (1 commit)
@jarvistwil (1 commit)
@guthixboss1 (1 commit)
@chelsealong (1 commit)
@dwaxe (1 commit)
@KoNit-K (1 commit)
@sajidhaleem (1 commit)

Updating

CLI and installer-script desktop installs: hermes update, or re-run the installer one-liner. This moves installs that took v0.22.1 back onto the release line.
Microsoft Store: updates through the Store.
Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.0...v0.22.2 (release line)

v0.22.1 BREAKING [Oct 14, 2026] (7d ago) details → github →

# Hermes Agent v0.22.1

Hermes Agent v0.22.1 (rc.5-v0.22.1)

Release Date: October 14, 2026

This is a patch release, with a handful of fixes for the Windows Store, plugin updates, and more.

✨ Features

Agent): add nemotron super 3.5 default parameters (c59d2994) — @elisam0
Cli): add curated model list at the top in the model picker list (e6835fd3) — @elisam0
Plugin-catalog): add hermes-lang-ko — Korean Desktop language pack (e5f49b6a) — @dandacompany
Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) — @StudioCodeAI
Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) — @2867297362mjb-sketch
Plugin-catalog): add author-feed (5f6d6836) — @TakeshiTGAL
Plugin-catalog): bump aux-ledger to 1.4.0 (6048066e) — @olric3015
Plugin-catalog): add the wait-ledger catalog card (77cb58e5) — @olric3015
Plugin-catalog): add wait-ledger (97e65322) — @olric3015
Community plugin: lightningai + lightningai-rate-limit (07515466) — @dinosauria123
Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) — @TREE-Ind
Plugin-catalog): add openinvest (b6e86101) — @longsizhuo
Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) — @Sahil-SS9
Plugins): move Kumiho Memory to memory catalog shelf (46f95e08) — @kaveone
Add canonical group attachment controls (4673f17c)
Consume event-bound hosted files through canonical admissions (e87bd098)
Connect Desktop groups to canonical driver controls (3c2c9d47)
Transport hosted producers through authenticated owner sockets (51189b05)
Retain hosted room work evidence across authority changes (0af2c714)
Route hosted room workers through session authority (bd22e0f9)
Wire canonical hosted group controls (fa2179bb)
Gateway): resolve --resume <title> and -c <title> [--create-if-missing] in the authority (11a83ad4)
Retain terminal identity tombstones during history retirement (ba435291)
Route native CLI and ACP actions through prepared controls (27b0f7f2)
Publish real prepared compression in the mutation receipt transaction (b6540276)
Prepare and atomically publish local model changes (7e7fa7c6)
Commit independent local branch policy and route atomically (f98eaec1)
Project managed tool progress without private arguments or results (61ccd894)
Bridge managed worker approvals clarification and stop (a0b5118f)
Launch admission-owned tool workers from the ordinary daemon (510e32be)
Enforce safe defaults at bare agent construction (1eeac867)
Suppress rules skills and memory readers in private safe workers (25cda66a)
Bypass plugin providers and hook execution in safe workers (33921e6f)
Bind immutable private worker config before runtime imports (4cc3f420)
Expose verified canonical ACP editor MCP attachment (1bda56a1)
Rebind exact editor MCP credentials on canonical ACP resume (5bfa2f2c)
Borrow editor MCP configurations with frozen session manifests (394f00f6)
Isolate execution-owned MCP registry overlays (96e4d296)
Commit local reset targets with runtime mutation receipts (821137c3)
Expose profile-scoped Bot relay mailbox RPCs on the authority (792aa35a)
Migrate queued Bot mailbox identities without replaying claims (af49e2fc)
Send local Bot DMs to the discovered canonical authority (47ba694e)
Admit identified Bot Chat relay deliveries through session authority (998df8cc)
Reserve exact owner-started admission worker claims (fbdfd46d)
Expose authenticated owner mutation snapshots (d6331c48)
Freeze ACP tool policy and bind execution-owned edit consent (e2f5cfc6)
Reserve hosted API identities through the authority (6b278ca4)
Admit API runs before acknowledging execution (f2d9cea3)
Run bound API turns on the shared cached agent (dea4f0c5)
Restore server-bound API session identities (76532ae1)
Retain claim-fenced structured admission results (262e0ebf)
Compose worker compression lifecycle and delegation persistence (6c57ad37)
Publish committed worker completions through authenticated owner bridge (d94ccc2d)
Fence delegation receipts with shared worker sequence and epoch (be85ca24)
Route registered worker delegation writes through durable outbox (1ee6545f)
Add execution-bound delegation ledger operations (8128e88f)
Persist worker titles activity and route sidecars with receipts (235e4f12)
Add assignment-fenced worker constructor and finalization handlers (b7de5a8e)
Atomically compact and advance worker transcript assignments (c2e77eba)
Preserve worker history and cache lineage identities (e63e1101)
Add receipted worker compression guards and leases (d51afe4c)
Route REST imports and deletion through mutation receipts (2cdd103d)
Route REST sidebar edits through the shared authority (eb329d21)
Coordinate shared mutations and publish committed revisions (eb42a002)
Reuse transactional rewind with generation and receipt fences (6777ffa4)
Import session histories atomically with retry receipts (b9194595)
Fence destructive deletion without erasing runtime obligations (e5249c9a)
Commit sidebar edits with canonical mutation receipts (0b1b8e0f)
Project execution-owned approvals to ACP viewers (97a24c10)
Attach ACP transport to canonical session execution (8dd92a30)
Persist assigned worker prompt context and usage anchors (c6540cb9)
Admit local automation through owner durable FIFO (1642b339)
Queue due gateway heartbeat ticks through canonical admission (ab44af2c)
Admit trusted gateway completions to the durable session FIFO (7cd1b000)
Fence worker terminal receipt after sequenced durable writes (21a48aea)
Authenticate live worker persistence and explicit restart adoption (9d7d7e2a)
Receipt worker main and auxiliary usage in canonical transactions (9d896c49)
Atomically receipt structured worker transcripts and turn leases (2abe47de)
Dispatch bound local slash commands through gateway handlers (b0377e92)
Share authenticated canonical slash discovery with legacy catalogs (fcf50e03)
Authenticate native HTTP through private daemon grants (75764b2a)
Commit local creation policy and restore cold authority routes (aa2624ba)
Attach Desktop local launches to canonical gateway (9c40ddcf)
Bind Ink sessions and controls to canonical authority envelopes (a2d9e258)
Attach Ink local transport through canonical gateway bootstrap (08f628f9)
Route normal classic and one-shot launch through the gateway (35510459)
Add transport-only classic gateway client and option validation (6ed03be9)
Apply local launch policy through real gateway turns (080c5da6)
Define frozen local session launch policy (81ed9712)
Route revision-checked session metadata through gateway (17ddbe44)
Expose scoped local session metadata and document compatibility (52c354ff)
Create gateway-owned local sessions through authenticated controls (42967cdd)
Recheck native Discord membership before durable admission and claim (cc0cd5c9)
Boot authenticated session authority in ordinary gateway (c3bf62eb)
Share live clarification controls across attached viewers (9c474378)
Stream canonical gateway execution events to shared observers (40d9b4c7)
Reauthorize multiplex native connector provenance (244bff73)
Share generation-fenced approvals across gateway viewers (5e2afdae)
Retain native media and context before durable admission (ef447482)
Replay authority events from atomic subscription watermarks (d24dc3fa)
Recover committed native text without replaying unknown turns (78646003)
Execute attached websocket turns on the messaging live agent (47fbfd4c)
Add revision-fenced runtime rename and archive receipts (5878e565)
Fence typed worker persistence with atomic replay receipts (7cc69d29)
Import drained legacy admissions atomically with unknown recovery (124dfa7c)
Centralize durable session admissions in canonical storage (0695b12b)
Keep declined gateway wizard starts unmanaged (7500930d)
Require explicit consent for gateway service setup (16d6b7da)
Restrict runtime bootstrap peers and bound native pipe I/O (d3ccac14)
Compose the existing API into the gateway event loop (bac47874)
Distinguish unavailable gateway owners from absent runtimes (e903841c)

🔧 Improvements

Profiles): build the seed routing view once; expand enabled too (311155fa) — @kshitijk4poor
Update nemotron super 3.5 name (3224993a) — @elisam0
Hermes_cli): update nemotron 3.5 name (108ae4e7) — @elisam0
Catalog: re-pin showly to the build without the upstream self-update check (6462f64a) — @slchris
Catalog: update Model Router to v0.4.3 native preferences (6a097ee9) — @metamindedu
Keep native MCP revision scoped to frozen tool settings (53d17f1c)
Cron bot-chat delivery has no local CLI fallback lane (5d87060e)
Retire bot execution discovery from viewer notification pollers (c8ae25cd)
Make default ACP construction authority-only (c423a431)
Remove obsolete updater sidecar deletion path (58895653)
Remove retired local serve launch imports (5702f9df)
Extract ordinary gateway bootstrap lifecycle (3c0f1e01)
Freeze shared session authority interface contract (1af74c27)
Extract TUI session registry and agent factory seams (a38ca908)
Separate gateway agent acquisition from native progress (0f3a4fb2)
Extract gateway turn preparation and persistence phases (6e8de80a)
Move gateway service wizard into setup sibling (f0b35a98)
Extract gateway setup service orchestration (02d0307c)
Remove extracted runner initialization bodies (4b1379fb)
Extract gateway bootstrap and writable initialization phases (0c287340)
Extract standalone web application lifespan (f38f2444)

🐛 Bug Fixes

Compression): fallback summaries, multiline setup notes and parallel loads keep skill markers right (297552a9)
Compression): a slash-skill body's example paths stay out of the anchor index (d6020828)
Compression): small and slash-invoked skills keep their reload marker across compaction (71e815de)
Desktop): update notes keep full text, re-read merged PRs per check, respect custom branches (f2a93db9)
Mcp): preserve server deadlines through outer tool execution (f30020ed)
Plugins): honor portable per-server call deadlines (fcc170b7)
Agent): rewrite split tool ids before Mistral sees them (b33ed359) — @xxxigm
Profiles): align model seed with provider resolution (5fee8d77) — @helix4u
Profiles): inherit canonical and legacy custom endpoints (2d3e75aa) — @helix4u
Drop the VPN/proxy advice from the CDN-block message (300228d2)
Catalog): re-pin Agent Mixer after maintainer review (4297a692) — @Sahil-SS9
Pin Activity v0.2.1 public credential routes (3dac1f07) — @hassan-kamel
Plugin-catalog): update switchbot-control to d0e6f77 (c4bf61b1) — @TakeshiTGAL
Doctor): clarify Docker npm audit remediation (e21caa27) — @KoNit-K
Deps): bump the WhatsApp bridge lock past its npm-audit findings (231cb757) — @ethernet8023
Tui): retain native legacy history in canonical session picker (2171365a) — @unsupportedpastels
Tui): the banner shows main's 8-character session label for a canonical id (2c979900)
Gateway): a local process completion persists as a process_complete card (ff770cb7)
Runtime): persist diagnostic automation category through replay (bdac7911) — David Dudok de Wit
Gateway): retire bot receipt tasks with authority (d50b2eda) — @Lokee86
Gateway): persist operator provenance for native recovery (c51049aa) — @Lokee86
Cli): preserve blocking controls in finite output (954638ed) — @Lokee86
Gateway): isolate malformed bot receipt schemas (4be62f9c) — @Lokee86
Acp): clean up deferred cancellation lifetime (89dac620) — @Lokee86
Gateway): close remaining unified-runtime review gaps (83cdc63a) — @Lokee86
Gateway): isolate bot receipts and keep headless cron no-spawn (cdf36315) — @Lokee86
Gateway): recover mixed local queues and retire failed hot serves (f4fd982b) — @Lokee86
Gateway): terminate replay gaps and retain ACP cancels (37662b16) — @Lokee86
Gateway): route local ticket bootstrap through control owner (996d9beb) — @Lokee86
Desktop): a transcript reconcile skips a runtime mid-switch to another session (09aafcea)
Gateway/stream): a failed overflow head send no longer spins the event loop (f0d9bd2f)
Gateway): profile on our own home is stripped only for the closed session verbs (2c5b0af5)
Gateway): gateway ensure starts on a systemd host whose user bus is unreachable (82db702f)
Desktop): a session routed onto a new socket re-attaches before it submits (307dac20)
Desktop): a registry-connection hover prewarms that connection's gateway (main #89756 port) (#89756)
Bot-relay): a relayed dm targets only live profiles (#99392 on the authority door) (#99392)
Gateway_chat): one-shot refuses an unknown-blocked session; stream-json always closes with a result (08b6ebd0)
Tui_gateway): projects RPCs answer from the scan cache when a profile's state.db was never initialized (372ec7fc)
Cron): Bot Chat delivery creates the missing Bot Chat instead of failing the run (364a0e22)
Seed-copy compensation discards the row without the retirement fence (44212c5a)
Gateway): exact mutation retries repair the runtime projection (X11, reported by @Xipong) (c1ee9286)
Desktop): preserve accepted input and clarify persistent-work Quit (f8e234ed) — @dokterdok
Desktop): drop pool-limit notification wiring main added after the pool subsystem was removed (c3632fcc)
Runtime): owner scope is multiplex-only; foreign LOCAL sources fail closed; primary = launch home (a37550b9)
Type session creation identity with merged onboarding options (0948ffc9)
Preserve main lifecycle and discovery behavior after extraction (b186879a)
Preserve webhook delivery profile and snapshot scoped home (8fe3d198)
Retain per-admission bot and API authors (61f75a77)
Recover mixed-clock sessions and compose runtime test listeners (9e747d7f)
Preserve hosted image admission and execution across owners (2672b820)
Gateway): restore hosted image attachments natively (bdfe8a50)
Desktop): preserve profile target during reconnect (ddf8bec7)
Restore durable hosted group sends before enabling input (d3162155)
Translate canonical hosted group controls in all desktop locales (29e27af5)
Desktop): journal canonical group sends before admission (3d1cb4e0)
Integrate hosted attachment admission hooks (c094d91e)
Transfer hosted input bytes through task-scoped owner attestation (519e1101)
Bind hosted owner transport to exact destination home (9035ef9a)
Minimize retained webhook destinations and preserve legacy receipts (c6456808)
Capture peer ACK evidence and trim unused file catalog helpers (c86dd71b)
Publish hosted file shares with cursor-fenced retries (49e27d8b)
Run hosted rooms through independently owned profile daemons (53a260ac)
Fence hosted discard and prevent unknown retry generations (3cde0092)
Explicitly discard exact hosted unknown executions (864c34f3)
Preserve hosted room ownership during service shutdown (bfa8022d)
Durably recover webhook destinations (d207fd64)
Recover native admissions after ordinary adapter startup (70659676)
Carry finite execution policy through canonical admission (9edd28e6)
Join finite gateway chat delegations in the admitted turn (5977ef75)
Resolve managed Node in native ticket probes (ee9030bd)
Preserve manual compression settings and session identity (9fa0b6aa)
Prevent duplicate cron alerts after durable delivery handoff (47e3bb25)
Preserve cron delivery silence and incident acknowledgements (0c7f676e)
Bound canonical cron owner store acquisition (61759b57)
Restore canonical desktop image thumbnails safely (4d5db820)
Restore prepared desktop image drafts after restart (5034ee3a)
Route lost prompt discard to its session owner (566872a8)
Preserve newer replies across delayed redirect receipts (ac30b57a)
Retry transient desktop busy policy reads (82098e63)
Keep desktop streams intact when corrections are refused (3c886973)
Connect recovery and owner projection routes (cfa5c152)
Discover private gateway sockets across native temp roots (de66df14)
Expose owner-scoped ancillary session reads (61ace21a)
Stage canonical remote images in the authorized owner cache (baaa4464)
Project native config and model inventory from canonical owner (1064971e)
Preserve Kanban board discovery and unknown owner attempts (90e2b2eb)
Reconcile canonical cron receipts into durable delivery (c1172b1a)
Preserve admitted images and async usage in managed workers (4abbb3f9)
Share static-token session ownership across HTTP and WebSocket (56e344e5)
Connect canonical cutover repairs across owner and clients (c8f8d9ae)
Restore scoped canonical busy and correction controls (daa01697)
Isolate authenticated gateway owners by provider and issuer (6b8a6d4c)
Bootstrap Windows desktop tickets through validated Python pipes (f8ba25a9)
Submit Desktop images through canonical admissions (c93382c0)
Preserve desktop busy correction intent on rejection (b3cca0f3)
Keep canonical RPC refusals out of Desktop resume recovery (9ba2582b)
Keep unbound Ink drafts instead of claiming memory-only admission (07588b5e)
Honor non-idempotent canonical busy control acknowledgements (01e4829c)
Stage clipboard images on the Ink client host (179a8473)
Scope Ink config hydration and prompt model mutations (798c3926)
Retain disconnected Ink input and canonical control receipts (1a5bae9b)
Stage and retain canonical Ink image submissions (33622c04)
Route Ink session controls through canonical authority (bf0b25a9)
Preserve Kanban execution PID and durable worker outcomes (d4fd07d2)
Route claimed Kanban tasks through trusted owner admission (5aeba055)
Admit agent cron runs through the canonical owner (cdbe8c35)
Forward A2A profile tasks through session authority (4e3a6bdb)
Project ACP cancellation and failed admissions accurately (03c0efc8)
Preserve API content identity history and terminal outcomes (f48d0956)
Fence legacy history claims and follow Bot reset targets (f88f8615)
Adopt legacy local history through trusted session owner (cb748e7a)
Record physical admission assignment before later compression (7b9dc454)
Classify managed worker errors and verify compression restart (4bbbb90f)
Preserve worker compression admission identity (588c609c)
Refresh worker row identities after compression (e19f05ff)
Preserve managed transcript lineage and settle after worker finish (ec0ebf80)
Cli): keep Termux startup hints out of gateway policy (31dc5078)
Service suffix follows main profile-root rule; drop in-process cli.main tests (0ea5a879)
Canonical delivery feeds attachment results to record_delivery; log failed turns (19ca1e85)
Managed worker outbox directory is a portable spelling of the execution id (4a08032d)
Owner verifies managed worker identity through interpreter trampolines (e8fbefb2)
Refuse /v1/runs on a natively owned session with a bounded 409 (809fec15)
Commit execution results with terminal settlement (43348a03)
Replay canonical relay envelopes until terminal reply acknowledgement (8dfd7add)
Keep bot relay discovery and outbox in sender profile (437e3d85)
Isolate desktop bot relay sender and target profile routes (4f75b6aa)
Recover bot mailbox receipts and migrate queued inputs at owner startup (76a60441)
Recover bot replies from exact committed admission results (a5ea5b21)
Retain identified desktop bot deliveries until settlement (e1734e7d)
Pause managed admission followers when the owned worker is lost (e6077ecc)
Prevent scoped secret rehydration in bypass workers (1ff3d877)
Preserve hosted API source during peer persistence (06a9516c)
Return explicit unknown execution on API crash retries (f26c5c43)
Recover committed API queue when its adapter reconnects (8ef9fbe8)
Resolve API prompts through canonical pending controls (f35358a6)
Preserve pre-editor credential identity and native control coverage (8e3b3a0c)
Defer editor MCP schema changes until a new session (be748101)
Bind imported history control in its receipt transaction (f40dc17b)
Prevent import from reusing retired runtime identities (0a55e373)
Retire local physical lineage and cache affinity on deletion (a1d47945)
Authorize cold history mutations without execution rebinding (529fb127)
Retire native session routes with deletion receipts (10b155bf)
Retire the legacy Bot mailbox producer and inference drain (ee09dad4)
Retain immutable Bot relay reply receipts on exact retry (391517b7)
Refuse Bot delivery instead of starting a competing runtime (03f5d843)
Migrate worker rotation automation inside owner publication (6fce9f77)
Bind registered worker ledger before agent discovery (56586998)
Release original worker turn lease after rotation (ce8b1171)
Preserve REST mutation success response shape (c1882a69)
Require exclusive maintenance for legacy bulk session writes (7323773c)
Fence persisted bot visibility without activating profiles (7fab399a)
Retain dashboard mutation identity across uncertain replies (20dd6813)
Prepare desktop session edits from owner snapshots (c01a625c)
Preserve import validation with real authority fixtures (83b87b01)
Reject coerced session mutation counters and flags (927ca964)
Anchor V4A editor approval paths to session cwd (490453f7)
List canonical ACP sessions under their frozen workspace (3c79ac4e)
Resolve ACP edit previews against execution cwd (85ce5418)
Project canonical editor diffs and frozen cwd to ACP (45aee742)
Release ACP transport without client MCP discovery (92d97ba8)
Steer API runs through the current authority claim (a69efa90)
Fence API run cancellation to its durable admission (f67f19fb)
Replay durable API results across HTTP delivery modes (cbcad6fb)
Retain recoverable worker title conflicts as durable outcomes (b7d14c75)
Preserve worker compression pre-publication flush annotations (dbe08962)
Retain worker compression cleanup authority after rotation (36d5b639)
Accept real worker compression handoff markers (e98a036a)
Preserve live delegate tasks during parent deletion (b0f792ac)
Fence ACP controls and expose the read-only catalog (d304b025)
Keep ACP session catalog read-only (b117521c)
Bind API storage to its selected runtime authority (c812ec71)
Preserve webhook duplicate responses with real route admission fixtures (253f9b5e)
Fence webhook finalization by admitted session and generation (ca2211f0)
Durably admit authenticated Graph notifications before acknowledgement (e8e17493)
Retain relay deliveries until canonical admission commits (e75bc52f)
Acknowledge webhooks only after durable native admission (9d9e4789)
Restore worker compressor guards before agent construction (84ccae21)
Refuse unregistered child and cron persistence in compute workers (2ee0725c)
Keep registered compute imports out of owner delegation recovery (7eecdcf2)
Retain distinct repeated watch notices in local consumers (0c42619c)
Refund legacy notification claims refused by admission (d5b332ed)
Give watch events stable owner-bound automation identities (135730d1)
Validate gateway launch options before first-run config checks (bec94623)
Restore first-run guidance before gateway admission (351b8eb4)
Retain partial-update diagnostics at canonical CLI launch (a6376f0e)
Preserve runtime authority across updater snapshot restores (8a8a1372)
Refuse unowned automation without spending sibling retry budgets (d6635ffe)
Retain completion batch siblings across durable handoff retries (0307a33f)
Keep named launch keys and endpoints separate from profile defaults (219ed58f)
Redact and recover credential-bearing terminal projections (478d9b73)
Resolve configured local routes from frozen provider policy (e02cc03a)
Retain startup consent on top-level one-shot launches (ecb0afa6)
Enforce startup cost and data consent before gateway admission (4dcf234d)
Retry local creation without binding replacement credentials (12899b65)
Recover frozen local config credentials from their profile source (f1da7833)
Keep configured credentials out of frozen policy receipts (2f6fb46b)
Keep explicit local launch keys in authority memory only (32d512fb)
Freeze local CLI reasoning and execution launch options (d0954a9e)
Preflight canonical epoch before restoring profile snapshot files (610a97ea)
Retain explicit verified deletion after read-only export migration (23456236)
Recover fresh and historical session row layouts by identity (9c681b2d)
Explain safe transcript salvage when canonical restore is refused (c559236f)
Preserve structured Unicode through worker payload and receipt encoding (f56e660e)
Pause workers on outbox I/O failure and preserve local lease waits (23b54921)
Freeze retry journals and retain exclusive worker outbox ownership (a8c163af)
Attenuate worker reconnect tickets to execution operations (e7cd5f93)
Install relay trust only after provenance verification (90f107f2)
Keep relay reader live during canonical busy delivery (4485fb73)
Admit relay inputs with verified connector provenance (8fe258cc)
Keep retained process lineage lookup read-only (bf9cf5c2)
Retain corruption restore for non-runtime SQLite stores (ad354c28)
Preflight all restore destinations and preserve import warning parity (f1b4f6e3)
Preserve runtime epoch floors across older backup restores (7fd8082e)
Fence canonical recovery output and report excluded runtime state (43f62e7a)
Exclude restore and import with canonical runtime ownership (4dce8f7e)
Keep dashboard session browsing read-only (af4599c1)
Preserve loop liveness witnesses for long gateway homes (ae92d198)
Retain newer composer scope across delayed queue acknowledgements (4b39a5fd)
Keep native steer fallback on canonical queue admission (35255f5c)
Admit native busy slash kickoffs through canonical submit (6bef46ea)
Reconcile queue input IDs with canonical admission identities (a877aa6e)
Preserve active turn ownership during canonical queue admission (a131bf4a)
Route native composer Queue through existing admission submit (4ce95d5f)
Authenticate native desktop file downloads per attempt (28741ef8)
Scope stable execution identity to canonical local sources (c3aa2e5c)
Reject foreign local receipts inside lineage publication (1ffba2ac)
Retain local admission ownership across transcript rotation (42ee0d34)
Publish shared queue changes to attached viewers (fb02973f)
Retain public queued input identity in shared snapshots (37332c17)
Expose profile-bound setup readiness on canonical sessions (971c3c95)
Normalize canonical prompts before named desktop listeners (9a2a30a6)
Fence canonical desktop RPC metadata edits with revision receipts (ce3037dc)
Bind desktop create retries to the explicit draft intent (c69bb4db)
Retain desktop update and profile gates before canonical ensure (a7821f63)
Adapt desktop native sessions to canonical identities and controls (d1546a54)
Authenticate native desktop HTTP with fresh private tickets (dd8b9f38)
Preserve native HTTP profile selectors across JSON contracts (eaad737e)
Retain source-free authority control projections (3546eb41)
Preflight durable local policy before claiming queued work (d98dd743)
Publish canonical Ink readiness only after discovery (653889ef)
Hydrate canonical Ink history independently of live events (971ff7f3)
Carry native ticket through WebSocket subprotocol negotiation (7fe8c72c)
Correlate canonical Ink receipts with prepared input identities (3dfb7d50)
Scope one-shot output to its admitted turn and retain direct query aliases (17155e73)
Preserve gateway toolset policy and reject resume source overrides (6feaafcc)
Reject fresh session registration while gateway drains (a67637cc)
Separate clarification permission from execution control (66bc2861)
Stamp authenticated legacy clients before shared session admission (4be08ae5)
Preserve scoped bootstrap grants in shared session connections (b699e0e9)
Keep forged local profiles out of messaging authorization fallback (d379d6cc)
Retain queued inputs when shutdown crosses authorization awaits (733dde1c)
Reload transport role policy after Discord membership awaits (43ae9e9a)
Retain native trust fields for validation when freezing ingress (53aadf44)
Fence native authorization yields against identity and FIFO changes (6ef8b38d)
Report malformed installed plists without leaking parser failures (1b55d964)
Resolve installed names from the requested profile root (258049b3)
Reject unbound launch wrappers and nonregular service definitions (1dd6268b)
Preserve task XML encoding and document service binding refusals (7b904f95)
Bind loaded launchd jobs and scheduled task XML before start (1ce0d11e)
Verify effective systemd profile and account before ensure starts (efadac8d)
Stop bootstrap background workers after listener failure (6716636f)
Withdraw gateway readiness when the session listener exits (57ec2718)
Keep readiness and cleanup fenced across runtime shutdown (82ff0592)
Retain browser authentication and withdraw native ingress on drain (5da456be)
Export sessions without mutating canonical storage (ae82c1a2)
Keep native segment sentinels out of canonical text deltas (caae4af5)
Keep launcher YOLO out of shared gateway policy (628d702c)
Align profile reservations with bootstrap permissions (87ba34fd)
Reject FIFO gateway metadata without blocking discovery (5b0f0276)
Bind fresh ordinary admissions while preserving exact legacy retries (e5f39ada)
Preserve ordinary native retry fingerprints through callback migration (6083e9ed)
Refuse unrouted profile claims in native callback snapshots (99c923bc)
Preserve authority ownership through scoped adapter callbacks (42ce26af)
Retain trusted ordinary native callback provenance (1d4dab77)
Omit retired approvals from gateway attach snapshots (e7ee1d67)
Deny controls after gateway execution settlement (a064afdd)
Reject approval publication from retired gateway workers (295bc0f5)
Retain legacy session writers during reader migration (82dfb85d)
Keep session lists and statistics read-only (1a1ad945)
Resolve terminal breadcrumbs without opening a session writer (73238088)
Share read-only insights reporting with interactive CLI (9cd5d6dd)
Generate CLI insights without initializing session storage (680937a6)
Keep resume lookup and TUI exit metadata read-only (617be2da)
Keep status session inspection read-only (ca77b197)
Bind shared authority when starting gateway API (11958d46)
Refuse redirected native media publication (e924cf98)
Preserve legacy native text admission retries (ca226b68)
Rotate authority replay epoch on concurrent eviction (a9de35d2)
Isolate authority execution from slow observers (aab36dc6)
Keep authority subscriptions stable across repeated resume (8c889765)
Admit busy messaging text into the canonical durable FIFO (eae6194b)
Preserve surrogate request identity while sanitizing worker text (bb90f4b8)
Replay committed worker receipts after terminal settlement (203b3f4f)
Retain transcript closure guard for worker appends (71f835b6)
Revoke workers when resolving unknown admissions (d7089f75)
Align runtime mutation receipts with canonical wire contract (e6b1dc06)
Fence ancestor revisions when runtime titles transfer (62aef795)
Fence worker persistence when its admission settles (e3bfe640)
Transfer admitted claims atomically during worker adoption (341aed41)
Preserve legacy execution generations through admission import (c45d2e5c)
Restore Ink pending inputs after cold durable resume (34fb13a1)
Preserve Ink slash attachments and reconcile stale images (dbc7ffa8)
Reconcile Ink replay receipts with current execution (8a589010)
Settle desktop receipts on recovered runtime and tidy composed probes (1ad31afa)
Retire desktop Stop for newer owner executions and fence old output (926d097d)
Settle terminal desktop admission receipts without stopping live turns (d89a90e1)
Fence same-call desktop legacy admission retries (41b017f1)
Never resend ambiguous Ink legacy admissions (5681c7d4)
Emit structured CLI parse failures only once (1d4d2b2d)
Bound gateway probes and structure ensure parser errors (ad1099d6)
Discover the gateway private fallback socket directory (c804d40b)
Retain runtime locks while scheduler threads survive cleanup (954d5e99)
Retain gateway ownership through exit-state persistence (d465ad0d)
Reserve all gateway profiles before writable initialization (c941b0e6)
Keep standalone session search read-only (0e7c0588)

📚 Documentation

Agent): use the released model name Nemotron 3.5 Super VL (79651b71) — @j-nolan
Env): add NVIDIA NIM to .env example (3dd96101) — @elisam0
Providers): use a non-cloud example key for local NIM (da463310) — @rroverin
Rollback section the downgrade refusals link to; regenerate the command-parity table (97ec76fa)
Gateway): describe the messaging pause notice and /reset escape (6cdf7815)
Explain ambiguous legacy A2A recovery boundary (22a8154f)
Cli): classic chat resolves --resume <title> and -c <title> --create-if-missing at the gateway; bare -c stays refused (c6c4161c)
Gateway): document prompt.submit attachments and the ACP media path (e3d60eed)
Desktop): gateway-owned queue and the Discard control for a turn lost during restart (101be7d7)
Explicit /model rewrites the system prompt Model line once (single cache-prefix miss) (ef813b35)
/new rebinds only the invoking view of a shared session (6be1de8d)
API runs and X-Hermes-Session-Id cannot bind a session owned by another surface (409 permission_denied) (789caca2)
Dashboard session delete fences, tombstones, and offline-only bulk maintenance (46c50515)
Explain canonical editor MCP ownership and cold reattachment (fcc978bd)
Distinguish canonical Bot admission from retired UI ownership (2d22a7cd)
Record worker lifecycle hooks proofs and remaining integration gates (3dae322e)
Record isolated worker inference proof and remaining migration gates (b762d80c)
Distinguish admission recovery from producer replay proof (bc3bcaff)
Delimit verified worker substrate coverage and rollout blockers (f22754e8)
Inventory exact worker persistence consumers before substrate (0e30eb6a)
Define stable local lineage and paused fork recovery (757f19f4)
Define native HTTP trust and primary-profile scope (a8a6b02c)
Document local crash recovery contract and replay limits (375fce55)
Describe settled Ink recovery and native lifecycle probes (2dc2e740)
Define Desktop gateway ownership and private ticket boundary (f0ff6c57)
Distinguish native policy proof from remaining classic CLI parity (256cab2b)
Publish supported local creation policy and recovery boundary (0400a5ef)
Explain gateway ensure readiness and service consent (a272e8df)

🧪 Tests

Relay): the OpenAI-stream e2e no longer self-deadlocks when the stream is buffered (6e84ce66)
Gateway): the authority stream probe waits for the idle session.info (56b9691c)
Gateway): align SSE prepare cleanup with retained streams (c0230ca5) — @Lokee86
Desktop-core): capture the Electron PID before quit for the orphan census message (2cf48e0c)
Gateway): the unserve runner stub carries the reservation our release step shrinks (5fdb477b)
Cold-profile archive/unarchive through one multiplexing gateway is an acceptance case (dfbb9142)
Seed-compensation fake uses discardunadmittedsession; hosted auth probe waits are load-tolerant (cc1eab12)
Gateway): managed-worker first-inference wait tolerates a saturated 40-worker runner (57c95771)
Tui): slash-attachment composer assertions wait for the journaled clear (d5950d72)
Patch origin API probe in banner ancestry fixtures (cdf4eda7)
Migrate authored bot fixtures to canonical transport (37d7834e)
Verify webhook receipt observation and composed HTTP startup (a5a0da66)
Exercise authenticated hosted room Stop and approval (7a6b2961)
Use system Python for the stdlib-only ticket bridge (3394ef4c)
Preserve Kanban policy and cron cleanup owner invariants (e1b6f10b)
Align Kanban scope fixtures with owner worker client (ea2342d4)
Observe relay completion and cron guard at owner seams (625bb379)
Drain durable cron failure deliveries before asserting sends (9b753d3b)
Migrate cron guards and context fixtures through owner execution (7080a488)
Restore cron owner configuration and session invariants (c08349cf)
Exercise cron provider and workdir paths through owner (9fde59d3)
Migrate cron lifecycle invariants to canonical owner execution (e4a2d476)
Retain queued input identity after session list loading (2671381d)
Exercise native Electron gateway HTTP and WebSocket tickets (45c6c8de)
Verify busy acknowledgements and document Ink recovery limits (59a90b4d)
Cover canonical Ink image composer and startup handoff (65635634)
Verify native legacy resume and compression cutover (90052b33)
Prove admission-backed automatic compression retry (3ec0ea59)
Gate the Discord role probe on the real distribution, not the conftest mock (19feada0)
Acp): live editor image prompt reaches the loopback model as an image_url part (993a63f0)
Native suite finds the managed worker by owner ancestry, not bare ppid (venv trampoline) (9e335738)
Trampoline reap check waits for the owner's bounded close instead of racing the terminal commit (cc2cdbe2)
Desktop): move the token download-transport invariant beside the extracted function (ff662b6b)
Exercise safe identity suppression through real prompt assembly (cccb516c)
Verify reserved admission claims through worker handlers (107af6fc)
Isolate and reap owned Kanban systemd scopes (3776709d)
Prove rotated worker survives owner kill and adoption (8459b140)
Prove fresh ACP handoff and cold canonical restoration (56f62381)
Verify per-admission API usage on the ordinary daemon (35d9eb2f)
Prove shared API FIFO on the ordinary daemon (e721121f)
Prove registered worker terminal execution without canonical SQLite opens (e31b96bc)
Exercise worker lifecycle and stale callbacks through ordinary owner (5038cf75)
Verify worker rotation claim and lost-ack replay over daemon (17cf264f)
Verify native ACP approval and wrong-profile refusal (d157534a)
Verify local automation stays nonhuman and cache stable (ef071dd3)
Prove local completion recovery after owner kill (9afff7e9)
Follow canonical CLI launch in startup guard fixtures (34b9aad1)
State): keep FTS migration fixtures on historical versions (21baec51)
Document recovery limits and verify consented gateway launches (ddc1b0a1)
Refuse unauthenticated credential launch over ordinary daemon websocket (9b0d7861)
Deny credential-bearing creation to restricted principals (2d2fdff9)
Verify frozen CLI iteration limits through actual tool rounds (cc37de8b)
Prove concurrent CLI launch wire and restart credential isolation (84e86a87)
Own canonical daemon in completed-process CLI integration (6c8f0fd8)
Keep simulated HEAD updates off the live runtime fleet (7b8fdfa8)
Seed owner database for dashboard parameter validation (2af3bfd4)
Initialize owner store for dashboard refresh success (a1811942)
Isolate service ordering fixture home (3b42e697)
Seed gateway status through real read-only storage (6af1ac81)
Exercise CLI exports against real read-only session storage (96782704)
Prove pending worker usage survives real owner outage and adoption (58bcc3ec)
Verify live relay replacement and websocket revocation fences (89567476)
Reject relay trust installation from an invalid seal (80d677d2)
Reproduce relay busy ingress blocking outbound acknowledgements (73bf2c66)
Reproduce authenticated relay native admission rejection (0bbe3740)
Preserve destination lock identity after offline import (ef1fe3de)
Verify separate-output recovery against active daemon source (cc96119b)
Expose epoch reuse and service revival after refused import (dbb1e531)
Reproduce live restore deleting active authority admissions (3a0111ee)
Align search fixture with owner-initialized session stores (e2a853ba)
Cover encoded socket limits with direct control paths (34407c9e)
Reproduce missing loop witnesses in long-home daemons (36649795)
Configure a restorable model for token session creation (bcf39bfb)
Verify ordinary daemon replay and release fixture stores (e8f57b7f)
Supply real session stores to gateway authority fixtures (e3d23087)
Verify ordinary daemon slash actor isolation and handler scope (3cdf25cb)
Verify native download boundaries and document transport scope (c8620011)
Prove local rotation and reset across cold daemon restarts (af3f2dfe)
Compare discovery on real legacy serve and canonical daemon sockets (5d1d1ee0)
Reproduce missing canonical command discovery over ordinary daemon WS (659632c3)
Scope private Unix ticket fixture to supported native hosts (ca3e4b64)
Keep native protocol fixtures within their runtime type boundary (da98497c)
Verify canonical receipts retire the native private-file journal (5bd5a8d6)
Verify native HTTP selectors against real sibling profiles (f6ef1ea4)
Prove cold local recovery through separate authenticated daemons (041d9ee7)
Exercise native Stop through the Python Ink launcher (c75e0cdd)
Verify native Ink Stop acknowledgement and fresh follow-up (d0ad8324)
Exercise fresh Ink launch through the real Python launcher (8b727f4a)
Verify actual native clarification answer on model wire (cc4ad0d1)
Require native Ink reconnect to render settled history (eecaba42)
Initialize replay fixture with explicit runtime admission state (014b3ea4)
Retain native reconnect output for intermittent Ink failure (f454485d)
Verify native CLI cwd execution against the policy-enabled daemon (db2bdf31)
Prove native gateway approvals survive CLI detach and invalid choice (a0c361ae)
Prove concurrent local policy isolation on provider wire (15052599)
Verify metadata retries through ordinary gateway sockets (0d5d548f)
Execute fresh sessions through ordinary gateway startup (ae19a6e0)
Prove fresh local clarify survives complete viewer detachment (1044867b)
Preserve Discord direct pairing and scoped DM grants (144c86c7)
Retain startup exit contracts with real authority stores (a126b4cc)
Verify excluded observer prefix against canonical replay (cacd4d22)
Retain live gateway bootstrap readiness probe (29167522)
Exercise shared approvals through production API startup (118b34ac)
Verify native runtime ownership and execution-time secret refresh (234f1278)
Exercise approval rendering through initialized turn runners (76efc227)
Verify CLI readers alongside an active SQLite writer (ee23996c)
Retain real CLI reader A/B harness (bcc03ee8)
Preserve insights cleanup coverage with absent-store fast path (eae783bc)
Exercise shared turns through production API startup (0cfe5a2f)
Retain authority backpressure execution receipt (47ce83d6)
Retain real-process read-only search A/B probe (551ccfca)
Require complete shared gateway acceptance receipt coverage (d853d145)
Retain gateway source invariants across sibling extractions (e1df5d12)
Follow production methods across gateway turn extraction (04cef1e9)
Reap truncation fixture worker before restoring bindings (d6d8af93)
Trace borrowed SQLite readers in search projection invariant (fa572cbe)
Verify runtime schema upgrades and genuine SQLite full rollback (1769e803)
Reproduce Ink receipt-only retry busy latch (1c144c98)
Reproduce desktop receipt stop and legacy timeout races (02e0ab74)
Verify gateway service consent across import and setup (4ecf5975)
Make unreserved profile snapshots explicit in multiplex fixtures (a72ed0a5)

🏗️ Infrastructure

Release): admit stable releases from release/* branches, not just main (9686d55c) — @ethernet8023
Plugins): pin birkin-mnemosyne to core 0.7.1 (e216cd74) — @ashmoonori-afk
Catalog): review disclosure for huddo (85d27a51)
Map contributor email for StudioCodeAI (c708b34f)
Plugin-catalog): update Telegram Client to 1.3.1 (27aaade9) — @guberm
Plugin-catalog): bump Gmail to v1.0.20 (c6ac0565) — @guberm
Kiwi): bump pin to [email protected], plugin v1.2.2 (a08f5894) — @harrylabsj
Lightningai-rate-limit to v1.1.0 (wall-clock aligned window) (e28d64e8) — @dinosauria123
Map contributor email for TREE-Ind (71f78b3f)
Catalog): review disclosure for hermes-aac (0567d017)
Catalog): review disclosure for openinvest (c179b286)
Map contributor email for Sahil-SS9 (d8b5bd8a)
Catalog): review disclosure for hermes-agent-mixer (a98cc310)
Update Activity catalog to v0.2.0 (908c525d) — @hassan-kamel
Catalog): showly reviewed disclosure + requires_hermes >=0.21.6 (2ee820e7)
Catalog): review disclosure for nexus (1a5f5c7b)
Catalog): review disclosure for kumiho-memory (63da5f7b)
Catalog): review disclosure for model-router (92790c6d)
Catalog): review disclosures for anatomy-museum, agent-janitor (560b2507)
Js): lint after the main merges: drop the unused watchdog import, order a test import, stub gw on the steer ctx (1b78a417)
Retrigger CI (zero-job dispatch failure, auto-heal) (d056a624)
Give area detection its sparse checkout and retry budget (8824ac96)
Retrigger CI (zero-job dispatch failure, auto-heal) (2cbeac1f)
Retrigger after 0-job workflow startup failure (254432b2)
Retrigger (dispatch window) (1e398140)
Retrigger (dispatch window) (40b17a25)
Retrigger (dispatch window) (5e198b8b)
Retrigger after 0-job workflow startup failure (f6dd9025)
Retrigger after 0-job workflow startup failure (911b559e)
Retrigger after 0-job workflow startup failure (4ff21ecd)
Retrigger after 0-job workflow startup failure (c37453e7)
Retrigger after 0-job workflow startup failure (cb296788)
Retrigger after 0-job workflow startup failure (346615f3)
Retrigger after 0-job workflow startup failure (1e4edefa)
Retrigger after 0-job workflow startup failure (f3d4105f)
Retrigger after 0-job workflow startup failure (73d9e413)
Retrigger after 0-job workflow startup failure (c7fcc65c)
Retrigger after 0-job workflow startup failure (4892e1d4)
Retrigger after 0-job workflow startup failure (2cb84f43)
Retrigger after lost push event (0 runs on 19ca1e85c80) (c86b415d)
Trim native HTTP helper imports (25fd73b6)

📦 Other Changes

Repin hermes-insight to afb08fb (1.0.2) (51e663da) — @BrokeSkill
Plugin-catalog: bump huddo to 0.9.0 (eeacc00a) — @hellohanchen
Plugin-catalog: re-pin hermes-lang-pt-br to 7548ff1 (pack verifier + CI) (82fbd41f) — @StudioCodeAI
Plugin-catalog: re-pin hermes-lang-pt-br to 69efb2f (credits/timeline README) (2c20d9a3) — @StudioCodeAI
Catalog: bump speechify to 0.1.1 (3a5b9e84) — @Lokeshm24
Catalog: re-pin qdrant-memory to 0.2.1 (e14adc06) (720552bb) — @cnkang
Catalog: repin Hermes AAC 0.1.1 SDK-only reduced features (473e2847) — @TREE-Ind
Plugin-catalog: openinvest re-pin to 106e5ba (bounded backend deps, 0.41.6) (6cc9a434) — @longsizhuo
Plugin-catalog: openinvest re-pin to 3a0c816 (review fixes, backend 0.41.4) (00c311c8) — @longsizhuo
Plugin-catalog: openinvest re-pin to 3e1a9d7 (review fixes) (cb223633) — @longsizhuo
Plugin-catalog: bump plan-mode to 0.4.4 (2a5617f8) — @100yenadmin
Plugin-catalog: bump plan-mode to 0.4.3 (6fafdd4f) — @100yenadmin
Catalog: pin the Showly community plugin (5da3156c) — @slchris
Catalog(nexus): repin the sha to 4392e6d — /embed and /mcp demand a per-installation key (64425a06) — @Neboy72
Plugin-catalog: bump account-pool to 4.0.2 (e5d2cebe) — @roqianjas
Plugin-catalog: bump alans-way and alans-way-computer to 0.21.5 (a8d61e30) — @capthvnsen
Plugin-catalog: nvidia-app + nvidia-broadcast pin -> 729e25c (first-run setup when the app side is not ready) (f18948e4) — @alt-glitch
Catalog: agent-janitor (from #137875) (#137875) — @ZidoCode
Catalog: anatomy-museum (from #138166) (#138166) — @danrudy33
Catalog: secure-env-ingress (from #132272) (#132272) — @web3blind
Style: align canonical group controls with Desktop lint rules (c8d8900d)
Style: normalize verified queue admission imports and spacing (d3ad7a90)

👥 Contributors

Thank you to everyone who contributed to this release!

@Lokee86 (11 commits)
@dokterdok (6 commits)
@elisam0 (5 commits)
@longsizhuo (4 commits)
@100yenadmin (3 commits)
@StudioCodeAI (3 commits)
@olric3015 (3 commits)
@ethernet8023 (2 commits)
@helix4u (2 commits)
@guberm (2 commits)
@TakeshiTGAL (2 commits)
@dinosauria123 (2 commits)
@TREE-Ind (2 commits)
@Sahil-SS9 (2 commits)
@hassan-kamel (2 commits)
@slchris (2 commits)
David Dudok de Wit (2 commits)
@xxxigm (1 commit)
@kshitijk4poor (1 commit)
@j-nolan (1 commit)
@rroverin (1 commit)
@BrokeSkill (1 commit)
@dandacompany (1 commit)
@ashmoonori-afk (1 commit)
@hellohanchen (1 commit)
@2867297362mjb-sketch (1 commit)
@Lokeshm24 (1 commit)
@harrylabsj (1 commit)
@cnkang (1 commit)
@Neboy72 (1 commit)
@kaveone (1 commit)
@roqianjas (1 commit)
@capthvnsen (1 commit)
@alt-glitch (1 commit)
@metamindedu (1 commit)
@ZidoCode (1 commit)
@danrudy33 (1 commit)
@web3blind (1 commit)
@KoNit-K (1 commit)
@unsupportedpastels (1 commit)
@abundantbeing (1 commit)
@utkubakir (1 commit)

Full Changelog: v0.22.0...rc.5-v0.22.1

v0.22.0 BREAKING [Oct 14, 2026] (8d ago) details → github →

# Hermes Agent v0.22.0 — The Threshold Release

Hermes Agent v0.22.0

Release Date: October 13, 2026 Since v0.21.0: ~24,200 commits · ~6,080 merged PRs · ~15,600 files changed · ~2,045,000 insertions · ~1,140,000 deletions · ~7,180 issues closed · ~2,520 contributors

> The Threshold Release. Hermes was the god of thresholds: the doorway, the crossing, the boundary stone. v0.21.0 assembled the pantheon; v0.22.0 is about getting through the door. A fresh desktop install now opens on a guided setup chat that runs on a free trial model, so a newcomer is talking to Hermes before they own an API key. Connectors carry the agent across into the apps you already use, with no account needed to start. Local models bring it home to your own hardware with a one-click llama.cpp runtime. And the threshold itself got sturdier: tested SemVer stable releases that installs follow by default, signed desktop packages (including the Microsoft Store), and one package manager underneath everything. Around that spine: a 600-plugin catalog, the Claude 5.5 / GPT-6 model wave, password-manager sign-in for the browser, a bot screen you can take over, one backend and one gateway for every profile, and a codebase a third smaller. This is the largest window Hermes has shipped, about 2.5x the v0.21.0 cycle, and it rolls up and fully documents the v0.21.1–v0.21.7 patch releases.

✨ Highlights

A first launch that sets itself up — Open the desktop app on a computer where you have never used Hermes and it starts a short setup chat instead of a settings screen. One card at a time it asks your name, an accent color and a layout, which apps to connect, which plugins to install, then gives a quick tour and offers up to four first tasks picked for you. It runs on a free trial model (nous/welcome, once per OS user), so it needs no key; Skip setup ends it and Settings → Run onboarding again brings it back. The agent also gained set_theme, so "make it violet, dark mode" works in any desktop chat. (#137429, #137522, #137807, #134209, #105258 — @alt-glitch, @OutThisLife, @ethernet8023, @rewbs)

Connectors: Hermes works inside your apps — The agent can now act in hosted apps such as Linear and Notion through the Nous tool gateway: ask for an app, sign in once in your browser, and the tools are usable in the same turn. You do not need a Nous account to start; the first time you use an app, Hermes creates a free connectors-only identity. The desktop has a new Connectors page that puts hosted apps and your MCP servers in one list (it replaces the MCP tab), the same setup card appears in the TUI and CLI, and you can connect several named accounts of one app (a work and a home account) and manage them with /connectors or hermes connectors. (#106842, #111008, #119074, #135143, #135072, #135097, #135151, #135173, #137426 — @alt-glitch, @rewbs)

Local models in one click — Hermes can now run open models entirely on your machine with nothing leaving it: no account, no API key. It installs and maintains llama.cpp with the right engine for your hardware (CPU, CUDA, Metal, Vulkan or ROCm), rates every catalog model against your GPU and RAM, and picks the highest-quality build that fits. Downloads pause and resume, the server starts and stops with Hermes, and engine updates are one click. Start from Settings → Providers → Local Models on Windows, macOS and Linux, or hermes model → Local models in a terminal. The catalog includes Qwen3.8 27B, Qwen3.8 Flash Next (with its MTP speculative head), Qwen3.6 35B-A3B and DeepSeek V4 Flash, plus any GGUF from Hugging Face. (#100667, #101823, #128768, #111423, #133111, #134116 — @jquesnelle, @ethernet8023)

Stable release channels — Hermes now ships tested SemVer releases. Every release passes source CI, Docker, Nix, signed desktop builds and install/upgrade runs on every OS before it is published, and source installs now move from release to release by default instead of tracking every commit on main. Prefer the bleeding edge? hermes update --set-channel main, or the new channel switch in Desktop Settings → About. Moving to an older release is labelled a rollback and never happens without asking, and installer reruns keep you on the channel you chose. (#102765, #135847, #135949, #136313, #137780 — @ethernet8023, @KoNit-K)

Signed desktop packages, the Microsoft Store, and one package manager — The desktop app is now a sealed, signed package that carries its own Python and Node and updates itself, so first launch builds nothing. Windows gets a signed MSIX (x64 and ARM64) through App Installer or the Microsoft Store; macOS gets a signed, notarized build for Apple Silicon. Underneath, a new unified package manager (hermes pm) owns every pinned, hash-checked tool and Python environment: updates build a new environment and switch only once it passes its check, so a failed or killed update can no longer leave you half-applied. (#102765, #132361, #132386, #120339, #122221 — @ethernet8023)

The Plugin Catalog: 600 reviewed plugins — The plugin catalog launched this cycle and grew to 600 entries, each pinned to a reviewed commit and installable from Hermes Desktop or the CLI. Browse by category and star ranking with a page per plugin and per author; catalog rules keep listed plugins from patching Hermes internals or shipping unscannable binaries. Memory providers now live with their makers (Honcho, Supermemory, Hindsight, Mem0, OpenViking, Holographic), as do Home Assistant, Spotify and Langfuse: existing users are migrated automatically, and the default install got leaner. (#69446, #111415, #117808, #113381, #114732, #131267, #132476, #136436 — @itpartypattaya, @happy5318, and 400+ plugin authors)

The Claude 5.5 and GPT-6 model wave — Claude Fable 5.1, Opus 5.5, Sonnet 5.5 and Haiku 5.5, GPT-6 Astra, Sol and Luna plus GPT-6.1 Sol, and Gemini 4 Argon are pickable on Nous Portal, OpenRouter and native routes where offered. Prior reasoning is now replayed by default on every provider that can read it, across resume, branches and compaction, so long multi-step work keeps its train of thought. And when a provider has a bad hour, Hermes waits out transient 503/529/timeouts in visible, bounded cycles instead of ending your turn. (#100577, #119304, #126842, #134759, #128248, #137955, #136358, #116353 — @kshitijk4poor, @unsupportedpastels, @100yenadmin, @mssteuer, @xxxigm)

Sign in to websites with your password manager — The browser agent can log into sites with logins from 1Password, Bitwarden or Hermes's own encrypted vault, and the model never sees the password. If nothing is saved, you get a masked prompt in the CLI, TUI or Desktop to save it, one-time codes are filled without entering the conversation, and card and address fills at checkout need your confirmation. (#106480, #107585, #137084)

Bot Screen: watch your bot work, take over when it needs you — A bot running on a Linux gateway can have its own desktop that Hermes Desktop streams live. When it hits a login, a 2FA prompt or a CAPTCHA, you take the screen, finish the step yourself, and hand control back while the bot carries on with your session. With a Docker, SSH or Singularity backend, the bot's screen, computer use and the browser run inside the sandbox, never on your host. (#108914, #121169, #121110)

One backend and one gateway for every profile — Hermes now runs a single messaging gateway and a single desktop backend per machine that serve all of your profiles, instead of one process per profile. Creating a profile makes its bots live without a restart, each profile keeps its own credentials, allowlists, cron jobs and sessions, and hermes update migrates existing per-profile setups automatically. Fewer processes, no token clashes, one thing to start and stop. (#112854, #108928, #118273, #117983, #118246, #118027)

See and steer your subagents live — Running subagents now stay visible above the composer in the CLI (F6), TUI (Ctrl+T) and Desktop with each child's task, elapsed time and live transcript, plus Steer and Stop buttons. /stop reaches background children and hands back their partial work, and delegate_task can pass screenshots and mocks to vision-capable children. (#105593, #115616, #97689)

A model picker that knows your plans — Star your favorite models, see a subscription running low ("17% left · resets 3:00 PM") and when a rate limit lifts right in the picker, and pick reasoning effort as part of choosing a model in hermes model, /model (/model X --reasoning high) and Desktop. You switch before you hit the wall instead of after. (#126535, #133392, #133408, #110346, #113117 — @OutThisLife, @anotherchu)

Hermes in your language, everywhere — Every user-facing string in the CLI, messaging gateway, TUI and Desktop now goes through one translation catalog with full coverage in all 16 bundled languages. New languages can ship as plugins, and any profile can override individual strings with a small YAML file. (#126296)

Leaner in every sense — The whole codebase was simplified with zero behavior change: source went from about 1.06M to 698K lines (−34%) and gateway/run.py shrank from 34,847 lines to 5,512. Prompts got lighter too: about 19 rarely used tools now load only when the agent searches for them, roughly halving the desktop tool schema sent on every call, and another ~2.1k tokens came off the fixed prompt. Local models prefill less on every turn. (#102117, #97979, #106676, #137084 — @alt-glitch)

Small comforts that add up — Opt-in vim keys in the CLI prompt, a git-branch field in the status bar, a bell and desktop notification when Hermes is waiting on you, Ctrl+C that clears your draft instead of killing the turn, an editable /queue, and hermes --native to let your own terminal handle TUI scrollback and search. On Desktop, a new Simple mode turns the app into a plain chat window, and errors now say what went wrong with a one-click fix. (#106412, #106434, #101284, #101320, #137065, #95999, #121035, #118587, #111601 — @saforem2, @TurgutKural, @glitchbunny0, @harshmoney123, @pierrenode, @abhinav11082001-stack, @OutThisLife)

⚠️ Upgrade notes

Python 3.14 is the runtime for managed installs (the package manager installs it for you). KittenTTS is unavailable on 3.14. (#102765)
Windows desktop is MSIX-only and needs Windows 11 22H2 or newer; the NSIS/MSI installers are gone. The macOS app is Apple Silicon only in default builds. (#102765, #136603)
One gateway per machine is the default. hermes update folds per-profile gateways into the multiplexed default when nothing conflicts. (#112854)
Chats no longer reset on an idle/daily timer. session_reset idle/daily modes are retired (configs that still set them log a warning); /new or /reset starts fresh. (#105021, #126244)
Old sessions are pruned automatically. sessions.autoprune now defaults to on: ended sessions inactive for 90 days are deleted at startup. Pinned and open sessions are never touched; set sessions.autoprune: false to keep everything.
Memory providers moved to catalog plugins (Honcho, Supermemory, Hindsight, Mem0, OpenViking, Holographic), as did Home Assistant, Spotify and Langfuse. Existing users are migrated on update or first start, with data intact. ByteRover and RetainDB remain bundled.
Plugin authors: the old plugin compatibility import layer is gone (#126164), hermes sync (Skill Sync) was removed (#132465), and the bundled tirith scanner was removed (#133832). Several tools were renamed (todo → todolist, cronjob → cronjobmanage, process → process_manage); the old names still work. (#97979)

🚪 Onboarding, Free Tier, Connectors & Local Models

First-run onboarding

Guided setup chat on a fresh desktop install (see Highlights). Existing installs and remote (SSH, URL, Cloud) backends don't get it automatically; the old setup-profile flow and /initiate-setup are deleted. (#137420, #134215, #108292 — @alt-glitch, @ethernet8023, @OutThisLife)
The agent can restyle the app — The new set_theme tool sets the accent (a swatch or any #rrggbb), light/dark/system mode and layout, or shows a picker; "make it violet" works in any desktop chat. (#137522 — @alt-glitch)

Nous free tier

A free model for your first desktop launch — A first desktop install with no provider or Nous account gets the free nous/welcome model as a one-time trial (once per OS user), so onboarding needs no key. The CLI, TUI and gateway get no account or free model. HERMESGUESTONBOARDING is gone. (#137807, #105258, #105260 — @alt-glitch)
Sign in and keep your apps — hermes auth upgrade, or /login in any chat or messaging DM, upgrades the free identity to a full Nous account with your connected apps. (#105259, #105261 — @alt-glitch)
Clear limits — The free rate limit ends the turn at once with the reset time; every free-tier failure has a code and a plain sentence; the app handles the account service's browser check; free-tier users see a Terms and Privacy notice. Nous accounts without credits can pick models billed to a subscription they hold and get free managed fast web search. (#134049, #111970, #133824, #117079 — @alt-glitch, @kshitijk4poor, @rewbs)

Connectors

Hosted app connectors, the Connectors page and several accounts per app (see Highlights). Connector tools can also send your local files as attachments and save the files they return. nous.guest: false turns guest identities off; tools.connectors.enabled: false turns connectors off. (#111238, #138014 — @alt-glitch)
One connect flow everywhere — Hosted apps and local MCP servers share one setup card (desktop dialog, TUI callout or CLI panel), and the agent can use new tools in the same turn. On desktop, manage_connections can show a browsable app directory. (#111008, #109517, #137426 — @alt-glitch)

Local models

One-click local models (see Highlights). Also: Hugging Face GGUF downloads with pause/resume, and a one-time setup offer after onboarding on machines that can run the recommended model. (#129506 — @alt-glitch)
Engine updates and wider GPU support — An Update now prompt updates the engine in one click. NVIDIA on Linux gets CUDA, AMD and Intel GPUs get Vulkan sized by their own memory, and every backend runs llama.cpp b11370. (#111423, #133111, #131782 — @jquesnelle, @skyecon, @mbeattietex1-star, @Belaquaa)
Better recommendations — Only models that fit fully in GPU memory are recommended, and the 27B no longer on hardware that runs it poorly. Qwen3.8 Flash Next with its MTP head fits 128 GB machines; NVIDIA Spark recommendations are tuned. (#108429, #135438, #134116, #112107 — @jquesnelle, @RyanUnderhill)
Your own local servers — LM Studio has a provider profile, Ollama pickers no longer flicker, a self-started llama.cpp server shows up in /model, and fallback to the desktop-managed model works. (#134320, #113129, #116679, #131795 — @kshitijk4poor, @DaxLee9988, @fangliquanflq, @Finn763, @albeight)

📦 Stable Releases, Desktop Packages & Package Manager

Stable releases & update channels

Tested SemVer stable releases and the channel switch (see Highlights). v0.21.6 and v0.21.7 were the first through the new gate; forks stay on main, and an install ahead of the newest release waits for the next.
Lighter update checks — one GitHub API call a day replaces git fetch every 30 minutes. (#107648)

Desktop bundles & the Microsoft Store

Sealed, signed desktop packages (see Highlights). In a package, hermes update points to the right updater (App Installer, Store or macOS). (#134911)
Packaged installs work end to end — the agent's terminal runs hermes, Uninstall explains OS removal, and Python-dependency plugins install inside MSIX. (#134051, #135333 — @alt-glitch)

Unified package manager

hermes pm (see Highlights): pinned, hash-checked Python 3.14, uv, Node, ripgrep, FFmpeg, Chromium and Git/Bash on Windows, with hermes pm doctor|status|repair|gc. Contributors use source ./activate (or .ps1/.fish).
Dependency environments are generations — new ones are checked before use, so a failed install keeps the working one; updates and hermes pm gc reclaim old ones (92 GB to 18 GB on one host). (#124968, #133808 — @JoaoMarcos44)
Optional features install on first use — opt-in SDKs (Anthropic, Bedrock) load mid-session without a restart; security.allowlazyinstalls: false turns this off. (#122221 — @ethernet8023)
Plugins declare Python dependencies — resolved with core across profiles; conflicts are refused, and updates disable a plugin that no longer fits. Hindsight, Honcho, Supermemory, Mem0 and Home Assistant moved to the catalog and auto-install where used. (#113851, #122103, #114569, #132469 — @ethernet8023)

Install & update

Updates can't half-apply (see Highlights). A killed update repairs itself on the next launch. (#132361, #120339)
Faster updates, smaller checkouts — updates rebuild only what changed (16.5 s vs 32.5 s on macOS), clones are blobless, and partial-clone .git growth is fixed. (#135092, #133016, #131679 — @kshitijk4poor, @ethernet8023, @liuhao1024, @whyyagswhy)
Small, hash-checked installers — install.sh/install.ps1 verify pinned uv and Git, hand off to PM, log to logs/install.log, and now work on musl Linux (Alpine, Void), Windows 10 and Unicode Windows paths. (#124964, #125598, #132430 — @JoaoMarcos44, @kshitijk4poor, @Finn763, @OutThisLife)
Failures say why — with opt-in telemetry, install, update, skill and plugin failures record a reason. (#133809)

Docker / Nix / Termux / Windows

Docker — pinned Debian 13 base with full Chromium; stable/latest move only on a published release; baked-in extras return after a restart. (#135726, #135084 — @unsupportedpastels)
Nix, Termux, Windows — Nix shares the pins; its desktop app gets Wayland; Termux moves to a signed APT package (pkg upgrade hermes-agent), though its docs still warn it is broken; Windows updates finish while the old runtime is in use. (#128144, #122146, #131779 — @ethernet8023, @janviernine)

CI & release engineering

Release gates — E2E suites run on release builds, the full suite on native Windows, and SSH/Docker backends against real daemons. (#135409, #96458, #136602 — @ethernet8023)

🧠 Providers & Models

New providers

Providers as plugins — ACP and CLI-driven providers install out of tree via hermes plugins install; --provider chatgpt picks ChatGPT Codex OAuth. (#101456, #115761 — @AlexanderPrendota, @DarRahman)
Provider upgrades — Bedrock serves GPT-6 (1M) and enforces Claude Guardrails; Azure Foundry lists deployments; Gemini takes full JSON Schema tools; OpenCode Go routes Claude via Messages. (#133573, #107815, #115770, #98928, #134848 — @victor-kyriazakos, @JoaoMarcos44, @xxxigm, @thejpanganiban, @pandacooming)
New knobs — agent.text_verbosity sets Responses answer length; named custom providers run on the Codex app-server. (#115880, #115905 — @Beandon13, @cosin2077)

Model catalog

Claude 5.x — Opus 5.5 also on native Anthropic and Bedrock (1M). (#122633 — @kshitijk4poor, @didodim)
GPT-6 — Astra/Astra Pro in standard, fast and flex; opt-in Codex -900k; /fast ultrafast for Astra and 6.1 Sol, per plan. (#103261, #119410, #136950 — @daniil-grois, @sdalonzo)
Gemini 3.8 Flash and Gemini 4 Argon. (#101450, #137989 — @kshitijk4poor, @dgkaaks)
More — DeepSeek V4.1 Flash, Qwen3.8-Max-0902, Grok 4.7, GLM-5.3-FlashX, Muse Spark 1.3, Solar Pro 4/Mini 4. (#107489, #100966, #118371, #117435, #101948, #131645 — @rob-maron, @am423)

Auth & subscriptions

Profiles share OAuth logins safely — single-use grants never fork; a profile's own login is kept. (#100929, #134574 — @unsupportedpastels)
Nous sign-in survives hourly expiry, concurrent subagents, Portal outages and edge checks. (#103526, #121488 — @kshitijk4poor, @zzragida)
Dead logins are named once, with the hermes auth add fix; auth.adoptexternallogins: false stops borrowing Codex CLI/Claude Code logins. (#113816, #115586)
Keys stay on their hosts — configured base_url honored everywhere; Anthropic/OpenAI keys never reach foreign hosts. (#121614, #120299 — @austinpickett, @686f6c61, @ahisblessed, @xuezhaolan, @leemove)

Routing/fallback/caching

Outage recovery — agent.autorecoverycycles (default 5) bounds the wait; fallback returns to a Codex primary whose quota reopened. (#116353, #130716 — @kshitijk4poor, @xxxigm)
No surprise billing — auto-routing never bills a provider you didn't pick; provider_routing.models pins OpenRouter per model. (#107366, #104159)
Prompt caching — opt-in cache_ttl: auto (1h interactive, 5m subagents/cron); big sessions confirm a cache-breaking /model; compaction keeps the prefix. (#118337, #95267, #104455 — @kshitijk4poor, @JoaoMarcos44)

Reasoning

Replay and effort — reasoning replays on every provider that reads it; effort on every picker, custom tier names; Anthropic fast mode follows the docs. (#136358, #110346, #115735, #120517 — @jquesnelle)

🏗️ Core Agent, Sessions & Memory

Agent loop & reliability

Stalled turns recover — a watchdog (agent.turnliveness.timeouts, default 600 s) interrupts a no-progress turn and frees its session; repeated transcript repairs now raise one error and notice. (#99758, #99687 — @kshitijk4poor, @Finn763, @HexLab98)
Streams fail less and report honestly — text-less dead streams retry, repetition loops are cut, and interrupted turns aren't reported as done. (#113135, #130551, #112272 — @kshitijk4poor)

Compression & context

Compaction triggers on real token counts — provider-reported usage, not bytes/4; the protected tail is capped at 20% so small-window models compact. (#104555, #117957 — @686f6c61)
Bad summaries can't wipe context — refusals and overloaded summary providers leave the transcript alone, and an uncommitted compaction changes nothing. (#118920, #115906, #136083 — @kshitijk4poor, @fangliquanflq, @mnajafian-nv)
New knobs — provider-scoped compression.modelthresholds keys and auxiliary.<task>.noprogress_timeout. (#108061, #115804 — @chelsealong)

Sessions & state.db

state.db reliability — lock timeouts name the holding process, a busy database no longer kills a turn, and sibling PID namespaces can't steal leases. (#116967, #134577, #132161 — @kshitijk4poor, @686f6c61)
state.db stops growing — auto-prune is on by default (ended sessions over 90 days) and closes stale cron/kanban/subagent sessions; VACUUM runs only when 25% is reclaimable. (#101316, #100903 — @stepanov1975)
Repair commands — hermes sessions set-journal-mode delete|wal, repair-profiles (crossed profiles) and repair-prompts. (#117684, #115689, #124200 — @kshitijk4poor, @JoaoMarcos44)
Cleaner session lists — one-shot runs stay out of pickers, sessions.show_subagents lists titled subagent chats, messages get stable ids for context engines. (#113826, #122304, #126687 — @OutThisLife, @kshitijk4poor, @100yenadmin)

Memory

Memory providers leave core safely — OpenViking and Holographic move to the plugin catalog on update or first start, data intact, or say why not. (#134350, #136436, #131269)
Built-in memory writes land — hand-formatted MEMORY.md/USER.md accepted, refusals say what to fix, secrets scrubbed before providers see them. (#133038, #134429 — @aniruddhaadak80)

Profiles & config

config.yaml survives bad moments — a broken file falls back to the last good copy; read errors can't wipe it. (#109463, #120343 — @Shenrui-Ma, @huklaa)
Safer hermes config — get masks secrets (--raw opts out); set refuses typo paths and stores env-style names in .env. (#111341, #112250 — @webtecnica)
Profiles stay separate — REST routes act on the profile they name, exports skip .ssh/.aws/.gnupg, and import-agent --sync keeps imports current. (#118275, #132201, #88855 — @kshitijk4poor, @JerryLiu369)

Languages (i18n)

Language packs — any language can ship as a plugin (provides_locales) or a per-profile override file. (#126296)

📱 Messaging Platforms (Gateway)

Gateway core & multiplexing

One gateway serves every profile — hermes gateway status explains any boot-guard refusal, hermes gateway migrate --multiplex migrates by hand, webhook platforms serve each profile at /p/<profile>/, hermes -p X gateway stop|start parks one profile, and gateway.standalone: true is a temporary opt-out. (#112854, #108952, #119774, #119680 — @victor-kyriazakos)
Profiles stay isolated — clones skip bot tokens unless --clone-channels; profile_routes can route by sender. (#109502, #115642 — @italodsfernandes)
Sessions and commands — /login signs free-tier users in from a DM; idle/daily sessionreset is retired, so only /new and /reset start fresh; /branch opens a sibling thread on Discord, Telegram, Slack and Matrix (--here keeps the old behavior); decline mode sends unauthorized DMs one polite refusal; an opt-in servedmodel footer names the model that answered. (#105261, #126244, #117450, #88028, #115925 — @alt-glitch, @kshitijk4poor, @anpicasso)
Files and plugins — MEDIA: files from ssh/Modal/Daytona sandboxes reach the user; plugins can claim messages via postgatewayadmission. (#103600, #133157 — @kshitijk4poor, @tokou)

Messaging platforms

Telegram — opt-in botsrequiremention stops bot reply loops, extra.droppendingoncoldboot: false keeps messages sent while offline, CJK can opt in to rich messages. (#106534, #116134, #111831 — @kshitijk4poor, @kokhlo, @justcarlosm, @wang2)
Discord — setup verifies the token, links the Message Content Intent and allowlists you; free-response channels can auto-thread. (#132456, #116168 — @kshitijk4poor, @FunJim)
Slack — Block Kit /model picker; status/titles use the Agent Sessions API. (#103436, #101477 — @kshitijk4poor, @sohomsahaun)
WhatsApp — native mentions via hermes send --mention, no 5 s batching delay, paired sessions on every profile. (#115253, #117104, #132518 — @kshitijk4poor, @unsupportedpastels, @Diaspar4u)
Signal, Matrix, Email, QQ Bot — Signal tables render monospace; Matrix LaTeX typesets in Element (Labs math setting); Email refuses spoofed senders and now requires an authservid pin (mail drops until set); QQ Bot sendmessage delivers media. (#106538, #106515, #132663, #131927 — @chelsealong, @romanovzky, @kshitijk4poor, @OutThisLife, @cadezhou)

Webhooks & API server

Webhooks — opt-in coalesce folds event bursts into one run, cronjob routes fire cron jobs on events, Standard Webhooks signatures verify, opt-in mirrorto_session gives replies context. (#92066, #95262, #104183, #120825 — @HwangJohn, @Potrock)
API server — reasoning streams to OpenAI-compatible clients; stream approvals are answerable. (#115797, #121769 — @kshitijk4poor, @liuhao1024)

Relay & Bot Chat

Bot Mode rooms — edit members, Reply to @handle, 200-message history, sender-aware bot DMs with an ALLOW_BOTS loop guard. (#113384, #107520 — @erosika, @69k4xmdfm2-blip)
Relay — connector checks send_message targets; NeMo Relay tracing at 0.10.0 tags spans with the working directory. (#99220, #135787, #108345 — @benbarclay, @mnajafian-nv, @afourniernv, @KoNit-K)

🖥️ Desktop App

Workspace & layout

Simple / Advanced mode — Simple hides developer panes; Advanced stays the default. (#118587 — @OutThisLife)
Windows and tabs — Titlebar tabs; profiles open in their own window or as startup default. (#107099, #113176 — @OutThisLife)
Sidebar — Group by gateway/profile, reuse Cloud instances, drag New session onto a pane. (#105813, #70571 — @abundantbeing)
Import sessions — Continue another coding agent's transcript in Hermes. (#104229 — @Adolanium)
Goal / Loop / Heartbeat cards — Live pause/resume/stop above the composer. (#104246 — @jerrygooch)
Launch options — Start on a fresh chat; opt-in tray minimize and Cmd+Option / Ctrl+Alt HUD tap. (#101304, #118441, #118446 — @jinglun010-cpu, @OutThisLife)

Chat & composer

Pickers and input — Reasoning-effort pill; add a model by slug; 3,000+ char pastes attach as .txt; opt-in macOS window-screenshot shortcut. (#109907, #120693, #108901, #113349 — @OutThisLife)
Actionable errors — Cards name the problem and fix; usage-limit cards show reset time and can schedule a retry. (#111601, #116288)
Transcript — Stable approval queue; hideable code diffs. (#107073, #116569 — @OutThisLife)
Browser comment mode — Pin page elements with notes; crops, selectors and styles go to the composer. (#100083 — @Adolanium)

Settings & plugins

Settings — Ordered subpages searchable from ⌘K; Chat Font (e.g. OpenDyslexic); Russian, French, German, Spanish. (#117127, #111226, #100429 — @OutThisLife, @warment, @FASTCHIP)
Models — Per-task auxiliary reasoning effort; Custom Endpoints pick an API mode. (#110435, #115851 — @higgs1729, @SacrEllfarch)
Plugins — One row per plugin; composer and settings APIs. (#107314, #120907 — @OutThisLife, @Heybinshao)

Bot Mode

Bot Screen — Linux-gateway bots stream a desktop you can take over for logins or 2FA. Off by default; needs host packages. (#108914)
Group chats — Reorder rooms; compress a member's hidden history. (#105909, #117015)

Performance & platforms

One backend — Desktop attaches to the running backend, which serves every profile. (#118246)
Platforms — Faster Windows startup; Linux runs without sudo and under WSLg/Wayland. (#111002, #100136, #113247 — @codeJRV, @kvnloo, @austinpickett)

Models, chat & workspace

Model picker knows your plans — Star Favorites; provider rows show when a rate limit lifts and a "17% left · resets 3:00 PM" chip before you hit it. Also opt-in per-model pricing with cached-read rates, an Ultrafast speed tier and keys to step reasoning effort. (#126535, #133392, #133408, #126651, #132445, #125800 — @OutThisLife, @kshitijk4poor, @anotherchu)
Safer rewinds and honest stops — Regenerate or edit asks before archiving more than one later turn; Stop shows the partial reply the session saves. (#133748, #121597 — @kshitijk4poor)
Reading and layout — Chat Text Size separate from UI Scale; theme typography; lightbox zoom/pan; compression count in the context meter; context-aware right-click. (#128975, #125904, #127247, #126653, #131215 — @OutThisLife, @unsupportedpastels, @dskwe)
Workspace and sessions — Sessions follow the agent's git worktree and branch; Review pane scopes work. Browse SSH workspaces, drag sessions onto projects, search logs, see and clear Kanban blocks. (#128428, #127200, #99538, #126543, #126658, #125647 — @ethernet8023, @OutThisLife, @nateEc)
Preview and voice — Preview opens public web pages; YouTube plays via a local player. Non-streaming TTS speaks from the first sentence; quiet-audio STT hallucinations are filtered. (#130393, #130975, #121685, #127275 — @xxxigm, @OutThisLife, @kshitijk4poor, @embwl0x)

Plugins, updates & the app

Settings ▸ Plugins and a bigger SDK — Every plugin gets a settings page (agent plugins from their config schema). Desktop plugins can run app actions by id, speak via the pet, add Appearance controls and reorder sidebar nav. (#133182, #136417, #135504, #120912, #120922 — @tobenwarrior)
Updates you can steer — Source installs pick Stable or Every commit in Settings › About; the updates dialog names the channel. The app warns when older than its backend. (#135949, #136313, #122911 — @OutThisLife)
App polish — "While working" keep-awake mode, macOS 26 layered icon, sharper MSIX icons, opt-in shared-metrics consent strip. (#128984, #122976, #131669, #125074 — @kshitijk4poor, @jonpol01, @ethernet8023)

⌨️ CLI, TUI & Dashboard

CLI

Vim keys, git branch and bell — display.vimmode, gitbranch status field, display.bellonprompt (bell plus OSC 9 notification); all off by default. (#106412, #106434, #101284, #101320 — @saforem2, @TurgutKural, @glitchbunny0, @harshmoney123)
Friendlier keys — Ctrl+T opens the subagent monitor; a mid-turn multi-line paste is one message. (#105879, #109146)
Scriptable commands — hermes usage --json (quota, no session); hermes worktree --json/--older-than; kanban edit --title/--body/--priority; -t picks MCP servers to start. (#115899, #95257, #117632, #101634 — @himanusia, @kshitijk4poor, @SelfParody)
Also — hermes -z exits non-zero on failure; -m custom:<name>:<model> reaches that provider; the footer no longer collapses to "Window too small". (#113234, #115293, #117439 — @kshitijk4poor)

TUI

Native terminal mode — --native or display.tui_native (opt-in). (#121035 — @OutThisLife)
Running-turn control — double-Esc interrupts, push-to-talk cuts speech, the live dock (CLI too) shows /goal and queued prompts. (#125803 — @OutThisLife)
Typing fixes — Shift+letter on extended-key terminals, macOS Ctrl+D, Wayland image paste, steady idle redraws. (#90674, #116851, #116824, #87907 — @francip, @fangliquanflq)
Reconnects and attachments — attached TUIs rejoin their session; attachments.storage: workspace stages files a sandboxed agent can read. (#112227, #125816 — @OutThisLife)

Dashboard

Chat on more devices — screen readers, iPad touch-scroll, no doubled mobile-keyboard characters; a second tab gets its own terminal. (#133960, #134181, #116978, #117061 — @austinpickett)
Errors, sessions, analytics — errors are a sentence and fix button, not raw JSON; title search, a live switcher, per-API-call analytics. (#111602, #133981, #134100, #133991 — @austinpickett)
Self-hosting — reverse-proxy subpaths, password sign-in beside OAuth, non-expiring remote sessions. (#133903, #107018, #110061 — @austinpickett, @Doud-FR)

Slash commands

Reasoning effort in every picker — hermes model, aux models and /model add an effort step; /model X --reasoning high works too. (#110346)
Editable /queue — list, edit, move or remove prompts; /s = /steer. (#95999, #125803 — @abhinav11082001-stack, @OutThisLife)
/context per file — shows each instruction file as loaded, truncated or shadowed. (#91272)

🔧 Tools, MCP & Browser

Tools & tool search

Rare tools load on demand — computeruse, sessionsearch, imagegenerate, cron and Desktop GUI tools sit behind toolsearch by default (desktop schemas 13,367→6,883 tokens; defer: [] opts out); todo/cronjob/process become todolist/cronjobmanage/process_manage (aliases kept). (#97979 — @alt-glitch)
Prompt cache holds all session — the tool list is frozen per session across TUI, -q --resume and gateway hops. (#120289)
Loop guardrails — unattended gateway/cron sessions hard-stop tool loops; 5 identical replays halt any tool. (#100967 — @plcunha, @benbenlijie)
Smarter file and web tools — readfile shows SQLite schemas and flags merge conflicts, searchfiles runs ripgrep directly (5–6x faster), keyless web_search fails over between free vendors. (#115974, #104502, #134048 — @kshitijk4poor, @alt-glitch)

MCP

Device-code login — hermes mcp login <server> --flow device for headless terminals. (#104891 — @wjorgensen)
Sturdier OAuth — refresh tokens are never erased, double-spent or sent to another issuer; RFC 9207, Google-hosted and WAF-fronted servers log in; gateways never open browser tabs. (#106185, #111186 — @kshitijk4poor, @anhtahaylove)
More servers connect — SSE-only servers fall back, strict servers connect (sampling.tools opt-in), and the catalog adds official n8n and Asana V2. (#106432, #131891, #116048 — @aieng-abdullah, @OutThisLife, @nikkoxgonzales, @alt-glitch)
Startup and results — boot connects ≤ mcp.discovery_concurrency (4) servers at once; vision models see MCP images; dead stdio servers respawn without replaying a call. (#117956, #133815, #106546 — @Halldrix, @sarahwu185, @100yenadmin)

Browser & computer use

Vault and sandboxed screen — password-manager sign-in also fills cards and addresses after you confirm; hermes-sandbox:desktop is the new default image (existing sandboxes kept). (#106480, #121169)
browser_exec works out of the box — drives bundled Chromium (also the cloud fallback) and opens localhost via a sidecar. (#102986 — @shadus)
Also: a CDP seam for plugins; unchanged computer_use screens are not resent. (#133552, #98954 — @web3blind)

Terminal & code execution

Long commands stop blocking — foreground timeouts over 600 s become background jobs, heartbeat=N sends progress, and the live-work dock lists them. (#103529)
Sandboxes — results flag a recreated environment; SSH paths resolve remotely. (#107093, #122657 — @kshitijk4poor, @xxxigm)
LSP — custom servers via lsp.servers and lsp.package_manager; never runs a cloned repo's own interpreter or SDK. (#115714, #126239 — @ZHCHJ888, @kshitijk4poor, @jonpol01)

Media (image/video/voice)

New models — GPT Image 2.5, Kling Image v3; video: Kling 3.0, Kling O3, LTX 2.5, Wan 3.0, MiniMax H3 Max Turbo, Gemini Omni Flash 1.1. (#105988)
Live dictation — opt-in stt.streaming shows words as you speak (CLI, TUI, Desktop); long recordings transcribe on all cloud providers. (#133853, #133825 — @TimeLord2010, @Julientalbot, @kokhlo)
Voice conversations — opt-in voice.voicechatmode: gpt-live gives Desktop full-duplex voice; auxiliary.voice_chat runs spoken turns on a faster model; TTS starts sooner. (#108137, #133986, #115846 — @liuhao1024)

🧩 Plugins, Skills & the Plugin Catalog

Plugin Catalog

Plugin and author pages — /docs/plugins shelves plugins under Memory, Desktop, Platforms, Web, Tools, Voice, Automation and Models. Pages show the description, a disclosure callout, screenshots, the README from the pinned commit, an Open in Hermes Desktop button and a copyable install command. (#111415, #111547, #117808)
Easier-to-read cards — a version label sits next to the pinned commit (1.2.0 @ ad3f352b) on the website, CLI and Desktop; cards gained banner images, a uniform size and light mode. (#113381, #125065, #124001 — @kshitijk4poor, @xxxigm)
Known-issue warnings — listings can declare known issues, which hermes plugins install and the dashboard show on install. (#124058 — @happy5318)
Listing rules — Desktop plugins must stay within SDK slots, 11 plugins that patched internals were delisted (installed copies keep working), and the submission guide matches what CI enforces. (#115579, #130860, #131048)

New in the Catalog

All 600 listings are new this cycle.

Moved out of core — besides the five memory providers, Holographic has a new community maintainer; Home Assistant, Spotify, Langfuse and TouchDesigner are now official catalog plugins. (#114732, #136196, #132476, #137130 — @itpartypattaya)
Official — Blender Lab, Snyk, NVIDIA App and NVIDIA Broadcast (Windows only), Telegram Business, Memory Wiki. (#119365, #109084 — @alt-glitch)
Memory (65) — Cognee, LanceDB, ReMe, Memoria, HydraDB, Mnemosyne, YantrikDB, BetterDB. Web and search (34) — Apify, Parallel, Linkup, SerpApi, You.com, TinyFish, Oxylabs. Model providers (48) — JetBrains Junie, Telnyx, NetMind, Groq, Chutes, Kiro, Opper, AIHubMix. Platforms (32) — Inline, Microsoft 365, Rocket.Chat, VK, Zalo, iMessage, Sendblue. Voice (18) — Speechify, Deepgram, Fish Audio, Gemini Live. Desktop panes (140) — Telegram Client, Quota, Orbit, Kanban Gantt, Monitoring Dashboard. Tools (180) — GitHub App, Coder, Devin, NetBox, Financial Datasets, MetaMask, Tempo MPP, DaVinci Resolve, vidIQ, Govee, SwitchBot, Japanese e-Gov data. (#112292, #118231, #118512, #114202 — @siillee, @georgeatparallel, @AlexanderPrendota and many more)

Plugin system

Model providers as plugins — out-of-tree providers show in model pickers, log in via hermes auth (built-in OAuth PKCE) and refresh tokens. (#116552 — @ericmaddox, @ZenMux-1)
Per-profile plugin host (opt-in) — plugins.isolation: host runs third-party plugins in a per-profile process with only that profile's secrets. (#126911)
New plugin APIs — hooks for interrupted turns, auxiliary LLM calls and human-input prompts; plugins can start gateway sessions, add Automation Blueprints and aux model slots, ship the computer-use driver and make Codex-signed requests. (#118909 — @zrmnelson, @JonZal, @hsy5571615, @webtecnica)
Desktop plugin SDK — config_schema settings render as a form in Capabilities → Plugins; plugins get a skills/toolsets/profiles bridge and model-pill/menu slots. (#118917 — @LeonSGP43, @tobenwarrior)
Install, pin, update — private repos install with your git credentials, Desktop pins a plugin to a commit, updates keep user data, and plugin skills run as /plugin:skill. (#106981, #107321, #133175 — @JoaoMarcos44, @pnpwin, @ctaylor86)
Sturdier loader and scanner — hung imports are skipped after plugins.loadtimeoutseconds (10s), guard hooks fail closed, and prose, fixtures and regex literals no longer block installs; plugin deps follow the plugin's security policy. (#118915, #115954)
Moved out of core — Spotify and Langfuse became official plugins (auto-migrated); tirith was removed, its key checks built in. (#135389, #133832)
New plugins — reMarkable, hermes-pii, hermes-stt-enhance (catalog); Meta muse-image (bundled). (#117191, #132154, #134418, #100959 — @cygnostik, @lukefx, @dmmeteo, @mreso)

Skills

New optional skills — pr-lens (animated PR diagrams), system-atlas, anatomy (isometric explainers), mono-color (ink-print images), dream-loop (3D concept-art loops), scrollcraft (scroll pages), auteur (cinematic web), ip-as-logo (mascots), ai-presenter-video, live-dashboard (self-updating pages), dynamic-workflow (fan-out campaigns), reddit-reading, rss-feeds. (#109306, #103821)
Skills Hub — the index builds again with about 480 science skills; search also finds unindexed skills. (#109178)
skills.autoload and skills.createdir — pin skills into every session; choose where agent-made skills go. (#92048, #100377 — @ctaylor86, @ArcherQAQ, @giwaov, @Frosti7)
Better self-improvement — learnings and corrections go into the task's skill; background review can improve any skill; skills added mid-chat reach the next message. (#102107)
Lighter curator — no longer blocks the CLI prompt; one install fell from 1.9 GB to about 200 MB; unused skills archive at 30 days (was 90). (#115862)
Skills Guard — blocked installs in a 421-skill sample fell from 83 to 68; inline shell is limited to non-community skills. (#135595 — @Awshesh12, @liuhao1024, @FlashWayne)

⏰ Cron, Kanban & Delegation

Cron

Jobs follow your main model — Unpinned jobs use the model configured at fire time; pinned locks one. (#113679)
Self-healing schedules — A fire that never reached the model (e.g. after wake) re-runs after 5, 15 and 30 minutes, a provider "retry after" window parks the job quietly, and a slot missed during a restart fires once. (#108731, #115843)
Quieter alerts — One alert per incident plus a reminder every cron.failurerepeatalerthours; failuredeliver reroutes or mutes failure notices; an agent can fail its run with [CRON_FAILURE]. (#114807, #101373, #113155) — @victor-kyriazakos
New job options — --paused creates a job unarmed; --interpreter runs scripts on your own venv. (#104984, #125392) — @M1racleShih
Profiles and delivery — A multiplexed gateway runs each profile's jobs with that profile's env and secrets; delivery needs positive evidence, output is secret-redacted everywhere, and late or satellite runs are labelled. (#118027, #100908, #112830) — @yoniebans

Kanban

Workers ride out provider trouble — Failed turns retry in place with context; rate limits or 5xx requeue instead of burning retries. (#112318, #112500) — @EvgenyMettsler, @dmelkk-secondbrain
A board that explains itself — Cards show the worker's last output on failure; dispatch says why a card is held. (#112618) — @chelsealong
Workflow and tooling — One workflow definition drives columns; workers get kanban_schedule; kanban create --body-file; Desktop follows gateway switches. (#134340, #130455, #116791, #119054) — @benbarclay, @unsupportedpastels, @fangliquanflq

Delegation & multi-agent

Live subagents, images and /stop (see Highlights). (#105593)
Fan-outs lose less — Failed children surface at once, an owner crash keeps finished work, children can hand processes to the parent, and per-task completions are opt-in. (#103549, #116707, #105125)
Child routing — delegation.fallbackproviders gives children their own chain; childtimeout_seconds measures inactivity. (#105347, #117606) — @ayushnangia
/goal — Consistent on CLI, Desktop and messaging; the judge waits on subagents; /goal pause for now no longer overwrites the goal; gates run in the session workspace. (#104833, #132251, #125453) — @jayzhou2309

🔒 Security, Privacy & Codebase

Security & privacy

v0.21.6 security fixes — dashboard sign-in hardening (spoofed X-Forwarded-For, size caps, loopback-only login codes); automatic git skips repo filter programs; the email allowlist resists display-name spoofing. (#133367, #130685, #130661, #125212) — @unsupportedpastels, @kshitijk4poor, @Froraut, @jonpol01, @keeltrace
Secrets stay put — child processes don't inherit adapter/dashboard secrets; remote execute_code keeps its token out of argv; profile exports skip credential stores; keys never reach foreign hosts on refresh/fallback. (#125755, #124262, #130525, #120299) — @kshitijk4poor, @jonpol01, @beardthelion, @leemove
Sharper redaction — debug share redacts before truncating; file reads and terminal output mask .env/config secrets; hermes config get masks unless --raw; memory hand-offs are scrubbed; plain token= lines stay visible. (#132270, #111422, #111341, #134429, #100564) — @kshitijk4poor, @Froraut, @shehjaddev, @webtecnica, @aniruddhaadak80, @fangliquanflq
Owner-only files at rest — credentials, state.db, snapshots, browser profiles, media caches, any umask. (#109509, #127229) — @JoaoMarcos44, @rohitsabu, @OutThisLife
Wider guards — more fetches pass the SSRF guard (security.fakeipranges for fake-ip proxies); cloud-metadata fetches, zsh/dash pipe-to-shell and deno eval need approval; approvals.deny works in sandboxes; built-in rules replace bundled tirith. (#114887, #113156, #116726, #103649, #133832) — @beardthelion, @AYin-Z, @fangliquanflq
Holes closed — the MCP OAuth callback stops reflecting HTML; webhook, SMS and WhatsApp Cloud inbound reject blank signing secrets. (#92612, #133257) — @memosr, @ahadvice
Opt-in shared metrics — daily usage stats reach Nous only with consent; both telemetry.shared_metrics switches default off, each profile asks once, Enter = "No thanks". (#95278) — @benbarclay

Codebase & performance

Leaner prompts and tools — ~2.1k fewer prompt tokens a request, on-demand vault tools, one-round-trip file probes, hermes -w no longer repacks each launch. (#137084, #101599) — @yaojiejia

Other

Safer backups — hermes backup keeps the newest 3, flags incomplete archives; hermes import refuses damaged ones. (#106455, #121498) — @buihongduc132, @kshitijk4poor
Also — KEY2… env vars join credential pools; one-screen hermes status; opt-in display.suppresswarning_notifications; Desktop Bots roster sections; only Hermes' own node/npm/uv are used; Xiaomi MiMo v2.6. (#112390, #131034, #114370, #101290, #125589, #118502) — @PhoeniXAbhisheK, @victor-kyriazakos, @fortun8te, @rob-maron
For contributors — CODEOWNERS replaces the label gate; E2E (incl. native Windows) runs only on release builds; stable releases skip macOS Intel/Termux by default. (#131726, #136603) — @ethernet8023

🐛 Notable Bug Fixes

Onboarding, connectors & local models

Managed llama-server no longer crashes on Windows with 0xC0000374 and no longer inherits your credentials (#116923)
Windows local-model servers are contained and orphans recovered safely; two backends booting together start one router (#111038, #117600 — @jquesnelle, @chelsealong)

Install, update & packaging

Docker agents no longer lose their built-in API server, messaging and MCP dependencies after a restart. (#135726 — @unsupportedpastels)
A hermes update killed mid-pull no longer breaks every entry point. (#120339)

Providers & models

A rate-limited Claude model no longer benches the whole credential for every other Claude model. (#113171 — @KoNit-K)
Codex app-server sessions now get SOUL.md and the Hermes system prompt. (#115759 — @JonthanaHanh, @ooiuuii, @Momentum96)

Agent loop, sessions & memory

A chat whose session row was deleted recreates it instead of silently dropping every later turn (#124117 — @kshitijk4poor, @strzhao)
Messages flushed at gateway shutdown are recovered into their session (#114225 — @kshitijk4poor, @spfcraze, @yoyodine-industries, @briandevans)

Gateway & platforms

Telegram no longer stalls under flood control or stays connected but deaf on a wedged dispatcher. (#116987, #132162 — @kshitijk4poor)
Slack native streaming stops posting answers twice. (#121762 — @kshitijk4poor, @ms-elbdev)

Desktop

Replies no longer show twice, garble or vanish after resume, steer, a chat switch or reconnect (#118890, #120290, #121061 — @BearHuddleston)
Pressing Enter answers the clarify card on screen, not a background chat's (#76472 — @briandevans)
Duplicate or vanishing replies after refresh, session switch or reused tool-call ids (#131758, #128003, #130553 — @OutThisLife, @alt-glitch, @kshitijk4poor)
"This device" backends no longer idle-killed after an hour; new chats run on the gateway you picked (#134942, #132538 — @unsupportedpastels)

CLI, TUI & dashboard

Dashboard saves no longer overwrite secrets with their masked preview (#121250 — @kshitijk4poor)
Resizing the CLI no longer re-appends the conversation to scrollback (#120321 — @Jackal991)

Tools, MCP & browser

A parked OAuth MCP server no longer replays its dead refresh token on every new session, a storm that could trip a rate-limit ban (#137502).
computer_use element clicks work again on cua-driver 0.21+; only pixel clicks worked before (#111313 — @jeffjhunter).

Plugins & skills

hermes plugins list and the dashboard Plugins page make at most one live catalog request instead of waiting through one timeout per installed plugin. (#114811)
On treeless source checkouts the plugin inventory no longer takes 40–80 seconds, which was longer than the Desktop request timeout. (#125716 — @liuhao1024)
Enabling a plugin from Desktop, the TUI or the dashboard no longer strips the core tools. (#135048)
A platform whose plugin failed to load at startup is flagged in hermes status and comes back without a restart. (#130613, #133289) — @kshitijk4poor

Cron, Kanban & delegation

Gateway /goal gate add no longer lets a non-admin reach the host shell (#101499)
Automatic git in Kanban, worktree cleanup and subagents no longer runs a cloned repo's hooks or filters (#130661)

Security & misc

Qwen models behind Alibaba's content guardrail end the turn with the safety notice instead of retrying for four minutes. (#136425)
Detected password managers can be switched on from Settings again; the toggle was a no-op. (#109558) — @kokhlo

↩️ Reverted in this window (not shipping)

Collective Wisdom V1 (an in-tree org skill marketplace) was merged and then removed; there is no wisdom code in this release. (#94266 — @shannonsands)
The Desktop card-style Skills/Plugins catalog browser and its website "Install in Hermes" links were reverted three times; Desktop browses capabilities as list tabs with the embedded catalog picker. (#119381, #131252)
Approval and clarify prompts that wait until answered were reverted; approvals.timeout still applies. (#130167)
Parallel group-chat rounds in Bot Mode were reverted; rooms run serially. (#101112, #101139)
Full isolation of named profiles from the root auth.json was reverted after Desktop bots lost their shared login; profiles keep their own login when they have one. (#113425, #118373, #134574)
hermes cron resnap and creation-time model snapshots were replaced by cron following your main model (pinned locks a job to one model). (#106496, #113679)
The Classic default skin palette and a tirith catalog plugin were reverted. (#130015, #133838)

👥 Contributors

Core Team (Nous Research)

@teknium1 — release direction, salvage campaigns across every subsystem, and ~2,800 merged PRs
@kshitijk4poor (806 PRs) — providers and reasoning replay, compaction, state.db, free tier, multiplex parity, and hundreds of salvages
@OutThisLife (679 PRs) — the desktop app: model picker, Settings ▸ Plugins, workspace, Bot Mode UI, connector cards
@alt-glitch (175 PRs) — first-run onboarding, the Nous free tier, connectors, tool search, machine facts
@austinpickett (160 PRs) — dashboard chat, desktop SSH/remote, Bot Mode and recovery fixes
@ethernet8023 (96 PRs) — the unified package manager, signed desktop bundles, stable release pipeline, local-model engines
@unsupportedpastels (60 PRs) — CLI/TUI interrupt and admission handling, cron reliability, Discord voice, Docker extras
@jquesnelle (22 PRs) — local models: the managed llama.cpp runtime, recommendations and engine pins
@helix4u (20 PRs) — desktop interrupt, terminal and session fixes, installer ordering
@benbarclay, @victor-kyriazakos, @rewbs, @yoniebans, @rob-maron, @c2h5oh, @notwitcheer, @shannonsands — relay and dashboard auth, Slack and Bedrock, managed search and connector tokens, install E2E, model catalogs, CI and linting, docs

Top Community Contributors (by merged PR count)

@Adolanium (44 PRs) — performance fixes, the in-app browser comment tool, session import, and a run of catalog plugins
@apoapostolov (29), @TakeshiTGAL (22), @100yenadmin (19), @olric3015 (18), @aydnOktay (12), @cygnostik (12), @anpicasso (12), @itpartypattaya (11), @jacobhausler (9) — the plugin catalog's biggest authors: reasoning and composer tools, Japanese government data, plan mode and boardstate, stream-speed and ledgers, desk tools, reMarkable and desktop realms, Kiro and approvals, hermes-dreaming and holographic, workflows and Beads
@Finn763 (14), @liuhao1024 (13), @xxxigm (12), @dskwe (10), @KoNit-K (8), @chelsealong (8), @686f6c61 (7) — desktop, Windows, SSH and Linux reliability, local-runtime memory pricing, Bot Screen paste, model catalog fixes
@jonpol01 (13 PRs) — compaction correctness and exact-bytes file patching

All Contributors

Thank you to every one of the ~2,520 people who contributed code, co-authored fixes, or had their work salvaged into this release:

@0301chris @08085 @0bull @0disoft @0genlab @0x7s0lt1 @0xalydev @0xble @0xbyt4 @0xdany @0xDevNinja @0xGr1mm
@0xharryriddle @0xmosta @0xNyk @0xWhiteMage @0z1-ghb @100yenadmin @1052326311 @10ishq @122393594-ty @123456hyu
@123mikeyd @1960697431 @1RB @2025hcsmile2010-hue @29206394 @333Alden333 @33hodl @3DPrintPioneers @3L0935
@3ssiri @4adwentures @4dlt @52216165 @5uck1ess @686f6c61 @69k4xmdfm2-blip @6ylqq @895252509 @a-yeyang
@a1398394385 @a692570 @aadilghani1 @aaronlab @aashizpoudel @Abd0r @abderbj @abhibansal-sg @AbhijatSaxena
@Abnertheforeman @abualnassr @Abuarchiv @abundantbeing @acarsondave @acedatacloud-dev @acjsec @acsezen
@actualrat1984 @adamcap926 @adamking77 @adamkrawczyk @adammatski1972 @AdamPlatin123 @adanaleycio
@adarshdigievo @adavyas @addamsE @addelh @adecubed @adikpb @adleapnet @adolanium @AdrianBinDC @adriansotomora
@adurham @adybag14-cyber @aean0x @aeonsong @aerbaser @afifai @afourniernv @afurm @Agantila @agarg21
@agentdynamic @agentlinker @aglowinthefield @agt-user @ahadvice @ahamSel @ahisblessed @ahmed-3li @AhmetArif0
@Ahmett101 @ahrazzle @ahtishamdilawar @ai-ag2026 @AIalliAI @aieng-abdullah @aimable100 @Aio777 @airo7 @AJ
@ajaynomics @ajbmachon @ajensenwaud @ajspig @ajzrva-sys @ak2k @AKAZIK-py @akivavh @Akloenx123 @akshan-main
@akugone @Al3xand3r1987 @alaamohanad169-ship-it @AlanBurningsuit @alanfwilliams @alanwilhelm @albeight
@albert748 @albertodepaola @AlchemistChaos @aldoeliacim @aleesposito85 @alelpoan @alessandrolamberti
@alex-heritier @alex107ivanov @AlexanderBFoley @AlexanderPrendota @alexandreroumieu-codeapprentice
@AlexFucuson9 @AlexGabbia @alexgunsberg @AlexMnrs @AlexTu2 @alexwill87 @AlexxRussell @alfred-amanda
@alfred-smith-0 @aliasocracy @Alicorn-Max-S @aliilhami @alimbaydoun @alireza78a @alissongalindo
@AllenRobinHubert @alloevil @AlphaPerseii3000 @alrcatraz @AlsayedHoota @alt-glitch @AltenLi @alvarobiano
@alvarosanchez @am423 @aman-merchant @amanning3390 @amansk @ambition0802 @amekala @ameobius @amethystani
@AMIK-coorporations @amir-ag @amitcse @aml1973 @an420eth @anablancovicente @analista @anatolijlaptev1991-ctrl
@AndreasHiltner @andreausderhood @andrewhomeyer @andrewhosf @andrewkangkr @andrewmadson-pplx @AndrewMoryakov
@andrexibiza @Andy @andynguyendk @andyst-dev @andyylin @angel12 @angelos @anhtahaylove @aniruddhaadak80
@ankinow @AnnasMazhar @annguyenNous @anombyte93 @anoopmehendale-cue @anotherchu @anpicasso @anuiit
@anuvratrastogi @ap08960695 @AP3X-Dev @apexscaleai @apoapostolov @appletechie @aqilaziz @arasovic @arcabotai
@ArcanePivot @arceus77-7 @Archerouyang @ArcherQAQ @ArecaNon @ARegalado1 @Arguably1341 @arimu1 @arlai-mk
@armandokun @arminanton @aron-intframe @arrry-hydraDB @arrufat @ascetx @asdlem @asheriif @ashishpatel26
@ashmoonori-afk @AshuJoshi @asimons81 @askclaw-vesper @aslater3 @asorry75 @aspire488 @AsterJisu @astraltrekkin
@AStrnbrg @atbrace @atmaksri @atostivint @Atroci @ats3v @atul-trycoral @Aum08Desai @aurel282
@aurorabotticus-svg @auroracapital @austinlaw076 @austinpickett @Automata-intelligentsia @Avery @awizemann
@Awshesh12 @AxDSan @axiom-agent-ai @aydnOktay @AYin-Z @ayushmanpadhi @ayushnangia @AzurePii @B0on @b13kjack
@b2089766906-droid @baau @baauzi @babatorik @bablobanov @babyblueviper1 @back1992 @Backroads4Me @badiyee85
@badkangaroo @bakhtiersizhaev @baleian @banditburai @baofuen @Baophan00 @Bardioc1977 @barnicskolaci
@bartcollet @Bartok9 @basilnas @BatataBF @bayrakdarerdem @BB-light @bb873 @bbasketballer75 @bblicke1
@Beandon13 @bear0328 @beardthelion @BearHuddleston @bedirhancode @beibi9966 @Belaquaa @benawad @benbarclay
@benbenlijie @benegessarit @benjamin-rousseau-shift @benjaminbrumbaugh @BenKalsky @bennybuoy @bennyhodl
@bennytimz @benperry6 @beplee @Bergmann89 @bergusdz @berkantay @berthelius @bgrablin @BGwill-OUTLOOK @bheji07
@bighamx @BigKelLearns @Bihruze @bill3wits @binhnt92 @bionicbutterfly13 @Biotrioo @bird @bixycler @BkashJEE
@BlackishGreen33 @BlakeB254 @blakehermes9 @bloodcarter @BlueBirdBack @bluefateludi @bmcfiv @bmtrnavsky @bo.fu
@bobaba76 @bogerman1 @BonesGit @Bonorinoa @BoredSexyJordan @bounce12340 @BowmanStephen @bradestes @Brammiebram
@brantzh6 @bravohenry @brendanjryan @BrethofAI @brian717 @briancaffey @briandevans @BrianFranco @briepala
@BrierAinz @Brixyy @BROCCOLO1D @BrokeSkill @brucexu-eth @BrunoBza @bryanneva @bsdnn @btorresgil
@buddhaholic420 @buihongduc132 @BullishMomentum56 @bwoliveira @byjaps @byungsker @C-Est-Dept @c-pompa
@c0d1ngHUB @c0debyeric @c0mrade @c2h5oh @c3115644151 @ca-shrimp @cadezhou @Caelier @caentzminger @callsamik
@calvinnwq @cameronbergh @camilb @capthvnsen @carlosapgomes @carlotestor @carrion256 @Carry00 @caseyanthony
@catapreta @caya8205-2 @ccbbccbb @ccook1963 @cdanis @cdb-lumen @cdbartholomew @cdepuy @cdnsteve @ce-dric
@cedanoagent @certaindaniel @cervantesh @CES4751 @Cesar-Azeredo @cez0060405 @cg2aigc @chadhouser @Chadmc9889
@chaithanyak42 @ChanPark03 @charan-rathore @CharlesMcquade @Charlesmpc @CharlieKerfoot @CharZhou @ChasLui
@chelsealong @chenfeijiang95-ui @chengoak @chenhm @chenlichao @chenzeyan54-commits @cherrish333013 @cherryb16
@Chinmayrawat15 @chntllh @choaticpixels @Christopher-Schulze @christopherrobin88 @chrisworksai @chrisyoung2005
@chuenlye @chugiacan @chukirk-svg @Chukwuebuka-2003 @churnast @ciabata-git @CipherFrame @cipry0200 @CIRWEL
@cj52973 @Ckarey007 @ckomma @ckorhonen @clarkvines @claudioorjunior @claudiumio @claudlos @clayduncan
@ClintonEmok @Clippy @Cloeille @cloim @Clubheader @clyu168 @cmcejas @cmyyy @cnfi @cnkang @codebuff-team
@codeJRV @codeshipsingh @codexbt @Cody292 @Codyinked @coe0718 @cola-runner @CoLaOnline @ColdSlither @ColDSnit
@ColrWei @ComicBit @Commander @connns @Contentment003111 @convernaticspeter @Cortana @CortonKwok-GGD
@cosin2077 @Cossackx @cotghw @Cr4ckMe @CraigRichardsonRMPM @crazyief @crazywriter1 @crdesign8 @creeklava-svg
@cresslank @criptogus @cruzanstx @cruzlxyz @CryptoByz @CryptoDombili @cryptoyasenka @cspears32 @csreyes
@cswrld-net @ctaylor86 @cucurigoo @CupaJ12 @cuppett @cutepawss @cuuush @cuyua9 @cxxCoolStar @Cyber-Yichen
@cybertecla @cygnostik @cypres0099 @cyrkstudios @d31tcjg @d8joseph @Da7-Tech @daailouivan @dacheah @Dadmin88
@daedalus-opus @dafka007 @dagardner-nv @Dagulf795 @dajiaohuang @dalebetz @dalzio @DanBennettUK @dandacompany
@DaneelV3 @Danielmuzology @daniil-grois @danilofalcao @dankkush @danrudy33 @danspicytaco @dante32683 @daresan
@dariorapisardi @DarRahman @dasgltd @datanerdie @DatTheMaster @David-0x221Eight @david-bowiegxw @davidgut1982
@davidkarban @DavidMetcalfe @davidneyravyr @davidvv @davidxyuan @DaxLee9988 @dborodchuk @dborosev @dchenk
@deadczarvc @Deadtrix21 @deankerr @deas @deathxdefeat @DebadityaHait @Decent9967 @DECK6 @decofe @DECRUX9812
@deinte @delacaola @delltrak @deniqlab @DenisAraujo68 @denisqq @derekm @DeseretSaint @despotak @DESXIE
@DevAgarwal2 @devarticle @developersdigest @DevEverything01 @devorun @devsart95 @devseunggwan @DevvGwardo
@devwdave @Dezooyi @dgkaaks @dgpcboy @dhabibi @DhivinX @dhruv-kejriwal-mccain @Dhruv7201 @dhruvkej9 @Diaspar4u
@didida9527 @didodim @diegomarino @dieutx @diffen77 @Digitally-Challenged @dillweed @dimitrysuen @dirtyren
@djbclark @djennewe @djmango @djsanchezsuarez @djstunami @dkbjornn @dlcsouza @dlgrv @dlkakbs @dlshumway
@dmabry @dmahan93 @dmater01 @dmelkk-secondbrain @dmetcalfe @dmf01614-source @dmspark @dmyou @DoGMaTiiC
@DojoGenesis @Dolverin @domenicomassafra @DomGrieco @dominikamann @dominiquevidja @doncazper @dongxu0413
@doniocode @donovan-yohan @donramon77 @DonShelly @doojiang @doresa0 @doryani-ai @dot @Doud-FR @dparikh79
@dpersek @dpiers1 @dplush @DragonLi-Mi @DragonnZhang @draix @dreamfarer-space @DreamyMoonMouse @dredozubov
@DresvyanskiyDenis @drew-dot-com @drewTuzson @Drexuxux @drichar @drkpxl @dromai @dschnurbusch @dskwe
@dsr-restyn @Dusk1e @dusterbloom @duu261 @dwb1991 @dyiapanis @dynamite-bud @dzianisv @ea-s21 @Eapwrk
@eason2026 @easyvibecoding @eazye19 @echo931 @echohn @EdderTalmor @eddiewang @Edizzier @edosulai @edrethardo
@eduardo @EdwardIrby @efe-arv @Efistoffeles @egerev @egilewski @ehz0ah @eisene @Eji4h @ekkoitac @el-analista
@elashera @elbukott1 @eliasburlison @elisam0 @ellannjohnson @elmatadorgh @eloklam @eloktev @EloquentBrush0x
@elphamale @Elshayib @elvin-du @emadalsaba @eman062000 @EmanueleCornaggia @embwl0x @EmelyanenkoK @eminboydak
@eminogrande @emirsaffar-collab @emonty @emozilla @EmpireOperating @EMT5320 @Enchanted0911 @ennheng
@Enough1122 @entropidelic @entropy-0x @enwaiax @enzo-adami @eranbes @erenkarakus @erhnysr @eric-senyao
@ericmaddox @ErnestHysa @erosika @esketids @ether-btc @ethernet8023 @etrisnanto @euisuh @evan @evan-bradford
@EvanZhu0721 @eventh0riz0n @everm1nd @Everson-s8 @EvgenyMettsler @EvilDrag0n @EvilRan @Ex8-ca @ExitMaster
@Expri-commits @eyeonall @eynaudg @f3rs3n @F4TB0Yz @fabiantax @fabioaito @fabiomotta0311 @fabiosiqueira
@fahdad @faikwo @faisfamilytravel @FalconOrtiz @falkoro @fancyboi999 @fangliquanflq @FASTCHIP @fastfinge
@Fatmylin @fatwang2 @fazerluga-creator @fcarucci @fcavalcantirj @FeiyouG @felixdae @Felixkw12 @Feranmi10
@ferminquant @fernandezbaptiste @Fernandrewm @FestoneX @FEUAZUR @finn763 @firefly @FirmamentalSpring
@FlashWayne @FldBudin @flow-digital-ny @fluxkapacitor @flyer103 @flyingdoubleG @flyinhigh @fmercurio @foma
@foma-agent @foras910521-lab @forrestzhang107 @fortona-space @fortun8te @forumevi @forztf @fotedev @foxion37
@francip @franco314 @frankiethull @frankmendes1979 @fred0m @frendo @frizikk @frohsinnllc @Froraut @Frowtek
@frozen @fsaad1984 @ft-ioxcs @fujinice @FunJim @funkyotc @Futahua @g3org3yo @GabboAlarcon @gabbyong
@gabrielpaesland @gamewocao @Ganesh0690 @gaoanze888 @garadice @gas @Gateton @GauravPatil2515 @gauravsaxena1997
@gavasques @Gavin-Qiao @gbarany @gchablemeneses-web @geniok1980 @geoffreybutler94 @georgeatparallel
@georgejieh @gercamjr @gfriesen1 @ggascoigne @ggoldani @gh-dispatch @giggling-ginger @gilfoyle @girayk
@Git-on-my-level @gitabtion @gitcommit90 @GitmanIII @giwaov @gkd2323c @glasserai @glaw1300 @glesperance
@glitchbunny0 @globalvet2025 @gls774 @Glucksberg @gmoranxyz @gnanam1990 @gnanirahulnutakki @GoBeromsu
@godlin-gh @GodsBoy @Goitonthefloor @gokay-ai @gokhanyildirimlar @goku94123 @GoldenLoaf24h @gongyi
@gonzoblasco @googio @Gosuj @GottZ @gqwesleywang @Grey0202 @GrgaPalcic @Gridzilla @grimmjoww578 @grinco
@GroveMinting @gsy324 @GTHell @guanla-zz @GuardianZ71 @guberm @Guerilla-ops @gumclaw @gustavosmendes @gustbr
@gutslabs @gvago @h4ck200711 @haileymarshall @HaisamAbbas @haizaar @Halldrix @Han @hanamizuki @hansnow
@hanyu1212 @HanYunChenLuo @hanzckernel @happy5318 @hardwork9047 @hariNEzuMI928 @harjothkhara
@harrisonmedmedmetrics @harrylabsj @harryvgiunta @Harshkamdar67 @harshmoney123 @hassan-kamel @hassanhaidry
@haydster7 @hbizi @hcnimi @hdy2001 @HearthCore @heathley @hehehe0803 @hejuntt1014 @helingjun @helix4u
@HeLLGURD @hellofrommorgan @hellohanchen @hengm3467 @HenkDz @Henry-GGS @Hermes @Hermsi1337 @hernanda-git
@het0814 @HexLab98 @Heybinshao @HeyClos @heyf @heyhudson @hhhonzik @HiddenPuppy @higgs1729 @himanusia @Himess
@hinablue @Hinotoi-agent @Hiren @holny @HoneyTyagii @honor2030 @Hotragn @houko @hrnbld @hsy5571616 @hteo1337
@huangxun375-stack @huangyoje @huanshan5195 @hueilau @huklaa @HumphreySun98 @huntermonk @HwangJohn @Hygaard
@Hypn0sis @i-Hun @iacker @iainlane @iamagenius00 @iamfoz @iamlukethedev @iamwongeeeee @iap @IAvecilla
@ibhagwan @ibm2024 @iborazzi @ifastcc @ifrederico @igparkernz-coder @ikelvingo @ildunari @Imagineer99 @imgali
@Imgaojp @imgyf @imzacksong @InB4DevOps @inchargeautomation-lab @indigokarasu @indranilbanerjee
@infinitycrew39 @injaneity @insecurejezza @intelac @IntrepidBytes @ipriyaaanshu @IRONICBo @iRonin @irresi
@isaachuangGMICLOUD @isair @ishangodawatta @ishanparihar @ishardo @isheng-eqi @ishuowang @ismoilh
@isoenthusiast @israellot @IT-dreamer @italodsfernandes @itnkr @itpartypattaya @itsflownium @itskaism
@iveywest @Ivyleaguelawyer @izumi0uu @Izzy-Gottz @j-nolan @J0hnLawMississippi @Jaaneek @JabberELF @jacdevos
@Jack @Jackal991 @jackey8616 @JackHunzicker @jackjin1997 @JackLee992 @JackTheGit @jackulau @jacob3712
@jacobhausler @Jah-yee @jahazielhernandezbaubap @jahfaliabdulrahman-dev @Jaiminp007 @jakewvincent
@jakobbjelver @jakobdylanc @james47kjv @jangomango76 @JanHranicky @janviernine @jasm001 @jasonHav @jasonQin6
@jasonwu-ai @jatingodnani @jayzhou2309 @jbbottoms @jcjc81 @jcorrego @jcperdomoybarra @JE4NVRG
@jeeves-assistant @Jeffgithub0029 @jeffjhunter @jeffrobodie-glitch @jefuriiij @JeliTron @jerilynzheng
@jerrygooch @jerryhjones @JerryLiu369 @jervaise @jethac @jexbow @JezzaHehn @jflemieux @jfuenmayor @JiaDe-Wu
@Jiahui-Gu @jiangkoumo @jiangtaoliu-source @jimjsong @JimLiu @jimmyjohansson84 @jinglun010-cpu @jinlingzi-cmd
@jinliyl @JinUltimate1995 @JithendraNara @JiuYue0820 @jkobject @jmiguellucas @jmmaloney4 @jnbn @jneeee
@JoaoMarcos44 @joe-rodgers @joe050860 @joelbrilliant @JoelJJohnson @JoelMTaylor @Joeywrz @johnkattenhorn
@Johnny-xuan @johnnykor82 @johnsonAyo @jollyroger1480 @jon-nielsen @jonameijers @JonathanFeller @jondgilbert
@jonh-dev @jonotonfoto @jonpol01 @JonthanaHanh @JonZal @jooray @jordan-thirkle @jordimas
@joseph-mccarey-architect @josephsellers @JoshSnider @joshuadow @journeydan @JPeetz @jplew @jrcrittenden
@jroest @jslee-gif @jtstothard @JuaniLezcano @JulianCruzet @julio-cloudvisor @juliorobertoalvarez @Junass1
@jupiterx0910 @justascesnauskas @justcarlosm @justinsharpe @JustinUssuri @Justlrnal4 @jwilson411 @jxfjosh
@kagura-agent @Kailigithub @kaiomp @kaishi00 @kalice-vi @kallidean @kama-dev @Kame696 @KarateWilly @karmeleon
@Kartik @kaveone @kavioavio @kawanoii @KCAYAAI @kchuang1015 @KeaneYan @keanhartling @keeltrace @keenvc
@keepcalmqqf @keepConcentration @keiranhaax @kelsia14 @kelvmg @kendrickkester @Kenmege @kentimsit @keppy
@kernel-t1 @kerrz2020 @Kerubi-5 @Kesuek @Kev-fs @KevinMeinon @Kewe63 @KeyArgo @keyuyuan @kfchow-ai @KIAgent01
@kidrauhl123 @kilhyeonjun @Kiloris @Kimchi @Kingdomwarrior23 @kingpin44 @kingrubic @Kinkoolino-Hermes
@KiraKatana @kirkins @KiruyaMomochi @KIvanow @kiwipaulrob @kiwiwyl @kiyo-e @kleros109 @KnowBotDev @kohjunhao
@kohoj @kokhlo @Kolektori @koltyj @Komzpa @KoNit-K @konsisumer @Korkyzer @kosazoltan @kouyichi @krapwoo
@kriscolab @kristianvast @krunkosaurus @Kryptonator @kshitijk4poor @kstawiski @ksze @kuangmi-bit @kuehnberger
@kufufu9 @kumaxs @kuntao2011 @kvnloo @kweiner @kyan12 @kylecap9 @kyoto-aircon @kyssta-exe @kyzcreig
@l37525778-coder @L4XB @labyrinth-analytics @Lakescape @lakshyaag-tavily @lanyusea @LaPhilosophie @LarHope
@larrypang @lars-hagen @laulopezreal @LavyaTandel @lawcheck @lawyer112 @lazyants @Lazzdaycod @leakedd
@Leathal1 @leavedrop @Lee-Si-Yoon @leegunwoo98 @leemove @leepoweii @leewaiho @Legion-is-life @LehaoLin @Lei-k
@lekt9 @leomcamilo @leon7609 @LeonardoLGDS @LeonSGP43 @leoprodz @lepetitprince716-prog @lepkov @lesterlxt
@lesterppo @lesyuk @levest28 @lEWFkRAD @lewis4x4 @lexgenius @lfaus @lgy1027 @li-lizhe @liamsmith86 @libre-7
@lidises @lifeFedorovAlexey @LifeJiggy @lightcloud00 @lightx @lihengming @lijinxiao1982 @LikelyLucid
@lilShawtty-byte @linfeng961 @LINGJIAKUN @linxule @Lion-Leporidae @LionGateOS @lipebez @LironTTG
@LisandroNahuelH @littlewwwhite @liuhao1024 @Liuzikaii @liuzinann @liyoungc @lkevincc0 @llbn @lll @locker95
@lofibrainwav @LoicHmh @Lokee86 @Lokeshm24 @loongfay @loongzhao @loqimean @LordMelkor @lorencato23
@lorenzozanee @lost9999 @Louis-Anson @louiswalsh @loulanyue @LovePlayCode @loveRhythm1990 @Lqg97 @lsshawn
@luandiasrj @lubosxyz @Lubrsy706 @lucasfdale @lucaskvasirr @LucidPaths @luckystar2026 @lucvan @luinbytes
@lukefx @Luna161 @luojiesi @LuwenOosten @luxiaolu4827 @luxles @luyao618 @lvabarajithan @LVT382009 @ly6751
@lyswty @Lyti4 @lzmuhioin @m1k3s0 @M1racleShih @Mabolla @macd2 @Machbub @MacroAnarchy @Madkyotiger
@madpower2000 @Maero47 @Magaav @magicbluesmoke @MaheshBhushan @MaheshtheDev @mahgoub @maksir @malaiwah
@manateelazycat @ManniBr @mannnrachman @manny3 @manuelschipper @maoleidiss @mapu-og @Marc @marcolivierlavoie
@MarcosAlves90 @Marcus112-CS @marcusds @mario841859784 @mariomondev @Markgatcha @marko-niskala @markoub
@MarkTro1969 @MarkVLK @martinp09 @martinramos002-bot @MartyLake @mashenchina-max @Mat-London @matantsevs
@matebenyovszky @math0r-be @mathiashuque @MatthewHines @MattMaximo @MaxFreedomPollard @maximalang @MaximCrabbe
@maximilliangrand @MaxKerkula @maxmilian @maxpetrusenko @maxpetrusenkoagent @maxshafransky-a11y @maxtrigify
@MaxyMoos @maymuneth @MazenMkhinini @mazzanfar @mbeattietex1-star @MBK-fr @MCarlomagno @McClean @McHermes
@mcleay @mcpeezy @mdenil @mearls0501 @mechkw @mehmetkr-31 @mekenthompson @memosr @memtomem @Mengchee118
@mengtanx @mengyuyuan @menhguin @MestreY0d4-Uninter @metamindedu @metamon-p @metricano @mettin4 @meviusisback
@mfurkanakinci @mfwagner @mha33 @mheals @Mi55ed @miadisabelle @Mibayy @micah-c02 @michaelversluis
@michaelzelbel @MicroWearld @miguelchaves997-creator @mijanx @mikeest1972 @MikeGibbsOnyx @MilaArtyNew @milkoor
@minchang @minh-alpon @minhngoc25a @Minksgo @mira-solari @miregal89 @MiseHinoha @misschloedupont @misterdas
@mjshorty @mkrb84 @MLcogTech @mmcallister8 @mmcclean-aws @mmchuangyt-ai @mmilutinovic371 @mnajafian-nv
@mnbf9rca @MNIK-YH @mochamgx @mochiNJ @moeadham @Moep90 @MohamadKanso @mohamedorigami-jpg @moisesvalero
@mojomast @moken627-hub @mollusk @Momentum96 @MongLong0214 @MonkeyLeeT @Montbra @Moodtuner997 @moonlight-lupin
@mooserini @mor44-AI @Morad37 @morajabi @MorAlekss @mormio @morolab @moxian @mr-3mm3 @mr-magaia @MrAbsaroka
@MrAtkeens @mrcharlesiv @mrchen0709 @mreso @MrSimonC @mrwanstudio @ms-alan @ms-elbdev @mssteuer @mudrii
@MuhammadUsamaMX @muhifni @Muno459 @murenovich @Mushisushi28 @MustafaKara7 @mwdearing @mxyhi @mykeura
@mzkarami @mzyas @n-leezy @n-WN @nabilaameena @Nagisa-3000 @Nami4D @NaMinhyeok @NanamiMio @nankingjing
@nanobro @napoleonmm83 @natebransc @nateEc @naterchrdsn @Navlem @nca7777 @Ne0teric @Nea74 @NealZhouPanda
@nebneo @Neboy72 @necoweb3 @neerazz @negm17111995 @neil771 @nekwo @nemofq @Neomail2 @neron82
@networthexplained @NexVeridian @nftpoetrist @ngelik @NgThachThanh @nicbj96 @nicecuprani @Nick @nickseelert
@nickzhu0977 @nicoechaniz @nicolasdmolina @nicoloboschi @nidhi-singh02 @nightq @nikkoxgonzales @niklaskie
@NikolaRHristov @nikolay-bratanov @NikolayGusev-astra @nikshepsvn @NingCiQiu @ningfangbin @Ninja @ninjmnky
@Ninso112 @nitishagar @niudakok @nmediaie @NMTZ-z @nnnet @nocoo @nocturnum91 @noestelar @nolanchic @Noor-Sol
@Noshkoto @nosleepcassette @nosliwhtes @NotGovernor @NoTimeforInfinity @notkisk @notwitcheer @NousResearch
@NPFernando @nrmjeremy @ns-fusion @nthrow @null-runner @nv-cho @nv-kasikritc @nv-pberard @NYTEMODEONLY @nyx573
@o3u6x @obierlaire @obtitus @octo-patch @Octopus @Octopustank @ocuclaw @oferlaor @officialasishkumar
@oheckmann74 @ohMyJason @ohmyskyhigh @okaris @oliver-mee @oliverhees @oliviaaaa7788 @olopez25 @olric3015
@oluwadareab12 @olympusbuildz @omar2535 @OmarB97 @omegazheng @omerkaz @omerlefaruk @omert11 @omid-io @OmniaZ1
@OMOX563 @OmX @Only-Code-A @onuraycicek @ooiuuii @OOOOOAO @ooovenenoso @openclawcash @oppih @opriz @orangercat
@orcunulutas @original4422 @osadchiis @oswaldb22 @oswaldvalois @ottosulin @ourines @ous50 @ousiaresearch
@outdog-hwh @outpoints @outsourc-e @OutThisLife @overtoneblue @oxkenshin @oxngon @OYLFLMH @p-andhika
@pandacooming @paoloantinori @Paperclip @paraddox @Paramon @Parker-Fawcett @parsifal295 @pasmud
@patrykkopycinski @PaTTeeL @paultaki @pcaruba @pdmartins @pdonizete @PeaceMaker-best @pecalbezyshodnost-hue
@peetteerr @pefontana @penginman @penwyp @Per0-1 @perng @perqin @PeterFile @peteromallet @PeterTaras @Petra
@petrichor-op @peyton.lu @pgregg88 @phantomthedog @PhilipAD @philmossman @phippsbot-byte @phoebsie
@PhoeniXAbhisheK @phpoh @phuongvm @pierrenode @pincente @pinguarmy @PINKIIILQWQ @pintadoai @Pinutss
@PIR8-Software @piskooooo @pittosporum-seu @PixelAlchemist4 @pju-hoge @plarche-ux @PLASMA-FR @plcunha
@plluviera @Pluviobyte @pmaho @pminervini @pnascimento9596 @pnpwin @poijygfdyy @polkn @polnikale @Polybulle
@PolyphonyRequiem @poponline63 @portavales @Potrock @POWERFULMOVES @Poxel2 @ppazosp @pprism13 @pradeep7127
@praggybuilds @Prasanna28Devadiga @PRATHAMESH75 @praxis1244-consulting @predatorheard-byte @PRELVAS94
@preyevates @Prithvi1994 @privacydied @ProDrifterDK @professorpalmer @ProgramCaiCai @promptclickrun
@protas-box @psam-717 @psionic73 @ptichalouf @purzbeats @Pusch97 @PuvaanRaaj @pxdsgnco @pxls-kaneko @pyr0ken
@qd @qdivan @QDung210 @QifengKuang @qinghuanandejiangshi @qingshan89 @quangphucqp @quocanh261997 @quotumorg
@quqi1599 @qWaitCrypto @qwertyuiop97 @Qwinty @r00tedbrain-backup @r266-tech @r3x443 @raaaas @raajkumars
@rahlquist @rain-sk @rain610 @rainbowgore @raitoxlol @rajitkhanna @Raleighite @ramarivera @ramseshk @randimt
@rapsealk @rarf @rasitakyol @raulbcs @rayblennerhassett-byte @rayjun @raymondyan-zhijie @rayn1314 @rborkow
@rc-int @rcarrata @rchcorp @rcktmonk @re-ITRT @Realmagnum @Realtyxxx @Reaper-Forge @red4711 @redhelix @RegardV
@reinhold-ph @RelaxJonh @remi-td @RemyFevry @ReqX @rerdi92 @revaraver @rewbs @RFingAdam @RGerrish @Rhaphaello
@RHODIZSECURITY @rhushabhvaghela @riandradiva18 @Riccardo-Vecchi @richardcmckinney @ricki-io @RickyYii @RikETS
@rikkarth @Ringo6107 @rio-jeong @ritvikgautam @Rival @rivercrab26 @rjshrjndrn @rkfshakti @rlaope @Rmohid
@rob-maron @RobbertC5 @robbyczgw-cla @RobbyMo81 @robbyslmt @robchristiansen13 @robertaustinbell @roberttidball
@robinradx @Roblmvp @Rockey011 @rockminster @rocks737 @rod-nxtlevel @rodboev @Rodkillah @rodricksz4h5
@rodrigogs @RohiRIK @RohithPariki @rohitsabu @roli-lpci @romanovzky @Rook-CodeVolt @RootZ3n @roqianjas @roraag
@royalaid @RoySRose @rpridal @rrevenanttt @rroverin @rs545837 @rsayar @rshi0212 @rtcopenclawgh @ruangraung
@rudironsoni @rudrakshchahal @rudycelekli @ruizanthony @runninwithitmarketing @RunzhouLi @ruochu88s
@ruslanvasylev @Ruzzgar @rweddle @ryangu00 @ryantuc @RyanUnderhill @ryrenz @RyTsYdUp @s-jag @s905060
@SacrEllfarch @saforem2 @sagitario-jpn @SaguaroDev @sahibzada-allahyar @Sahil-SS9 @Sahilvishnaliya
@sahlbergalfred4-lgtm @saiteja-madha @sakhnenkoff @Sakujakira @salch-cred @salehelsayed @SaM13997 @samalone
@sambouli @samfoy @samplesabotage @samrusani @Samuek9 @samuelpatro @sanastasiou @SandroHub013 @Sanjays2402
@saotu @sarahwu185 @sarayd @sarbai @sarthak-707 @sarvesh1327 @sasan1200 @Sasni @sasquatch9818
@satirojordi-boop @SayHell0W0rld @sbe27 @ScaleLeanChris @schrodienieur @schwinguin @scottaki @scottgl9
@scottlowry @scroasdale @scross01 @sdalonzo @sdyckjq-lab @sealca @SeashoreShi @season179 @seb-almeida
@Sebuska29190 @secsson @see-k @SelfParody @seluvia @semirkabir @Sensie-agents @serefyarar @sergeikabuldzhanov
@Sergey0515 @sergioperezcheco @sgaofen @sgarrand @sgtworkman @Sha01in @shaase-ctrl @shadus @shafdev
@shagghiesuperstar @shali10 @shane9coy @shannonsands @shashwatgokhe @shaun0927 @shauryajain21 @shawnpana
@shehjaddev @shellybotmoyer @Shenrui-Ma @sherman-yang @Shimakaze514 @shivasymbl @shl0ms @shoesroom13
@shorehefei-ship-it @Shotflame @shreyanshj10 @shuanzhi @Shy7777 @SiaoZeng @siillee @silentpr0 @SilverNine
@simbam99 @SimoKiihamaki @simpolism @sinh2024 @Sisyphus @sitkarev @sjahlstrom @sjiangtao2024 @sjungwon03 @sk
@skappafrost @skyc1e @skyeconcontracting-ctrl @skyer-flyyy @skyeyesec333 @skylarbpayne @slash1andy @Slobaka
@sloik @Slopez2023 @sly321-pixel @SmallNew2003 @SmelterLabs @smfworks @smtony @snipecoder @SNooZyy2
@snowdchike @socrates1024 @soddy022 @sohomsahaun @soichiyo @Soju06 @Solitud1nem @solovision24
@someoneexistsontheinternet @somewheresy @sonderhq @songshikang0111 @Sonnenwerk @Sora-bluesky @sorenisanerd
@soroush5 @soyami @soyelmismo @soymarketing @soynchux @spanishflu-est1918 @spfcraze @spideystreet
@spiky02plateau @spranab @sprmn24 @SquabbyZ @squevo @sroecker @srojk34 @ssep4u @ssiweifnag @SsSs
@stablegenius49 @StanleyStetson @stantheman0128 @starship-s @startakovsky @SteelPh0enix @StefanIsMe
@stefanpieter @StellarisW @stepanov1975 @stephan @Steve-prog001 @steveafrost @stevehsu0524 @steveonjava
@stods21 @StodsEcho5 @Stoltemberg @StreamOfRon @stremtec @strzhao @Studio729 @Subway2023 @successionbio
@sudhirpatil @sudoingx @suhas-svg @sujeet111 @SulthanZahran1 @sum117 @sunsakis @sunwz1115 @superafun
@superb-cation @supere989 @Superfly73 @superlowburn @superposition @supotato-ipj @supplefrog @Svector-anu
@sweetcornna @sxuff @sy0u1ti @sycamoregroupltd @sylvainCDA @sylvesterkaczmarek @Synero @synscott @szcharlesji
@szicely @SZWzz @szymonclawd @szzhoujiarui-sketch @t1mdurden @T910317 @tachyon-r @tainguyenphat74 @TakeshiTGAL
@TalOrbach @Tamaz-sujashvili @tancou @tangtaizong666 @tank321 @TaoMasterCoder @tarkilhk @TartarusLabs
@tauros1983 @taxbax @taylorwtf @tcconnally @teakesdev @teamster22 @teddychenfeiyang-png @Teknium @temalo
@ten-ltw @ten82e @tensorbit89-netizen @teo-nex @terminamike666 @Test @teyrebaz33 @TFOjojo @tfournet
@th3sull1van @thanhan-a17 @tharanee-bit @thatssoheil @the-cybersapien @the-repeter @The-x-35 @the3asic
@TheAirick @TheAngryPit @thebergerking91 @thebizfixer @TheBlueHouse75 @thedavidweng @thefiredev-cloud
@TheGardenGallery @thegoodguysla @thegreatesthoneybee @thejpanganiban @TheNeuralVault @theone139344
@thepetenetwork @ThereWasAYang @TheSmokeDev @TheStreamCode @thetasigmaio @thinkingsheep @thomasscottbeck-sudo
@ThyFriendlyFox @tian0cai @tianma-if @tianyu-liu @ticketclosed-wontfix @tigercraft4 @Tigrannnnnnn @tim404x
@TimeLord2010 @timknip @timmycheng @timoteo7 @timrichardson @timsmykov @tinetwork @tjboudreaux @tjp2021
@tk-pkm111 @tkaufmann @tkwong @tmaarcxs @tmchow @tmielika @to-na @toannhu96 @tobenwarrior @tokou @tomatau
@tomekdot @Tomenatore @tomkubik @tommulkins @Tommy00748 @tomqiaozc @tony-simons-aiowa @Tormen28 @Tosko4
@Totoro-qaq @tpte @trac3r726 @Tranquil-Flow @tranquilflow @treatux @trevorgordon981 @trevornk @Treytucker05
@trippyogi @Triquetra @trnorga @Trounaldo @TroyMitchell911 @truenorth-lj @trwpang @tsemana @tsubasakong
@tsuk1nose @Tsuki-hash @tt-a1i @tuancookiez-hub @TUARAN @tudorpastorglencore @tugrulguner @tupe12334
@TurgayAcar49 @TurgutKural @turingcat @tutan0558 @TutkuEroglu @tw2818 @twe-cloud @twidtwid @twotnguyen @txhno
@tylerbrevard @tylman @tymrtn @tynamite @ubxty @Udjin79 @Ufonik88 @UfukNode @ugoenyioha @UltraInstinct0x
@umi008 @UnathiCodex @underthestars-zhy @UniversePeak @unmodeled-tyler @unsupportedpastels @usvimal
@uttkarsh-26 @uzairchhapra @uzaylisak @uzunkuyruk @vadimcomanescu @vaibhavarora14 @valda @valentt @valerdoskin
@vbcherepanov @vectorcmd @vectorcontext @vectorforge22 @VencentSoliman @Versun @vet402 @vgarlu @VGFreakXBL
@victor-kyriazakos @victorftrdba @victorGPT @victorjmilagres @VictorTran1023 @VictorYXL @vikyw89 @vilkasdev
@virattt @virtaava @Vissirexa @vitobotta @vjpixel @vKongv @vladzablotski-adaption @Vocllum @vollegrewar
@vominh1919 @VrtxOmega @vsd2807 @Vsemagush @vshulcz @vykhovanets @w-up @wa1939 @WadydX @walidboulanouar @wang2
@wangs1203 @wangtaotaotao95 @wanliqin @warabe1122 @warmheartrobot @waroffchange @WAXLYY @wdelarme @wdon
@web3blind @webdevfrancisco @webdevtodayjason @webtecnica @webtoolbox @Weidows @weidzhou @weltmaister
@Wenfengcheng @wesleysimplicio @westkite1201 @whirmill @WhiteWorld @whoisdhana @whyyagswhy @WideLee
@will-lynas @willardgmoore @willfrombr @Willhong @williamtwomey @willy-scr @wilsen0 @wliu-dev @wnuuee1
@woaini30050 @wodesiku @WolframRavenwolf @WolftacDigital @woota @wooyongbin3-cpu @woriwka-ai @worlldz
@woshicby @wpengpeng168 @wukangcheng1994 @WuKongAI-CMU @wuli666 @WuTianyi123 @wuwuzhijing @wxy-nlp @Wysie
@WYSTAF @wz-heng @wzslr321 @x1am1 @x7peeps @xiajiahang @xiaodu55 @XiaoXiao0221 @xiaoxinova @xiaoyaner0201
@xielevi @xinbenlv @Xingkai98 @Xipong @Xixiartemis @xjsns346 @xkam7ar @xmhuangzhijun-hue @Xowiek @xoy8n @xpk84
@xraysight @xrbs00 @XtremXpert @xuezhaolan @xushibo @Xuxyyy @xuyuann @xxxigm @xy200303 @xy952666680 @xz-dev
@y0shua1ee @Yabuku-xD @yagna @yahuo @yaleman @YanSte @yaojiejia @yaozhen @yashiels @yatesjalex @yavarb @ydmw74
@yehuosi @yellowdog01 @ygd58 @Yicheng-Mark @yingliang-zhang @yinkev @YLChen-007 @ymat19 @ymybxx @yoannes
@YonganZhang @Yongcheng123 @yongli-abc @yoniebans @yotamleo @youcefcherid @Youssef @youssefea @youtiaowei
@yoyodine-industries @ypwcharles @yu-xin-c @YUAN @yuanchenglu @yubingz @yuchenwang3 @yuexiongHNU
@yuga-hashimoto @YuhGuan @Yun. @yungchentang @yunke98888-gif @yunze7373 @YuShu @YusukeOshima-5564 @YuYigeng
@yuzilongleif-collab @ywatanabe1989 @yy28 @yyovil @yyq4193 @yyzquwu @yzy806806 @z0zero @z23 @zaclanzon
@zagiscoming @zakiyys @zakolenko @zanzipanzi @zapabob @zay @zaze-oO @zccyman @zebadee2kk @Zechereh @zeejaytan
@zengzheqing @zenplace-system @ZenSchema @Zeraphim @zerone0x @ZeroOttantotto @Zeus-Deus @zhangxicen @zhao0112
@ZHCHJ888 @ZHJay @zhongwater123 @zhongyueming1121 @Zhou-Ruichen @zhouhe-xydt @Zhuzewen2023 @ZidoCode
@zihaofeng2001 @zilvinasu @zindar @ZishiW @ziwon @zjc-enigma @zmlgit @zohuyhieuzo03 @zoser69 @zqy1-1
@zrmnelson @zsuroy @ZT-Toolkit @zufeyan @zwcf5200 @zxcasongs @zxdvd @zyz619963502zyz @zzpigpinggai @zzragida
@zzz163519

Also: @Leanolf (Leanolf+212960991), @ayushnangia (55181294+ayushnangia), @DavidMetcalfe (dmetcalfe+hermes), benoit.lavenier, Adrian Scott, Ahmed Khaled, Alberto Leal, Alex Ferrari, Andrei Ignat, Animesh Mishra, Bosco Barros, Chris DePuy, d4rk pr10r, Daniel van Strien, Dave Bunn, Dogila Developer, Eduardo Christopher López Acevedo, George Shalhoub, Hermes Agent / OpenAI Codex / gpt-6-sol, Isaac Dobson, JP Lew, Konrad Czarski-Bonanaty, Lars van der Zande, leo yang, Lucas Nicolas, Magnus Ahmad, Marco Rutsch, Mark Sheppard, Martin Gontovnikas, Matt McFarland, Michał Dziwisz, namhyuk kim, Nikolas de Hor, Nils (Norya), Paul Bergeron, Paulo Henrique, Robert Montelongo, Sebastian Bochna, Siddharth Balyan, Teo , Timo Karp, Val Alexander, wave-2 worker D, Wes Hermes, Yannick Stephan, Yash Jain, Your Name, Ömer Faruk Okumuş, 史官.

Full Changelog: v2026.8.31...v0.22.0 This release rolls up and fully documents the v0.21.1–v0.21.7 patch releases (Sep 7 – Oct 11), whose notes were deferred to this minor.

v0.21.7 [Oct 12, 2026] (10d ago) details → github →

# Hermes Agent v0.21.7

Hermes Agent v0.21.7

Release Date: October 11, 2026

> Patch release. This tag rolls up the ~204 PRs merged since v0.21.6 into a stable release for the desktop app (macOS Apple silicon, Windows), the Microsoft Store and MSIX, the installer, Docker and Hermes Cloud. Full curated notes for this window ship with v0.22.0.

What this patch ships for source installs (hermes update and the desktop app's updater on a git checkout):

Updates now follow tagged releases. A source install of the official repository updates to the latest published vX.Y.Z release instead of every commit on main. An install already newer than the latest release stays where it is and waits for the next one; nothing is moved back. To keep following every commit: hermes update --set-channel main. Forks and mirrors keep following main. Store, MSIX and bundled desktop installs are unchanged.
Choose the channel in the desktop app. Settings ▸ About ▸ Updates has an Update channel switch (Stable releases / Every commit) for source installs, and the update dialog now shows which channel you are on.
Reasoning survives resume. Signed thinking replays after hermes chat --resume and on the next gateway turn, and Bedrock Converse reasoning models no longer get rejected on resumed sessions.
Updates no longer fail behind some firewalls. Installs on main no longer fetch a release record that regional firewalls could answer with 403. The stable check uses your GitHub token when one is set (GITHUB_TOKEN or gh auth login) and reports a GitHub rate limit as a rate limit.

About this release

Measured at commit 1fd18277267152893a8a24792b79213e7ca3f899, the window since v0.21.6 contains 740 non-merge commits across 4,156 changed files (+86,775 / −26,980), 204 merged PRs and 69 closed issues.

Also in the window, undocumented here on purpose: plugins running built-in Desktop app actions (ctx.runAction) and a plugin SDK pet bubble (ctx.pet.say); core-made Codex requests so plugins never hold the token; skills installed mid-session reaching the model without a prompt rebuild; Krea 2 Medium Turbo as the default image lane for new paid subscribers, with a FAL fallback when managed Krea refuses a request; faster desktop updates (the React Compiler pass cached by content, the compiled renderer reused when only the install stamp changed, unchanged native inputs left in place); pinned installs that check out only the pin; compaction marks emitted to Relay; and new community plugins including memory-shield, command-ledger, Memoria, Model Router, wyoming-voice-bridge, codex-account-switch and redline.

Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

Desktop app: updates itself. Microsoft Store installs update through the Store.
CLI: hermes update, or re-run the installer one-liner.
Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.21.6...v0.21.7

v0.21.6 [Oct 8, 2026] (14d ago) details → github →

# Hermes Agent v0.21.6

Hermes Agent v0.21.6

Release Date: October 8, 2026 > Patch release. This tag rolls up the ~2,100 PRs merged since v0.21.5 into a stable tagged release for Docker and Hermes Cloud. Full curated notes for this window ship with v0.22.0.

About this release

This is the first release cut by the new stable release pipeline: one attempt ref, a tested Docker image, and a receipt tag at publish. It ships the tag, this GitHub release and the Docker image. The desktop app, Termux packages and the Microsoft Store stay on their current build for now and move with the next bundled release. Measured at commit 818c13be1dc4fd28987e1e881a9408224afd4535, the window since v0.21.5 contains 8,867 non-merge commits across 8,342 changed files (+772,490 / −225,600), 2,106 merged PRs and 3,027 closed issues. Also in the window, undocumented here on purpose: live transcription while you speak on CLI, TUI and Desktop (stt.streaming); spoken voice turns routed to their own model (auxiliary.voice_chat) with reasoning off by default; third-party plugins running in a per-profile plugin host (plugins.isolation: host) and one Settings ▸ Plugins home for their settings pages; favorite and pinned models at the top of the Desktop picker, a usage chip before a subscription hits its wall, and rate-limited providers that say why and until when; local models in hermes model plus llama.cpp CUDA on Linux x64 and arm64; pluggable, layered language packs across core, Desktop and TUI; a summary-first hermes status (--short, --full); a review-pane diff scope selector (Uncommitted / Branch / Last turn) and keep-awake that follows the turn; cron, doctor and home-channel warnings when the cron store goes unwritable; approval flags for credential uploads and invisible Unicode in terminal commands; a Discord setup that checks the bot token and prints the invite link; a unified Kanban workflow definition; activate.fish; GPT-6.1 Sol and Claude Sonnet 5.5 / Haiku 5.5 in the catalogs; and dozens of new community plugins. Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

CLI (git installs): hermes update, or re-run the installer one-liner.

Desktop app and Termux: no change in this release; they update with the next bundled release.

Security Fixes

Dashboard authentication hardening

Spoofed X-Forwarded-For headers could reset the password-login rate limit and get around the per-IP cap on native sign-in (#133367)

Unauthenticated login requests could write unbounded values to the auth audit log (#133369)

The public /auth/ routes had no request-body size limit (#133370)

Native sign-in could send login codes to a non-loopback redirect, which allowed session takeover (#130685)

Thanks to Tenable Research for reporting all four issues (TRA-725, TRA-726, TRA-727, TRA-728). The native sign-in redirect issue was also reported independently and fixed by @Froraut. The X-Forwarded-For fix builds on community work by @hinotoi-agent and @BearHuddleston (#40285). Repository git filter hardening

Automatic git calls (session workspace snapshot, subagent worktrees, kanban, worktree cleanup, hermes -w) could run clean/smudge/process filter programs defined by an untrusted repository's own config, before the first prompt (#130661)

Thanks to 燕涛 for reporting this privately. It was also reported and fixed publicly by @jonpol01 (#126017, #126019) and @JoaoMarcos44 (#126075). Email gateway sender hardening

A quoted display name in the From header (e.g. "Victim <[email protected]>" <[email protected]>) could make an attacker's message pass the email allowlist as an allowed sender (#125212)

Thanks to Daniel Steele (@keeltrace) for reporting this and writing the fix (#124322). Full Changelog: v2026.9.24...v0.21.6

v2026.9.24 [Sep 24, 2026] (28d ago) details → github →

# Hermes Agent v0.21.5 (v2026.9.24)

Hermes Agent v0.21.5 (v2026.9.24)

Release Date: September 24, 2026

> Patch release. This tag rolls up the ~460 PRs merged since v0.21.4 into a stable tagged release for downstream consumers (Docker images, Hermes Cloud, hosted deployments). Full curated notes for this window are deferred to v0.22.0.

About this release

Measured at commit f97608f178d1ffeca59860195ab7da295f7c8e5f, the window since v0.21.4 contains 1,610 non-merge commits across 4,828 changed files (+164,132 / −149,440), 460 merged PRs and 475 closed issues.

Also in the window, undocumented here on purpose: a Desktop plugin SDK wave (composer draft API, session-list and row-decoration slots, sidebar nav prefs, model-pill label providers, typed settings/skills/toolsets/profiles bridges, a sandboxed embed primitive, appearance-settings slot, and a public event bridge for plugin backends); a Simple/Advanced interface mode for Desktop; the Connectors page replacing the MCP tab, with "Connect now" for a freshly installed plugin's MCP servers and installed plugins' tools and skills going live in every open chat; onboarding that offers catalog plugins beside connectors; complete French, German and Spanish Desktop catalogs plus an RTL/LTR text direction setting; custom model entry from the composer and Settings pickers; function-key and dictation voice shortcuts; per-profile stop/start/restart under the host multiplexer and gateway.standalone to opt a profile out; the live dock showing the standing /goal and queued prompts in the CLI and TUI; a kanban design pass with a two-column ticket modal and markdown task text; webhook deliveries mirrored into the target chat session; Bot Screen on hosted -desktop images; GPT-6 Sol/Terra/Luna and Claude Opus 5.5 in the Nous and OpenRouter catalogs; an official Blender Lab integration and NVIDIA app/Broadcast plugins; a long run of hot-path performance work across config loading, the tool registry, gateway message handling and the model picker; and dozens of new community plugins in the catalog.

Updating

hermes update (git installs), or re-run the installer one-liner.
Docker / Hermes Cloud: images build from this tag (nousresearch/hermes-agent:v2026.9.24).

Full changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.9.21...v2026.9.24

v2026.9.21 [Sep 21, 2026] (1mo ago) details → github →

# Hermes Agent v0.21.4 (v2026.9.21)

Hermes Agent v0.21.4 (v2026.9.21)

Release Date: September 21, 2026

> Patch release. This tag rolls up the ~1,800 PRs merged since v0.21.3 into a stable tagged release for downstream consumers (Docker images, Hermes Cloud, hosted deployments). Full curated notes for this window are deferred to v0.22.0.

About this release

Measured at commit 4b8a8134009a8727a289bcabeb0019fedd353128, the window since v0.21.3 contains 5,071 non-merge commits across 5,169 changed files (+312,961 / −62,855), 1,812 merged PRs and 2,116 closed issues.

Also in the window, undocumented here on purpose: a host-wide gateway singleton lock with a rendezvous record, and Desktop attaching to the running host backend instead of spawning a second one; one backend-owned connector operation with a setup card on Desktop, TUI and CLI; --format stream-json structured JSONL output for the CLI; skills.autoload pinning skills into every new session's prompt; a Desktop chat/UI font picker, one-click local engine updates, and plugin uninstall from the Plugins hub; a decline unauthorized-DM behavior for the gateway; a configurable MCP discovery connect cap (mcp.discoveryconcurrency); session_search after/before bounds plus OR-relaxed recall retry; hermes sessions set-journal-mode; LTX 2.5 and Kling O3 in the video catalogs; a website page for every catalog plugin and author, with pinned-commit READMEs and added/updated sorting; a dozen new community plugins in the catalog (tailscale, ssh, shodan, terminal, rss, resetwatch, done-bell, kiwi, cognee, Octen); and a large run of profile/multiplex isolation, cron, kanban, Desktop and state.db fixes.

Updating

hermes update (git installs), or re-run the installer one-liner.
Docker / Hermes Cloud: images build from this tag (nousresearch/hermes-agent:v2026.9.21).

Full changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.9.14...v2026.9.21

v2026.9.14 [Sep 14, 2026] (1mo ago) details → github →

# Hermes Agent v0.21.3 (v2026.9.14)

Hermes Agent v0.21.3 (v2026.9.14)

Release Date: September 14, 2026

> Patch release. This tag rolls up the ~338 PRs merged since v0.21.2 into a stable tagged release for downstream consumers (Docker images, Hermes Cloud, hosted deployments). It exists so the remote-gateway sign-in fixes below reach Cloud agents, which auto-update to the newest release tag.

What this patch ships for remote Desktop / Cloud users

Remote dashboard sessions no longer expire on refresh bursts (#110061, fixes #55712; salvage #71548 @Doud-FR, #55717 @liuhao1024). Both refresh paths on the gateway (cookie gate and the desktop's native bearer route) now coalesce concurrent requests carrying the same rotating refresh token, so a Desktop wake burst can no longer replay an already-rotated token into the Portal's reuse detection and revoke the whole session. Refresh also runs off the event loop, so a slow identity provider no longer freezes /api/status. Pairs with Portal-side NousResearch/hermes-portal#1209 (sliding 30-day idle horizon, 5-minute rotated-token grace).

Also requested for this tag

Long-lived processes stop leaking duplicate state.db writer handles (#110934, fixes #100896 #103339; salvage #107974 @kshitijk4poor, mapping @Rroven): gateway, dashboard/Desktop backend, ACP and CLI readers attach read-only and in-process writers share the registry handle, so the N live SessionDB handles precursor stops firing on a healthy topology.

About this release

Measured at commit 9b419a2d3c2657c192008e732149d61170b32c01, the window since v0.21.2 contains 1,036 non-merge commits across 2,642 changed files (+131,690 / −37,096) and 338 merged PRs.

Also in the window, undocumented here on purpose: server→client JSON-RPC requests and a Pydantic wire-contract registry with generated TS/OpenRPC for the TUI/Desktop gateway (#110521, #110522); reasoning-effort selection on every model picker, a composer pill and per-auxiliary control in Desktop; OpenRouter OAuth PKCE login; HEIF/HEIC/AVIF image decoding; the Honcho peer-model setup rework; MCP OAuth refresh tokens bound to their issuer; a daily MCP re-auth nudge in Desktop; Wan 3.0, Kling 3.0 / Kling Image v3, MiniMax H3 Max Turbo, Gemini Omni Flash 1.1 and Meta Muse in the FAL catalogs; Slack pasted tables and the Agent Sessions API; multiplexed-profile isolation and gateway-liveness fixes; and the state.db WAL refusal on cross-VM filesystems.

Updating

hermes update (git installs), or re-run the installer one-liner.
Docker / Hermes Cloud: images build from this tag (nousresearch/hermes-agent:v2026.9.14).

Full changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.9.11...v2026.9.14

v2026.9.11 BREAKING [Sep 11, 2026] (1mo ago) details → github →

# Hermes Agent v0.21.2 (v2026.9.11)

Hermes Agent v0.21.2 (v2026.9.11) — The state.db Patch Release

Release Date: September 11, 2026

> Patch release. v0.21.0 shipped a large rewrite of the session store's connection handling, and for some installs it made state.db fragile: second writers cancelling each other's locks, healthy databases reported as corrupt, one bad row killing sessions list. This release closes that class and rolls up everything else that landed on main in the four days since v0.21.1.

About this release

Measured at commit 04dd80a977f40b05e5b2054111747af07a61886a, the window since v0.21.1 contains 947 non-merge commits across 1,869 changed files (+182,504 / −15,564) and 312 merged PRs. 140 contributors appear in commits, co-author trailers, or salvage credits.

✨ Highlights

state.db reliability campaign (six PRs, 44 issues closed)

If your state.db broke after 0.21.0, this is the release for you. Six PRs fix the root causes rather than the symptoms:

No more second writers. Profile gateways wrote hosted-room state into the root state.db every 5 seconds; the dashboard opened a writable handle on startup; cron's lifecycle guard did a raw open() on a live database (which cancels the gateway's POSIX locks — the classic "how to corrupt SQLite" recipe); doctor --fix would checkpoint under a live holder. All four are gone: hosted rooms live in shared-state.db, the dashboard opens read-only first, the guard goes through the tracked connection registry, and doctor --fix refuses a checkpoint it can't prove is safe. (#108076 — salvage #103489 @RikETS, #102682 @JoaoMarcos44, #108012 @Halldrix, #105428 @TaoMasterCoder)
Healthy WAL databases stop wedging. OpenZFS (deleted) dentries and a close() racing an appendmessage both produced a sticky DeletedWalGenerationError on a perfectly good store; the read pool was handed out under an unconfirmed journal mode; a transient disk I/O error on WSL2 killed getsession on the first attempt; and a "state.db locked" banner was broadcast after the lock had already cleared. (#108082 — salvage #107411 @chelsealong, #105578 @ca-shrimp, #105711 @gaoanze888, #106958 @nikkoxgonzales; co-authored @QDung210, @fangliquanflq, @Sahilvishnaliya)
FTS damage no longer kills your turn. An error scoped to the full-text-search index was classified as whole-file corruption and fail-closed the conversation. It's now fts_index: search degrades, the index rebuilds later, the transcript store is untouched. Same PR: doctor names structural damage honestly instead of "FTS write corruption", the FTS write probe catches the stale-index shape that passed every check while every write failed, .recover output no longer fails startup on orphan FTS5 shadow tables, header-zeroed databases recover instead of being refused, and the dashboard analytics poller returns a 503 instead of 520K tracebacks a day. (#108130 — salvage #97843 @SulthanZahran1 + #97841 @Finn763, #88604 #56824 #103657 @liuhao1024, #106890 @nftpoetrist, #103321 @jangomango76, #91413 @leegunwoo98, #102808 @TaoMasterCoder)
One corrupt row no longer kills sessions list, export, or insights. A TEXT timestamp or a 1e30 epoch used to crash the whole listing; malformed marker JSON crashed jsonextract; more than 999 ids crashed bulk delete/prune. One coerceepoch() helper on every reader (bad rows render ? with a WARNING naming the session), a json_valid guard, IN-list chunking, and batched export hydration. (#108086 — salvage #106071 @Xipong, #101726 @efe-arv, #94701 @liuhao1024, #102679 @mssteuer, #100658 @Mi55ed)
Sessions never bind to or read another profile's database. The Desktop launch backend could pin itself to the wrong profile's state.db under a HERMESHOME override race; sessionsearch by bare ID silently scanned every profile and returned someone else's transcript; recovery guidance pointed at the wrong file; profile delete kept a handle open (WinError 32). (#108074 — salvage #102534 @HexLab98, #106975 @Sora-bluesky)
Opening state.db no longer takes the write lock when nothing needs writing. A one-shot hermes process opening the store behind a busy gateway stalled 4–20 s and then failed with "database is locked". Now 0.01 s. (#108067 — salvage #106751 @kshitijk4poor, #101881 @jonpol01)

Also in the window from the same subsystem: a fresh state.db no longer publishes FTS tables before owning the rebuild lock (#106311), a handle that lost its WAL generation no longer checkpoints stale frames at shutdown (#106315, #106840), a clobbered first page is quarantined with its WAL instead of opened destructively (#106587), WAL setup leaves an unverifiable database untouched (#106568), and quarantined handles refuse VACUUM/FTS optimize (#106343, #106349). Most of these salvaged community diagnoses by @kshitijk4poor.

Multi-profile isolation hardening

A cluster of fixes for installs running several profiles under one gateway (multiplex): secondary-profile bots no longer inherit the default profile's allow-lists (#107616), adapters no longer send credentials to the default profile's host (#107617), stdio MCP servers no longer receive the default profile's vault secrets (#107630), MEDIA: delivery can no longer attach another profile's .env / auth.json / state.db (#107609), Feishu drive callbacks and /p/<profile>/ webhook replies stay on the routed profile (#107620, #107626), and secondary profiles no longer get a sibling's Nous bearer from per-process memos (#107611).

Desktop backend spawn storms are over

Bot Mode used to spawn or dial one backend per profile on launch and on every roster tick, hovering the Bots roster spawned a backend per row, and profile switches could spawn a duplicate primary. (#108069, #108107, #108118, #108134, #107969, #108112 — salvage #102512, #103634, #103399, #107997 and others by @kshitijk4poor)

Password-blind credential vault

The agent can now sign in, pay, and fill addresses from 1Password, Bitwarden, or the local Hermes vault without ever seeing a secret; two-factor codes come from a saved authenticator key or are asked for in the user's UI (#106480, #107585). Private git plugins install with the user's stored credentials (#106981).

Plugin catalog and one Plugins page

A curated, SHA-pinned plugin index with CLI, admission CI, docs and dashboard (#69446); Desktop gets one Plugins page owning agent + desktop plugins, install, catalog and per-commit pinning (#107212, #107314, #107321); Radio ships as an opt-in SDK plugin (#107072).

Nous free tier and guided first launch

Free inference and connectors out of the box with one command to sign in (#105258, #105260), /login from a chat (#105261), connector tools (Gmail, Linear, Notion, ...) searchable through toolsearch (#106842), and a guided first launch behind HERMESGUEST_ONBOARDING=1 (#107697, #107958, #107985, #108211).

🐛 Notable Bug Fixes

Gateway & platforms

A bare display: key in config.yaml no longer crashes every gateway turn (#106305); a queued-lane final refused by the platform is recorded and redelivered (#106316); a stalled WebSocket send no longer blocks every later event (#106581); the first turn no longer waits on the Python toolchain probe (#106556).
Telegram bots must @mention when botsrequiremention is on, breaking bot-to-bot loops (#106534); Matrix renders LaTeX (#106515); Signal renders markdown tables (#106538); WhatsApp replies to view-once messages keep their quote (#106541); media-only replies report SUCCESS everywhere (#106557).

Providers & routing

/model and auxiliary auto never bill a provider you didn't select (#107366); never auto-switch to a provider you have no credentials for (#107281); Bedrock Claude/Converse/Mantle models survive /model, fallback and restore (#107621, #107658); Bedrock Guardrails enforced (#107815).
Codex: patch-budget image 400 shrinks and retries (#106525); unentitled primary + fallback no longer oscillate (#106549); Azure Foundry replayed-reasoning rejection classified and pruned (#106718 @erosika). MCP OAuth refresh no longer erases the refresh token (#106185). Anthropic clients send exactly one credential (#107978).
DeepSeek V4.1 Flash on Nous Portal and OpenRouter pickers (#107489); GPT Image 2.5 via OpenAI and FAL (#105988); Opus 5 / Fable 5.1 on the native Anthropic picker (#106636 @xxxigm).

Agent loop & compression

One blocked periodic callback no longer stalls lease refresh (#106308); a mid-turn /steer is persisted as its own user row (#106317, #106344); local-inference memory-ceiling rejections back off instead of compressing history (#106307); context-overflow after partial streaming ends the turn (#106567); length continuation stops when the prompt filled the window (#106571); compression no longer times out silently on aux retries (#106866); model_thresholds keys can be provider-scoped (#108061).
Surface switch (Desktop↔TUI) no longer rebuilds the system prompt and busts the prompt cache (#105844); CLI keeps the api_content sidecar so the cache survives an early persist (#105842).

CLI, TUI & Desktop

hermes -z --resume continues the session (#106313); Shift+letter and Cmd+Shift+Z work on extended-key terminals (#90674 @francip, #105493); browser_exec timeout kills the whole process tree (#106589); update checks poll the GitHub API once a day instead of git-fetching every 30 min (#107648); hermes update names the real cause and can't hang on a stalled fetch (#108053).
Desktop: UI language survives the update relaunch (#106476), expired OAuth grants get a one-click re-sign-in (#106965), HUD mode shows the transcript again and always gives the window back (#107491, #107423), the backend exits when its Desktop parent dies (#107977), Windows updates stop reporting false failures (#106175, #107183), WSLg renders on the Windows GPU (#106528), Telegram quick setup with QR ported from the dashboard (#107242), and ~60 more Desktop fixes largely from @OutThisLife and @kshitijk4poor.

Cron & Kanban

An off-tick "run now" no longer cancels the next scheduled run (#106306); a killed manual run no longer blocks the next one for 5 minutes (#106733); a one-shot changed to recurring keeps firing (#106532); unpinned jobs run on their creation-snapshot model (#106499); --clone-all no longer copies cron jobs (#106478); kanban promote refuses undone parents (#106550); kanbanrequestreview rejects unknown reviewer profiles (#106547).

Tools & memory

A stdio MCP server dying mid-call no longer replays the tool call (#106546); a skills-only background review can no longer delete memory entries (#106310); mem0 memory no longer drops long turns (#106542); tool_search returns nothing rather than five tools sharing one word (#106676); remote NOPASSWD sudo no longer prompts (#107939); RSS and Reddit reading no longer activate by default (#105873).

Housekeeping

config.yaml backups live in one bounded backups/config/ dir (#106388); hermes backup keeps the newest 3 zips (#106455); hermes setup --reset backs up the real config (#106453); debug share retention shrunk to 1 day on the dpaste fallback (#106531).

👥 Contributors

Thank you to the 140 contributors whose commits, co-author trailers, and salvaged PRs landed in this window.

state.db campaign — salvaged PR authors: @RikETS, @JoaoMarcos44, @Halldrix, @TaoMasterCoder, @chelsealong, @ca-shrimp, @gaoanze888, @nikkoxgonzales, @QDung210, @fangliquanflq, @Sahilvishnaliya, @kshitijk4poor, @jonpol01, @HexLab98, @Sora-bluesky, @Xipong, @efe-arv, @liuhao1024, @mssteuer, @Mi55ed, @SulthanZahran1, @Finn763, @nftpoetrist, @jangomango76, @leegunwoo98, @ggoldani. state.db campaign — issue reporters (the forensics in these threads were often better than the fixes): @thedigitalcarpenterdad, @Rroven, @aoeman84, @StephanRosin, @rubensandrade-sketch, @wanliqin, @chenzheshushi-commits, @CarlosReyesPena, @revazone, @reservassai-art, @Cuttingwater, @soroush5, @e-shizz, @shobhit-87labs, @shivanathd, @hoelzl, @i8ei, @Ace-Kelly, @YinsenWANG, @zbabiarz, @Sravanjangam, @0gl20shk0sbt36, @RChina, @bronder, @ccwssy, @bottenbenny, and @Hitman117890 whose Discord report kicked the campaign off. Everyone in the window (alphabetical): @0genlab, @0xalydev, @100yenadmin, @1052326311, @686f6c61, @69k4xmdfm2-blip, @abundantbeing, @Adolanium, @Ahmett101, @albert748, @AlexxRussell, @alt-glitch, @auroracapital, @austinpickett, @babatorik, @Bartok9, @benbarclay, @bennybuoy, @brian717, @briandevans, @buihongduc132, @ca-shrimp, @cervantesh, @Cesar-Azeredo, @ChanPark03, @chelsealong, @ckomma, @ClintonEmok, @crazyief, @ctaylor86, @dalzio, @DavidMetcalfe, @Drexuxux, @edosulai, @efe-arv, @emozilla, @ericmaddox, @erosika, @ethernet8023, @everm1nd, @FalconOrtiz, @fangliquanflq, @Finn763, @FirmamentalSpring, @francip, @g3org3yo, @gaoanze888, @ggoldani, @Halldrix, @haydster7, @hbizi, @helix4u, @HexLab98, @huklaa, @IAvecilla, @infinitycrew39, @jahfaliabdulrahman-dev, @jangomango76, @JoaoMarcos44, @jonpol01, @jwilson411, @KeyArgo, @kokhlo, @KoNit-K, @kshitijk4poor, @kyssta-exe, @leegunwoo98, @lesterlxt, @liuhao1024, @Mabolla, @manuelschipper, @MaxFreedomPollard, @mearls0501, @mengyuyuan, @Mi55ed, @MiseHinoha, @mjshorty, @mkrb84, @moisesvalero, @moken627-hub, @mssteuer, @nateEc, @nftpoetrist, @nickseelert, @nikkoxgonzales, @notwitcheer, @onuraycicek, @outdog-hwh, @OutThisLife, @philmossman, @phuongvm, @pierrenode, @portavales, @PRATHAMESH75, @QDung210, @rewbs, @RikETS, @romanovzky, @ryantuc, @Sahilvishnaliya, @salch-cred, @sgarrand, @shannonsands, @simpolism, @Solitud1nem, @somewheresy, @Sora-bluesky, @sprmn24, @squevo, @StellarisW, @Stoltemberg, @SulthanZahran1, @Svector-anu, @szicely, @TaoMasterCoder, @teknium1, @ten82e, @thedavidweng, @tkaufmann, @Totoro-qaq, @Tranquil-Flow, @tuancookiez-hub, @TurgutKural, @ugoenyioha, @unsupportedpastels, @victor-kyriazakos, @webtecnica, @wliu-dev, @wukangcheng1994, @Xipong, @Xixiartemis, @xkam7ar, @xxxigm, @yavarb, @yoniebans, @Youssef, @yoyodine-industries, @yuanchenglu, @YuhGuan, @Zeus-Deus.

Also: Youssef.

Updating

Existing install: hermes update
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash
Managed deployments should update through their deployment tooling using the new tag.
If your state.db was already damaged by 0.21.0/0.21.1: run hermes doctor first; it now names structural vs index damage correctly and points at hermes sessions recover --inspect-only (profile-pinned) when a rebuild isn't enough.

Full Changelog: v2026.9.7...v2026.9.11

v2026.9.7 [Sep 7, 2026] (1mo ago) details → github →

# Hermes Agent v0.21.1 (v2026.9.7)

Hermes Agent v0.21.1 (v2026.9.7)

Release Date: September 7, 2026

> Patch release. This tag rolls up current main since v0.21.0 for tagged deployments and downstream consumers.

About this release

Measured at commit 6178e9f4eed8d99f4fc550add939d58c7bed6206, the window since v0.21.0 contains 5,139 non-merge commits across 4,364 changed files (+601,014 / −768,419). GitHub reports 632 merged PRs in the release window at preparation time. These figures exclude the release-version commit.

The rollup includes the codebase modularization, file-operation and startup performance work, provider and model updates, desktop session controls and browser annotations, MCP authorization improvements, cron scheduling and delivery fixes, and delegation reliability improvements. This patch does not attempt to enumerate or announce every feature in the window.

Full curated release notes for this window will ship with v0.22.0, covering everything since v0.21.0, including the intervening patch releases, feature details, and complete contributor credits.

Updating

Existing install: hermes update
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash
Managed deployments should update through their deployment tooling using the new tag.

Full Changelog: v2026.8.31...v2026.9.7

v2026.8.31 BREAKING [Aug 31, 2026] (1mo ago) details → github →

# Hermes Agent v0.21.0 (v2026.8.31)

Hermes Agent v0.21.0 (v2026.8.31)

Release Date: August 31, 2026 Since v0.20.0: ~5,800 commits · ~2,475 merged PRs · ~5,680 files changed · ~869,000 insertions · ~135,000 deletions · ~2,100 issues closed · 760+ contributors

> The Pantheon Release. v0.20.0 made Hermes the herald — he spoke, and he carried word to other agents. In v0.21.0 the gods assemble. Bot Mode ships built into the desktop app: a society of named agents with their own faces and group chats, where your bots talk to each other — and to you — like a team, not a toolbox. Around that spine: cron jobs gained memory and continuity so scheduled agents actually learn between runs, subagents can be steered live mid-flight, the MCP surface became a real command center, and the agent can now drive the desktop's own browser. This release rolls up everything from the v0.20.1–v0.20.6 infrastructure patch tags — those windows are fully documented here.

✨ Highlights

Bot Mode — your agents become a society, built in — Bot Mode is now a bundled, default-on part of the desktop app: every agent profile gets a name, a deterministic avatar face (with randomize/lock controls), and a place in a shared roster. Create Discord-style group chats where multiple bots and you talk in one room, @-mention any bot from the composer, and give rooms names and pictures. Before, "multi-agent" meant plumbing; now it looks like a chat app full of coworkers. (#87886, #88243, #89386, #96726 — @teknium1, @OutThisLife, @dokterdok)

hermes peer — bot-to-bot DMs between your agents — Any Hermes agent can now message any other by handle, across profiles and gateways, from the CLI or from inside a conversation. Ask your research bot to hand findings to your coding bot and get the reply back where you can read it. Replies land in each agent's canonical Bot Chat, so conversations between agents are durable and inspectable, not fire-and-forget. (#88725, #88178, #91487 — @teknium1)

Cron jobs that remember — Scheduled jobs stopped being goldfish. Cron agents now load and update persistent memory like every other agent, continuity=true carries each run's output into the next (so a monitor can dedupe against what it already reported), every job gets a durable notepad scratchpad, monitor-mode jobs skip the LLM entirely when nothing changed, and cron output can land in a bot's canonical Bot Chat — where the bot actually responds. Your 9am briefing job now knows what it told you yesterday. (#91447, #80774, #81139, #81138, #91487 — @teknium1, @smwbev)

Steer your subagents while they run — delegate_task gained live orchestration: list running children, steer one mid-flight with a course correction, or stop it early and keep the partial result. Add optional JSON-schema validation on child outputs, per-delegation cost surfaced in results, and raised defaults (250 iterations, 10 concurrent children) — delegation went from fire-and-pray to actually managed parallel work. (#85232, #81144, #81142, #86506, #86745 — @teknium1)

The MCP command center — MCP servers and the catalog merged into one coherent desktop page with drag-in "paste anything" import, background health checks that nudge you to re-auth before a tool call fails, a fleet cost/usage overlay showing schema token estimates and 30-day usage per server, and hermes:// deep links that install an MCP server with explicit confirmation. Managing twenty MCP servers used to be config-file archaeology; now it's a dashboard. (#87525, #87572, #87576, #87579, #87581 — @teknium1)

A CLI power wave — Ctrl+P opens a fuzzy command palette, the /model picker filters as you type, /status shows reasoning mode, pending approvals, and context usage, and the status bar can display live cache-hit %, latency, and tokens/sec with per-field toggles. Plus: a global emergency stop, session pin/unpin, rotating task-oriented composer placeholders — and Ghostty-level terminal pets, because a companion should have a companion. (#90730, #90717, #90745, #98250, #98282, #97666 — @teknium1, and salvaged community work)

The agent drives the desktop's browser — The in-app browser stopped being a window the agent could only look at: Hermes now navigates, clicks, and reads it directly, and pages can be popped out to your system browser with full link context menus. Ask it to walk a docs site or debug a web app and watch it happen inside your own app. (#90197, #89366 — @OutThisLife, @ethernet8023)

Six new providers and a model catalog wave — Meta Model API (Muse Spark) arrives as a built-in provider, alongside CommandCode, Tencent TokenPlan, Nebius Token Factory, Ramp Router, and Actual Computer. The catalogs picked up GLM-5.3-Flash, qwen3.8-max/flash, Gemini 3.7 Flash, MiniMax M3 free, and Nemotron 3.5 Lightning — and model_overrides lets you patch any model's context window or pricing yourself without waiting on a release. (#88565, #88308, #97917, #97916, #97915, #85560 — @teknium1 and community)

Security hardening across the board — Protected agent-instruction files (AGENTS.md, skills, memory stores) now always require write approval so a prompt-injected agent can't quietly rewrite its own standing orders. A deep redaction sweep closed secret-leak gaps across terminal errors, .env file reads, checkpoints, and ACP logs; the approval system learned Windows destructive commands; and macOS permission grants finally survive updates via a stable TCC signing identity. (#81152, #80965, #84428, #95091 — @teknium1 and community)

🏗️ Core Agent & Architecture

Providers & Models

New providers: Actual Computer inference (#79644, salvage of #26491), CommandCode with GOAT/Pro/Max plans (#88308, salvage of #32909), Meta Model API (Muse Spark) as a built-in provider plugin (#88565), Tencent TokenPlan (#97917), Nebius Token Factory (#97916), and Ramp Router (#97915).
Model catalog wave: qwen3.8-max and qwen3.8-flash (#78024, #96979), Gemini 3.7 Flash (#85526), GLM-5.3-Flash across OpenRouter/Nous/z.ai/OpenCode (#95621, #96293), MiniMax M3 + Inkling free SKUs (#96264), Nemotron 3.5 Lightning (#84645), Meta Muse Spark 1.2 (#88600).
Per-model metadata overrides via model_overrides config — patch context windows, pricing, or capabilities for any model without waiting on a release (#85560).
Data-training-tier warnings — a unified selection-guard registry warns you across every picker surface when a model trains on your data (#85917).
Pip-installed model providers discovered via entry points — third parties can ship providers as packages (#85504, salvage #81419).
Prompt caching engaged for LiteLLM Claude on the OpenAI wire (#87517 — @kshitijk4poor) and api.meta.ai routed through the Responses API for caching (#88601).
Codex GPT context defaults back to the verified 272K, with explicit -900k picker variants for the large window (#92797).

Agent Loop & Reliability

Stalled-provider recovery — a stalled stream no longer leaves Desktop silent or burns the retry budget (#87236 — @fangliquanflq).
MoA hardening cluster — the Mixture-of-Agents facade now survives client rebuilds, stream retries, provider rotation, and fallback/restore without leaking prepared requests to native clients (#90212 and siblings).
Structured-output resilience — auxiliary calls translate response_format for Anthropic wires and retry when a provider rejects structured output (#89589 — @ethernet8023).
Compression: lean tail mode + a compaction recall eval harness to measure what compression actually preserves (#87326).
Oversized tool results spill to cache instead of being truncated in sandbox-less sessions (#89028).
clarify asks multiple independent questions in one call — one form instead of a chain of round-trips (#89467 — @ethernet8023).
Verify subsystem (port from superagent-ai/grok-cli): run-recipe detection + environment manifest so "it works" claims are backed by detected build/test commands (#80686).

Sessions & State

Resumed transcripts never re-append — dbpersisted stamped at row load time (#92539 — @kshitijk4poor).
SessionDB context-manager protocol for leak-free DB lifecycles (#88048 — @jackulau).
Instant session naming from the opening message, with sticky titles across resume (#81985 — @OutThisLife).
Session pin/unpin from the CLI — durable keep flags (#80761).

📱 Messaging Platforms (Gateway)

Slack native live cards — real streaming replies via chat.startStream plus opt-in plan/task cards for tool progress (#85476); outbound link-preview suppression across native and relay planes (#95142 — @benbarclay).
Telegram inline picker — every command and skill searchable via @botname, bypassing Telegram's command-menu cap (#98317).
Relay matured — native static/dynamic plugin initialization (#77915 — @bbednarski9), live-card ops with draft streaming + task cards (#85796 — @victor-kyriazakos), session-span segmentation (#85467), voice-note STT restored over the relay lane (#95274 — @benbarclay), transport dedupe/fail-fast fixes (#89584).
Gateway control socket — fleet consumers query the gateway itself (identify/status), and updaters pause gateways gracefully instead of tree-killing them (#92447, #95695).
Selective multiplex profile serving (#83400), per-profile MCP lifecycle RPCs (#86473), roster previews showing the latest message (#85905), concise background-process notifications by default (#85877).
Turn-reaper stack dumps — when the watchdog fires, wedged worker stacks are captured for diagnosis (#86248), with loop-watchdog tuning knobs wired end-to-end (#92317).
Split-delivery bug class closed — swallowed finals and split deliveries fixed as a class (#79669 — @kshitijk4poor, salvages #78558).

🖥️ Desktop App

Bot Mode built in — see Highlights. Full sub-catalog: attributed agent-to-agent message cards (#85855), sender-side delivery notices (#85888), paint-first hydration for instant wakes (#89510), editable group names and room pictures (#89371), Routines pane (#88731), rebuilt on the app design system (#96726 — @OutThisLife).
In-app browser the agent can drive — the agent uses the desktop's browser tab, not just looks at it (#90197 — @OutThisLife), with external-open + link context menus (#89366).
Detached update hand-off on every OS — quit → update → reopen with a single shim window; Windows desktop updates no longer park on "Updating Hermes" (#83634, #90937, #95897).
Quality-of-life wave — HUD snaps to cursor on ⌘⇧G (#83130), paste into the composer without focusing it (#84955), per-turn duration badges (#87245), readable macOS window translucency (#88744), Linux launcher entry (#76456), Linux keychain auto-detection (#84903), cron + blueprint recipes in the sidebar (#85162).
Send Diagnostics — error cards can upload a redacted debug bundle with a support handoff (#92020).
Seq-stamped event replay — lossless desktop reconnect over WebSocket (#94219 — @kshitijk4poor).
God-file decomposition — the desktop codebase refactored into atomic modules (#89611 — @OutThisLife).

🖥️ CLI & TUI

See Highlights for the power wave (command palette, fuzzy /model, richer /status, live status-bar metrics, pets).
hermes approval-check — dry-run approval verdicts for a command without running it (#81137).
Session titles in status bars (#81947); subagent model exposed in the auxiliary-models picker (#80463).
Ctrl+C fixed — stopped pushing the Kitty keyboard protocol that broke interrupts (#87074).

🔧 Tool System & MCP

MCP command center — see Highlights (#87525 et al.).
Interrupted commands no longer poison cwd — the terminal won't adopt a stale working directory after an interrupt (#85654 — @ethernet8023).
Windows rename contention recovery (#84852 — @OutThisLife); colon-bearing session IDs no longer break sandbox mounts (#93488, consolidated 6 PRs).
Vision output uncapped — aux vision calls stop clamping max_tokens (#75253 — @adikpb).
Subagent work protected — delegate no longer deletes a child's uncommitted work when git inspection fails (#88419 — @kshitijk4poor).

🧩 Skills Ecosystem

Productivity skill wave (salvaged from @community proposals): document-to-action-items, meeting-action-items, email-inbox-triage, github-issue-to-pr, weekly-review-planning, competitor-news-monitor, product-price-monitor, social-media-content-calendar (#81185, #81749, #81672, #81708, #81936, #81945, #81906, #81942).
HAR-derived API clients — watch a website once, then call its hidden API directly with no browser (#70823).
publish-site — versioned website publishing to GitHub/Cloudflare/Netlify Pages (#72189); session-librarian for prompt-driven session management (#84917); blocked-page-recovery fallback ladder (#84906); merge-reconciler for neutral multi-agent conflict resolution (#83063); Box productivity skill (#85767); ast-grep codemods (#80892); draw-your-font + simple-english optional skills (#80814, #80811); plan-interrogation (evolved grill-me) (#97831).
Advisory SKILL.md linter on create (#81896); skills-hub live-repo fallback for missing optional skills (#82780).

⏰ Cron, Delegation & Multi-Agent

Cron memory + continuity — see Highlights (#91447, #80774).
Monitor-mode jobs with hash-suppressed change detection (#81138); per-job durable notepads (#81139); pre-dispatch config validation (#81140); acked failure signatures stop re-pinging (#95017); per-job reasoning-effort pinning (#91244); "Trigger now" executes immediately and safely (#70638 — @smwbev); model-drift impact surfaced in Desktop (#83266 — @ctaylor86).
Live subagent orchestration — see Highlights (#85232); structured-output schemas on delegate_task (#81144); batch-quality validation before spawning (#81141); truncation markers on capped children (#86641).
Kanban hardening — collision-hotspot flagging (#83428), split-brain decision-ownership contract (#83424), memory-aware dispatch guard (#88115), notify/wake delivery modes (#85487).

📊 Observability

Model/provider usage reporting and bounded tool-metrics aggregation land as an observability subsystem (#68881, #68882 — @afourniernv), with lifecycle ops bounded so a wedged pipeline can never block the agent (#83514 — @victor-kyriazakos).

🔒 Security & Reliability

Protected instruction files — writes to AGENTS.md/skills/memory always require approval (#81152).
Redaction sweep — emission gaps closed across env-name variants, control-splits, process(list), checkpoints (#80965); .env reads redacted via file-read detection (#80964); terminal exception results + ACP stderr (#81675, #81686); SSH target logging (#88232).
Windows approval coverage — destructive Windows commands and paths now trip the approval system (#84428).
Supply-chain response — the Blender MCP catalog entry and skill were removed after an upstream compromise (#83404); plugin installs get Tier-1 security scanning (#80728).
macOS TCC identity — permission grants survive every update via hermes desktop --setup-tcc-identity (#95091).
PKCE cookie fix — SameSite=None over HTTPS with a matching clear path (#83536 — @benbarclay).

🏗️ Infrastructure, CI & Packaging

Real-OS CI — macOS and Windows CI lanes with tests gated by real host OS (#77992 — @ethernet8023); work lanes on 32-core runners (#92009); review comments + image builds moved out of the hot CI path (#82668).
Bootstrap installer no longer waits on pipe EOF (#90941 — @OutThisLife).

🐛 Notable Bug Fixes

Desktop session races (Stop→edit/resend, submit ownership) fixed as a cluster (#86594); workspace-pane idle flicker (#97513); assistant-ui boundary recovery (#81232).
Kanban schema re-creation when a cached DB path loses it (#83619 — @JoaoMarcos44).
Cron jobs no longer inherit a kanban worker's dispatcher identity (#79657 — @kshitijk4poor); relay-fronted Slack cron delivery (#85340 — @victor-kyriazakos).
Model-picker serves cached custom-provider catalogs on no-probe opens (#81973 — @austinpickett).
Docker sandbox MEDIA attachments no longer silently drop (#94509); desktop binary attachments delivered into sandbox backends (#81717).
Session-hygiene compaction cooldown escalates on repeat failures (#79741 — @kshitijk4poor).
Provider-injected parameter 400s retried instead of aborting the turn (#91643).
…and roughly two thousand more closed issues' worth — this window averaged ~85 merged PRs per day.

↩️ Reverted in this window (not shipping)

Model Council mode (/council) — landed then reverted; not in this release.
DCP context engine — landed then reverted; not in this release.
WS-only gateway server (#94245) — merged then reverted (#96118); FastAPI remains on the desktop boot path. The seq-stamped event replay (#94219) DID ship.
Electron rolled back to 40.10.2; TCC interpreter anchor removed (superseded by the signing-identity approach that shipped).

👥 Contributors

Core Team (Nous Research)

@teknium1 — release direction, Bot Mode, MCP command center, cron memory, and ~1,340 merged PRs
@kshitijk4poor (374 PRs) — gateway delivery classes, session persistence, event replay, MoA/caching fixes
@OutThisLife (209 PRs) — desktop architecture, Bot Mode UI, in-app browser, update hand-off
@ethernet8023 (38 PRs) — OS-gated CI lanes, clarify multi-question, tool cwd safety, aux structured-output resilience
@benbarclay (17 PRs) — relay voice STT, Slack link previews, PKCE
@victor-kyriazakos (15 PRs) — relay live cards, observability bounding
@rob-maron, @austinpickett, @jquesnelle, @shannonsands — providers, dashboard, model catalogs, and more

Top Community Contributors (by merged PR count)

@helix4u (31 PRs) — wake-word capture, session UX, fix wave across desktop and gateway
@fangliquanflq (17 PRs) — stalled-provider recovery and agent-loop resilience
@bbednarski9 — relay native plugin integration; @HexLab98, @xxxigm, @afourniernv (observability), @liuhao1024, @Christopher-Schulze, @Adolanium, @webtecnica, @smwbev (cron Trigger-now), @ctaylor86 (cron drift in Desktop), @JoaoMarcos44 (kanban schema recovery), @jackulau (SessionDB context manager), @adikpb (vision output caps), @dokterdok (Bot Mode unification), and many more.

All Contributors

Huge thanks to every one of the 760+ people who contributed code, co-authored fixes, or had their work salvaged into this release:

@03farren, @0xarkstar, @0xGr1mm, @0xWhiteMage, @100yenadmin, @1052326311, @29206394, @2ndNatureAI, @3Nya3,
@3x3xX3N0N, @404Dealer, @4adwentures, @5Hyeons, @686f6c61, @69k4xmdfm2-blip, @6ylqq, @75day, @a-espinoza,
@A-Snegin, @a-yeyang, @a0000001, @A2chitect, @abitme, @abundantbeing, @acewong7, @acgh213, @adamcap926,
@addelh, @adikpb, @Adolanium, @adurham, @adybag14-cyber, @afourniernv, @ag9920, @ahmadalzaro1, @Ahmett101,
@ai-ag2026, @AIalliAI, @aider4ryder, @Ailirag, @Aintworth, @airo7, @AiwendilInTheWoods, @akivavh, @AL-ZiLLA,
@Al3xand3r1987, @albertodepaola, @aldoeliacim, @aleksclark, @AlexanderPrendota, @alexdev03, @AlexFucuson9,
@AlexGabbia, @AlexMnrs, @algf, @Allecpu, @allin2, @alt-glitch, @amanning3390, @andrexibiza, @andyst-dev,
@angel12, @angeon922-collab, @Angriff36, @aniruddhaadak80, @annguyenNous, @anuvratrastogi, @Aoshi-Dev,
@appletechie, @arccat-114, @arcimun, @ArthurFranckPat, @aryaxo, @asdasdadhj, @ashah360, @AshuJoshi, @asimons81,
@assimovt, @austinpickett, @AVW7, @Axmr1, @aydnOktay, @ayushnangia, @baihemax, @bananawalnut, @Bartok9,
@bashrusakh, @bbednarski9, @BearHuddleston, @benbarclay, @benfrank241, @beplee, @bgrablin, @bka9, @BkashJEE,
@BlackishGreen33, @BlakeB254, @blunkjamie-dev, @BobClawblaw, @bradmarshall987, @brian717, @briandevans,
@BrianFranco, @BrinShadewater, @brucexu-eth, @BrunoBza, @buffpesos, @burak33bb, @C-EXCITE-STUDIO, @c-pompa,
@cadezhou, @calvinnwq, @capt-marbles, @carbongotfound, @carlotestor, @Carry00, @cation98, @ccowan93,
@cedricziel, @cervantesh, @cfdude, @Chadmc9889, @CharZhou, @chelsealong, @chesterXalan, @chillerno1,
@Christopher-Schulze, @chukirk-svg, @cicav, @citizendev9c, @cj52973, @clarkvines, @ClintonEmok, @clyu168,
@cmoiccool, @codexbt, @coe0718, @Cossackx, @coygeek, @crazyhulk, @CrazyWillBear, @criptogus, @cryptoyasenka,
@ctaylor86, @cvillarroel2, @cxxCoolStar, @cycorld, @dagbs, @damadorPL, @DanBennettUK, @DanDo385,
@DannyFengTianYu, @Dannyzen, @danspicytaco, @dante32683, @darko-mesaros, @daromaj, @david-bartos-phrase,
@davidgut1982, @DavidMetcalfe, @davidneyravyr, @daxro, @dcdexhome, @deacon-botdoctor, @deadczarvc, @deaneeth,
@DECRUX9812, @deepeet-git, @deniqlab, @DeseretSaint, @dhanesh, @Dhruv7201, @dhruvkej9, @digitalbase,
@DmytroVolodymyrson, @dokterdok, @Dolverin, @dombejar, @doncazper, @dougatbuck, @douxy1994, @dpersek, @dplush,
@Drexuxux, @drissman, @dromai, @dtownsel, @duclucky, @Dudeman456, @Dusk1e, @dvbaecker, @e-macgregor,
@EAbaracus, @eaglezzz0522-cloud, @Eapwrk, @easyvibecoding, @echoes666, @egilewski, @ehz0ah, @ekinnee, @ekzhang,
@elbukott1, @elisam0, @elphamale, @ElSnacko, @embwl0x, @emozilla, @EMT5320, @EndeavorYen, @Enough1122,
@enwaiax, @epeterpanz, @EpicIsTheOne, @eric-senyao, @ernst-bablick, @Eros-ITA, @erosika, @ethernet8023,
@etzelvon, @EvanProgramming, @EvenXieWF, @explainanalyze, @f-trycua, @fanfan343, @fangliquanflq, @fattchris,
@felix-windsor, @Finn763, @flaviovargasbrandao, @Fly-onlyone, @flyingdoubleG, @forkercat,
@francialisomlimoeiro, @francip, @frankmendes1979, @fred0m, @frendo, @frizikk, @frohsinnllc, @Frowtek,
@fukutake1207, @fyzanshaik, @GarlicGo, @Gateton, @georgell-ceo, @gfriesen1, @gigabyte22, @gigashad, @gijoby,
@gitong, @gkd2323c, @gnanirahulnutakki, @GodsBoy, @gokay-ai, @goktugvatandas, @golldyck, @goodchang77, @GottZ,
@grahfmusic, @gregorustar-maker, @greyvito, @gsy324, @guanla-zz, @guilhermeartileshubsai, @guilhermeraiuga,
@h-mascot, @h8hawk, @Haakam21, @Haik-G, @halaprix, @Halldrix, @handnewb, @Hangzian, @hanhvs, @hansai-art,
@HAOWANG116, @HarishDarko, @hbentel, @helix4u, @HenryGHJ, @hermias1, @HexLab98, @hillimited, @Hjharris1,
@hkfiberlaser-svg, @honor2030, @howdeploy, @hsearcy, @huklaa, @hustwkr, @hutao562, @hxwvaa, @IAvecilla,
@icemeng, @infinitycrew39, @infocentr, @InphinitiZ, @insane66613, @Inspired-by-Atmosphere, @intelac,
@intellectronica, @isak-ialogics, @ishanparihar, @isheng-eqi, @Ishman82, @iskysun96, @iso2kx, @itsflownium,
@izumi0uu, @Jaaneek, @Jackal991, @jackijianxa, @jackoconner45, @jackulau, @jaimedhenriques, @james47kjv,
@jbagdonas, @jcjc81, @jdgg777, @jeeves-assistant, @jeff-mettel, @Jefftree, @JElfferich, @jeremyrandria-debug,
@JinUltimate1995, @jirathip-k, @jmmaloney4, @JoaoMarcos44, @joe-rodgers, @joe050860, @John-Lussier,
@Johnny-xuan, @johnrazmus, @johnsonAyo, @jonpol01, @JonthanaHanh, @JoshPaulie, @Jreevo, @jtstothard,
@Julientalbot, @justcarlosm, @justinbowes, @justinjohnson25600, @jwtor7, @k0rnacki, @kadiratesdev,
@Kailigithub, @kaishi00, @KarateWilly, @kas-cor, @katie-lpd, @Kavyrocom, @KBANTH, @kchernev, @KeaneYan,
@kernel-t1, @KeroZelvin, @kerpopule, @KHALIDagara, @KhanCold, @khanhngoo, @KIAgent01, @kim-miram, @kimyxx,
@Kinkoolino-Hermes, @kinsolee, @kitsonk, @klaus765, @koltyj, @konsisumer, @kronexoi, @krunkosaurus,
@kshitijk4poor, @kudapara, @kvnloo, @kweiner, @kyssta-exe, @Kyzcreig, @laithrw, @lakshyaag-tavily, @landaun,
@laulopezreal, @laviesony, @lazy-idler, @LBeghini, @leeclouddragon, @Leegenux, @LemonSchneid, @LeonardoLGDS,
@leonphull, @LeonSGP43, @lepetitprince716-prog, @Lesnak1, @lesterlxt, @lesyuk, @lEWFkRAD, @lextiz, @lgy1027,
@Lidang-Jiang, @lilShawtty-byte, @lin-hongkuan, @liuhao1024, @liusencomic-cyber, @lkz-de, @loafoe, @locker95,
@LordMelkor, @lorzl, @lost9999, @loulanyue, @LovePlayCode, @luckygreen, @lukeroberts, @luoxiao6645, @luxles,
@m1k3s0, @Mabolla, @MagMueller, @magnus919, @magnuslundstedt, @MaheshBhushan, @MarcoFernstaedt, @mariobgsp,
@marketing2981, @markmcd, @markmnl, @MarkVLK, @marzukia, @Mat-London, @matsvarn, @mattprusak, @MaximCrabbe,
@maxmilian, @mehmetkr-31, @Mengchee118, @menhguin, @metamindedu, @michaelHMK, @michaelsam94, @milnerrad,
@MindDragonLabs, @misterdas, @mjolley9, @mmcallister8, @mmcclean-aws, @mmchuangyt-ai, @moisesvalero, @mollusk,
@monerostar, @Morad37, @mrkillbob, @mrmixx-max, @mrsucesso, @MrTheSoulz, @MustafaK99, @myk0la-b, @mzkarami,
@n-leezy, @n1majne3, @NaMinhyeok, @nanami7777777, @nankingjing, @natebransc, @nateEc, @Navlem, @nbxuhk,
@nductien, @Ne0teric, @NealZhouPanda, @necoweb3, @negroni334, @nftpoetrist, @nicochase, @Nicolas-Formenton,
@nicolasdmolina, @nikitaBarkov, @NikolaRHristov, @noahingh, @nolanchic, @NorethSea, @notkisk, @notwitcheer,
@NousResearch, @null-runner, @ojassharma7, @oliver-mee, @olympusbuildz, @OmarB97, @ooiuuii, @openclaww-xz,
@opti-josh-holt, @osgeek90, @ousiaresearch, @OutThisLife, @Owen-narcissus, @paoloantinori, @Parker-Fawcett,
@pasevin, @pasmud, @PaulBlackSwan, @paultaki, @peetteerr, @pefontana, @Per0-1, @pierrenode, @PINKIIILQWQ,
@pittosporum-seu, @pju-hoge, @plcunha, @Pluviobyte, @pmos69, @pnascimento9596, @poisdahl, @potatosalad,
@prashantjain25, @PRATHAMESH75, @professorpalmer, @projetsjsl, @protas-box, @qazasdsdqaza, @QDung210,
@qixuancao, @QuarkAssistant, @quocanh261997, @ragingbulld, @rainbowgore, @rapsealk, @Raven26-VooDoo,
@RaviTharuma, @RayCharlizard, @razultull, @re-ITRT, @Reksely, @RelaxJonh, @repfigit, @RGerrish, @RibatTRW,
@RichardGuan1, @RichardHojunJang, @richardhowes, @RickyYii, @rikkarth, @rille111, @Ringo6107, @rjhilgefort,
@rjvandeve, @rkfshakti, @rlaope, @Rmohid, @rob-maron, @rodrigogs, @royalaid, @royzhrxy-glitch, @rroverin,
@rshi0212, @rsk-731, @rtcopenclawgh, @ruangraung, @rudrakshchahal, @ruochu88s, @rweddle, @ryankhart, @S-Claw,
@Sahil-SS9, @salch-cred, @sam7894604, @samclams, @saralilyb, @sashmatash, @sasquatch9818, @satotakumi,
@ScaleLeanChris, @SeashoreShi, @serefyarar, @shaase-ctrl, @shali10, @shannonsands, @shanthans-es, @ShaoRou459,
@shaqalaka, @shauneccles, @Shedrackeze002, @SHL0MS, @ShonnQ, @Shotflame, @silence-de, @simonvanlaak,
@SiteupAgencia, @sjungwon03, @skip-agent, @SLC-BTC, @Slobaka, @smarzola, @smause, @SmelterLabs, @smfworks,
@smwbev, @sohomsahaun, @Soju06, @SolshineCode, @solyanviktor-star, @somewheresy, @SongotenU, @songshikang0111,
@Sora-bluesky, @SouthpawIN, @spfcraze, @srojk34, @Starfie1d1272, @starship-s, @StellarisW, @steveonjava,
@Stoltemberg, @strnadchristopher, @strzhao, @sujeet111, @suntech-wang, @supotato-ipj, @sweetcornna,
@sycamoregroupltd, @sylbae, @tachyon-r, @tauros1983, @terry197913, @texasich, @th3sull1van, @thacid22,
@thatssoheil, @TheAngryPit, @thebizfixer, @thejpanganiban, @thelonewander3r, @thenabbu, @TheophilusChinomona,
@TheSmokeDev, @TheTom, @thomasbek3, @tigercraft4, @Tigrannnnnnn, @Tilly-YL, @tmchow, @tmielika, @tmingos,
@TMShiroiko, @TomAce7, @tomatau, @Tomenatore, @Tommy00748, @TomSpoct, @toprakeker, @Tranquil-Flow,
@tranquilflow, @trevornk, @trippyogi, @troyrowe-resource, @tt-a1i, @tuancookiez-hub, @tugrulguner,
@TurgutKural, @tyfcontent, @Ufonik88, @UniversePeak, @unsupportedpastels, @uperLu, @uttkarsh-26,
@V0v1kkkAssistant, @vadelma-agent, @vanniaxel06, @VBS2004, @verybigdog, @victor-kyriazakos, @victorftrdba,
@victoronwuanaku, @victorv2i, @vignesh-oai, @vinayshah1998, @vinsew, @VIVAAN-DHAWAN, @vKongv, @vondelomlo,
@vorburger, @wanglufei-567, @wangs1203, @wanquanY, @wdon, @web-wyf, @webdevtodayjason, @webtecnica,
@webtoolbox, @weisiwu, @weismanfamily, @Wenfengcheng, @wesleysimplicio, @westkite1201, @whirmill, @whisky0809,
@whoislikemiha, @will-lynas, @willfrombr, @wingkwong, @Wintle, @wiseconnex, @wo-o, @WolframRavenwolf,
@WolftacDigital, @worlldz, @wz-heng, @x1051445024, @x7peeps, @xaviersudre, @XiaoZAZA, @xkam7ar, @xrwang8,
@xthezealot, @xxxigm, @Yanir-R, @YappLeCunt, @yatesjalex, @yflmq001, @ygd58, @Yiipu, @yingliang-zhang, @yinkev,
@Yishova, @yoniebans, @youtiaowei, @ypQQ1984, @yu-xin-c, @yukinomon, @yuric, @YusenZhang0601, @YuYigeng,
@yuzilongleif-collab, @yy28, @zabih-sudo, @ZachariahChu, @zakame, @zapabob, @zccyman, @zcj1122-rgb,
@zengzheqing, @Zeraphim, @Zeus-Deus, @zgqq, @zhangfei1231231-sketch, @zhao0112, @zhaomengfan, @ZHJay,
@zhongwater123, @zhuermu, @zoidypuh, @zons-zhaozhy, @zuowen7, @zyz619963502zyz, @zzz163519

Also: @mkoistinen, @JoaoMarcos44, @StanleyStetson.

Full Changelog: v2026.8.3...v2026.8.31 This release rolls up and fully documents the v0.20.1, v0.20.2, v0.20.3, v0.20.5, and v0.20.6 patch-tag windows (Aug 13–27), whose notes were deferred to this minor per the rollup-release policy.

v2026.8.27 [Aug 27, 2026] (1mo ago) details → github →

# Hermes Agent v0.20.6 (v2026.8.27)

Hermes Agent v0.20.6 (v2026.8.27)

Release Date: August 27, 2026

> Patch release. This tag rolls up the ~525 PRs merged since v0.20.5 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v0.20.5 (v2026.8.19, tagged August 21), this window landed ~1,313 commits across ~1,557 files (+177,113 / −21,682) — ~525 merged PRs including consent-gated real-profile browsing (use your default Chromium profile for local browsing, with Windows close-with-approval flow); the desktop Browser getting its own OS window plus a managed SSH remote-update engine and fleet profile rail; a large remote MCP catalog expansion (50+ live-verified vendor-hosted servers incl. Cloudflare, Grafana Cloud, Better Stack, Railway); TTL result caching for websearch/webextract; lean-tail compression as the default; multi-query tool_search with stemming; opt-in OS-keychain encryption for stored secrets (no more per-launch macOS Keychain prompts); updaters pausing gateways over the control socket instead of tree-killing them; image/package-managed installs refusing unsafe in-place updates (#91277 Phase 3); cron durable-incident acks and clearer code-skew failures; Slack link-unfurl controls; shared Docker container identities; pluggable terminal environment backends; and new models across the pickers (GLM-5.3-Flash, MiniMax M3 free, MiniMax H3 Max video).

Full curated release notes for this window will ship with v0.21.0, which will document everything from v0.20.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

hermes update from an existing install
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

Full Changelog: v2026.8.19...v2026.8.27

v2026.8.19 [Aug 21, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.5 (v2026.8.19)

Hermes Agent v0.20.5 (v2026.8.19)

Release Date: August 19, 2026

> Patch release. This tag rolls up the ~323 PRs merged since v0.20.4 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v0.20.4 (v2026.8.18, tagged August 18), this window landed ~746 commits across ~1,250 files (+111,500 / −20,701) — ~323 merged PRs including Bot Mode group-room threads, foldable conversation summaries, blob-face avatars, and PDF/file attachments with drag & drop; the keyless web tier (5-vendor free rotation with ring failover, web search on fresh installs with zero keys); a CLI polish wave (fuzzy /model picker, Ctrl+P command palette, richer /status); execution-discipline and runtime stall guards from the Composio eval findings; hermes update receipts and fleet --plan verification; hermes worktree list/prune; the opencode-free zero-auth provider; multi-question clarify; desktop perf work (paint-first Bot Mode hydration, compositor spinners, React Compiler in both renderers); and cron jobs gaining persistent memory and per-job reasoning effort.

Updating

hermes update from an existing install
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

Full Changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.8.18...v2026.8.19

v2026.8.18 [Aug 18, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.4 (2026.8.18)

Hermes Agent v0.20.4 (v2026.8.18)

Release Date: August 18, 2026

> Patch release. This tag rolls up the ~74 PRs merged since v0.20.3 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v0.20.3 (v2026.8.16.2, tagged August 17), this window landed ~146 commits across ~265 files (+21,697 / −2,217) — ~74 merged PRs including the desktop glass/translucency surface work (matte glass, frost picker, macOS pre-select), the tabbed SESSIONS|BOTS sidebar with per-bot hide/unhide, Bot Mode group-chat fixes (long-running member turns, Markdown rendering, cross-machine routing), NVIDIA SkillEvaluator Tier 1 advisory scanning on skill installs (license + security checks), cron media-send hardening (configurable timeout, manual-run attachments, missed-fire surfacing), SessionDB event-loop-thread and contention fixes, hermes update parked-branch honesty, and kanban native OS notifications.

Updating

hermes update from an existing install
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

Full Changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.8.16.2...v2026.8.18

v2026.8.16.2 [Aug 17, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.3 (2026.8.16.2)

Hermes Agent v0.20.3 (v2026.8.16.2)

Release Date: August 16, 2026

> Patch release. This tag rolls up the ~125 PRs merged since v0.20.2 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v0.20.2 (v2026.8.16, tagged earlier today), this window landed ~250 commits across ~461 files (+42,613 / −1,641) — ~125 merged PRs including the MCP 2.x SDK migration and 2026-07-28 stateless protocol support, the bundled Bot Mode (hermes-bots) plugin with the core teammate protocol, the CommandCode provider plugin, subprocess Python runtime ownership hardening (PYTHONHOME/PYTHONPATH isolation), Cua Driver 0.20 runtime contracts for computer use, kanban worktree/dispatch fixes, cron continuity flags, desktop remote-gateway headers and connection self-healing, cron scheduler self-heal (EMFILE recovery, stale-claim reconciliation, wedged-job re-arm), session handoff data-loss fixes, plus a wave of ports from the ecosystem scout slate (plugin install security scanning, /worktree, /rollback hand-edit preservation, UTF-16 file reads, Gemini 3 tool-call ID preservation, and more).

Updating

hermes update from an existing install
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

Full Changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.8.16...v2026.8.16.2

v2026.8.16 [Aug 16, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.2 (2026.8.16)

Hermes Agent v0.20.2 (v2026.8.16)

Release Date: August 16, 2026

> Patch release. This tag rolls up the ~397 PRs merged since v0.20.1 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v0.20.1 (v2026.8.13, tagged August 13), this window landed ~967 commits across ~1,279 files (+128,522 / −7,622) — ~397 merged PRs of fixes and improvements spanning the desktop app (multi-gateway Connections registry, profile-scoped refreshes, MCP health checks and deep links), the CLI (Windows update probes, Kitty keyboard protocol, chat -c hardening), the gateway (persisted model routes, /loop completion, Telegram DM topics), prompt caching for LiteLLM Claude on the OpenAI wire, cron hardening, auth resolution through profile scopes, and installer robustness on both Linux and Windows.

Updating

hermes update from an existing install
Fresh install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

Full Changelog: https://github.com/NousResearch/hermes-agent/compare/v2026.8.13...v2026.8.16

v2026.8.13 [Aug 13, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.1 (2026.8.13)

Hermes Agent v0.20.1 (v2026.8.13)

Release Date: August 13, 2026

> Patch release. This tag rolls up the ~656 PRs merged since v0.20.0 into a stable tagged release for downstream consumers (Docker images, hosted deployments, and anyone installing from the latest tag).

About this release

Since v0.20.0 (August 3), this window landed 1,444 commits across ~656 merged PRs, touching 2,172 files (+233,872 / −75,244), and closed ~481 issues. It is a broad stabilization-and-fixes rollup spanning the desktop app, gateway platforms, installers, tool system, and provider catalogs.

Updating

Existing installs: hermes update
Fresh install: see the installer one-liner in the README

Full Changelog: v2026.8.3...v2026.8.13

v2026.8.3 BREAKING [Aug 3, 2026] (2mo ago) details → github →

# Hermes Agent v0.20.0 (2026.8.3)

Hermes Agent v0.20.0 (v2026.8.3)

Release Date: August 3, 2026 Since v0.19.0: ~3,650 commits · ~1,400 merged PRs · ~5,200 files changed · ~559,000 insertions · ~405,000 deletions · ~1,200 issues closed · 650+ contributors

> The Herald Release. Hermes is the herald of the gods, and this release makes him one in earnest: he speaks (real-time conversational voice with streaming TTS, barge-in, on-device wake words, and hands-free control across the CLI, desktop, and every audio-capable gateway platform), he carries word to other agents (A2A v1.0), he announces events to your systems (signed outbound webhooks), and he cites his sources (grounded research with verifiable citations and fact-checking). Around that spine: the desktop app became a platform (artifacts with live preview, a plugin SDK, quick-entry from anywhere, multiple windows), the CLI got a wave of power commands (! shell mode, /init, /diff, /context, /focus), compression got smarter and gentler, and the tools themselves now recover from their own failures instead of making the model guess. This release rolls up everything from the v0.19.1 infrastructure patch tag — that window is fully documented here.

✨ Highlights

Talk to Hermes — streaming, conversational voice with barge-in — Voice mode used to mean: speak, wait for the whole reply to generate, then listen to one long audio file. Now Hermes speaks clause-by-clause as the response streams, you can interrupt it mid-sentence by just talking (it stops, listens, and the model is told you cut in), and busy-aware silence detection means it doesn't talk over you. This works in CLI voice mode, on the desktop, and through gateway adapters. Talking to Hermes finally feels like a conversation, not a voicemail exchange. (#69511, #73862, #74223, #74000, #69602 — @teknium1, @OutThisLife)

Wake words and hands-free control — Say your own open-vocabulary wake phrase ("hey Hermes", or anything you pick) and Hermes starts listening — detection runs on-device, so no audio leaves your machine while it waits. Multi-profile voice routing means different wake words can reach different profiles, and saying "stop" ends the voice chat on every surface without touching the keyboard. Your terminal is now something you can talk to from across the room. (#70509, #73106, #73933 — @teknium1)

Voice on every platform — Send a voice note to Hermes on WhatsApp, Feishu, DingTalk, LINE, QQ, Photon, or Weixin and it's transcribed and answered; auto-TTS replies are delivered platform-aware (opus where platforms want opus, captions attached correctly). STT is now fully configurable — its own hermes tools category, GUI toggles, dashboard dropdowns, unified language resolution so transcripts stop coming back in the wrong language, and OpenAI's gpt-transcribe support. One unified spoken-text preprocessor cleans markdown, code, and URLs out of speech across all TTS providers. (#73515, #73508, #73910, #73513, #73067 — @teknium1)

Research you can trust — grounded citations with fact-checking — The new grounded-citations skill makes Hermes produce research where every claim is backed by a verifiable source: quotes are matched against the actual page text (not hallucinated), citations link to the exact evidence, and a fact-checking mode turns the same machinery on any document or claim you hand it — it tells you what checks out, what doesn't, and what couldn't be verified. If you use Hermes for research, this is the difference between "sounds right" and "provably sourced." (#71698, #77104 — @teknium1)

Outbound webhooks — Hermes pushes events to your systems — Until now, integrating with Hermes meant polling or listening on a platform. Now Hermes pushes signed lifecycle events (session activity, turn completions, tool events) to any HTTP endpoint you register — with HMAC signatures so your receiver can verify authenticity. Wire Hermes into your CI, your home automation, your dashboards, or any service that speaks HTTP, with no polling loop. (#69406 — @teknium1)

The desktop app becomes a platform — artifacts, plugin SDK, quick entry — Hermes desktop now renders artifacts: versioned cards with sandboxed live preview in a right-rail viewer, so generated HTML/apps run safely next to the chat. A real plugin SDK landed with Kanban as its founding plugin, ctx.download for handing users files, floating pane placement, and multiple GUI windows. A global-hotkey quick-entry window captures a thought into any session from anywhere in your OS. The desktop stopped being a chat client and started being a workbench. (#72345, #61173, #74413, #72315, #68259, #73143 — @OutThisLife, @teknium1)

Hermes speaks Agent-to-Agent — A2A v1.0 — A new bundled plugin implements the Agent-to-Agent protocol, so Hermes can discover, talk to, and be driven by other A2A-compatible agents. This closes issue #514 — one of the oldest open feature requests in the repo. If you're building multi-agent systems with heterogeneous stacks, Hermes now has a standard wire protocol for joining them. (#77109 — @teknium1)

CLI power-user wave — !command runs a shell command instantly without spending a model turn. /init scans your project and generates (or updates) an AGENTS.md. /diff shows staged/all/session changes from any surface, /context breaks down exactly what's filling your context window, /focus gives you a reduced-output view with hidden-line recovery, and Ctrl+S stashes a half-written prompt into a browsable panel. Plus hermes import-agent migrates your Claude Code or Codex CLI setup into Hermes in one command. (#72257, #72178, #72240, #72242, #72302, #72262, #72190 — @teknium1, several salvaging long-standing community PRs)

Correct the agent mid-turn — redirects — If Hermes is heading the wrong way, you no longer have to /stop and re-explain. Type a correction while it works and the active turn is redirected: work in flight is preserved, the original prompt is kept, and the agent course-corrects with your new guidance. Paired with double-ESC draft discard and a composer undo stack, steering feels like editing, not restarting. (#63104, #72339, #74736 — @OutThisLife)

Tools that fix themselves — A sweep of self-recovery upgrades means the agent wastes far fewer turns on tool friction: truncated terminal output spills to a file the agent can read back, patch detects already-applied edits and diagnoses whitespace mismatches, write_file verifies content on disk, searches that match nothing probe for near-misses and recover, and common failure classes come back with actionable hints. The default tool-calling iteration limit also jumped 90 → 500 — long autonomous runs stopped hitting an artificial wall. (#77041, #76998, #77024, #77055, #77011, #76992, #72176 — @teknium1)

Compression that respects your conversation — Context compression got a deep overhaul: proactive tool-result pruning for large-window models, per-turn micro-compaction that amortizes the cost instead of one giant pause, a guaranteed N-user-message tail so recent conversation always survives, progress-aware timeouts that stop punishing slow summary models, and ghost-skill defense so a pruned skill can never silently haunt a session. Thresholds are now configurable per-model and in absolute tokens. Long sessions stay coherent and stop stalling. (#70254, #75345, #70250, #71508, #70275 — @teknium1, @kshitijk4poor, salvaging multiple community PRs)

Smart approvals grow up — hermes approvals suggest mines your approval history into allowlist proposals, operators can customize the smart-approval policy, a consecutive-denial circuit breaker stops a misbehaving loop cold, and desktop pairing approvals are profile-correct with a proper surface to answer them from. Plus a new approval gate for docker/podman daemon-redirect commands. Less clicking "approve", without giving an inch of control. (#72259, #72186, #72203, #74446, #71092 — @teknium1, @OutThisLife)

Faster everywhere, again — Prompt caching now covers tool schemas on native Anthropic without history loss. hermes -w cold start dropped ~14s → ~1.8s, hermes update no-ops got 2–6s faster, heavy SDKs lazy-load off the import path, config reads stopped deep-copying (54× faster on the telemetry gate), and the desktop shipped a second 60fps wave — streaming cost independent of transcript length, drag at 60fps with five streaming tabs, idle CPU near zero in the background. (#76032, #71637, #74218, #74204, #71835, #72346, #75218 — @kshitijk4poor, @teknium1, @OutThisLife)

New places to run and be reached — Buzz lands as a bundled gateway platform (Block's Nostr-based messenger, with native WebSocket transport and NIP-42 auth), the Vercel AI Gateway provider and Vercel Sandbox terminal backend return modernized, desktop gains an SSH remote-backend connection mode, and the Relay shipped four phases of parity — media, interactive prompts, thread lifecycle, typing indicators — plus HSP personal + org skill sync. (#73610, #73761, #74518, #68130, #71300–#71624, #66730 — @teknium1, @yoniebans, @benbarclay)

🎙️ Voice & Speech

Conversational voice

Streaming, conversational TTS with barge-in across all surfaces; clause-by-clause synthesis for CLI voice mode + gateway adapters (#69511, #73862 — @OutThisLife, @teknium1)
Voice chat UX polish — busy-aware silence, stop hint, thinking sounds, barge-in fix; full-duplex turn listener (interrupt by voice during generation AND playback) (#74000, #74223 — @teknium1)
On-device wake words with open-vocabulary phrases + multi-profile voice routing; say "stop" to end voice chat hands-free on every surface (#70509, #73106, #73933 — @teknium1)
The model is told when the user interrupts its spoken reply; desktop speaks the whole turn and idle-flushes held narration (#69602, #69936 — @OutThisLife, @teknium1)
15-item CLI/TUI voice-mode UX and environment fix wave (#73520 — @teknium1)

TTS / STT infrastructure

Unified spoken-text preprocessing + speed/instructions/provider tool params; unified STT language resolution (fixes the wrong-language transcription class); global stt.language defaults to en (#73513, #73067, #73100 — @teknium1)
Fully configurable STT — hermes tools category, GUI toggle/matrix, dashboard dropdowns, setup status; OpenAI gpt-transcribe support (#73910, #73853 — @teknium1)
Platform-aware auto-TTS voice delivery (opus platforms, streamed/global gap, captions); inbound voice classification/routing for Feishu, DingTalk, LINE, QQ, Photon, WhatsApp, Weixin (#73508, #73515 — @teknium1)
Command TTS/STT provider hardening — idle timeouts, env scrubbing, no-shell, path guards (#73514 — @teknium1)
Sync per-sentence TTS synthesis pipelined with playback — the next sentence renders while the current one speaks (#77355 — @kshitijk4poor)
Discord voice PCM streams to ffmpeg stdin instead of a temp file (#76970 — @kshitijk4poor)

🏗️ Core Agent & Architecture

Compression & context

Proactive tool-result pruning for large-window models; per-turn micro-compaction; N-user tail guarantee (compression.mintailuser_messages); bounded summarizer input with head+tail retention (#70254, #75345, #70250, #70249 — @teknium1, @kshitijk4poor)
Ghost-skill defense — [SKILL_PRUNED] markers, protected prune, deterministic survival; progress-aware timeouts; lock-contended compression soft-defers instead of exhausting (#70275, #71508, #70285 — @teknium1)
Per-model threshold overrides; absolute token threshold (compression.threshold_tokens); opt-in idle-triggered compaction; opt-in progress notices; structured local logging for compression attempts (#69339, #69335, #69360, #70457, #69338 — @teknium1)
Context-engine ABC grows selectcontext() + onturn_complete() verbs (salvage of @chaos-xxl's RFC work); engines can suppress or customize compaction status (#70458, #69859 — @teknium1)
Strict redaction applied at every compaction text boundary (#69294 — @teknium1)

Prompt caching & hot-path performance

Tool schemas cached on native Anthropic without history loss + consolidated cache-plan internals (#76032, #76067 — @kshitijk4poor)
DeepSeek prompt caching on OpenCode gateways; per-API-call token accounting off the turn thread; OpenAI wire client reused across sequential LLM calls; send-path tool-call canonicalization memoized (#75886, #73359, #73375, #76880 — @teknium1, @kshitijk4poor)
Readonly config loader at 29 call sites (28× cheaper reads); per-turn config deepcopies killed (telemetry gate 54×); one raw config.yaml parse per process; inter-tool delay removed (#74322, #74211, #74228, #64172 — @teknium1, @Soju06)
Lazy heavy-SDK imports (−8-10% import cost on top of the mcp/tool-discovery diet); streaming hot loop drops per-chunk repr() (~3× cheaper accounting); cursor/memo optimizations for per-iteration history walks (#74204, #74194, #74221, #74231 — @teknium1)
Cold-start ~14s GIL stall during backend init mitigated; turn flush batched into one SQLite transaction; provider-capability-gated prompt cache keys (implied for api.openai.com) (#77814, #77619, #77609 — @kshitijk4poor)
AIAgent hot-path salvage — prompt-cache copy, reasoning-timeout precompute, lazy compressor init (#57229 — @kshitijk4poor)

Approvals & the agent loop

hermes approvals suggest mines approval history into allowlist proposals; operator-customizable approvals.smart_policy; consecutive-denial circuit breaker; cross-surface approvals mode command (#72259, #72186, #72203, #63517 — @teknium1)
Docker/podman daemon-redirect commands require approval; session-wide runaway-loop caps for websearch + delegatetask (Claude Code-inspired) (#71092, #66600 — @teknium1)
Mid-turn redirects — user corrections steer the active turn, preserving in-flight work and the original prompt (#63104, #72339 — @OutThisLife)
Delegation: structured timeout/stall metadata + live per-child status in /agents; subagents can use executecode; redacted child tool history exposed in subagentstop; public subagent lifecycle API for plugins (#72300, #69325, #72403, #72501 — @teknium1)
Single-owner refactors for backend identity + failure-scoped skips, empty-content wire repair, call_id/reasoning sanitization, model-switch parsing (#72505, #73071, #74319, #74229 — @teknium1)
Labeled reasoning excerpt surfaced at the empty-response terminal; toolsearch probe-validates blind toolcall args (#65144, #59267 — @teknium1)

Tool self-recovery wave

Terminal: recoverable truncation (full output spilled + pre-truncation size), cwd echoed when a command changes directory, output-pattern failure hints (#77041, #77004, #76992 — @teknium1)
Patch: already-applied edits return success no-op, whitespace-visualized no-match diagnosis, ambiguous-match locations listed (#76998, #77024, #77001 — @teknium1)
Search: zero-match probes + multi-path recovery, auto-multiline for newline patterns; readfile default limit 500 → 2000 lines; negative-result cache for read/search misses; writefile verifies on-disk content (#77011, #77102, #76996, #76945, #77055 — @teknium1, @kshitijk4poor)
executecode recovery hints; skillview dedup stub for unchanged re-reads; terminal/execute_code schema prose trimmed ~40%; tiered tool disclosure scales with catalog size; default iteration limit 90 → 500 (#77106, #77095, #77023, #67034, #72176 — @teknium1)

Providers & models

Vercel AI Gateway provider + Vercel Sandbox terminal backend return, modernized (SDK 0.7.2, telemetry off) (#74518 — @teknium1)
Gemini 3.1 Pro + 3.6 Flash in catalogs; Gemini salvage cluster (3.6-flash aux default, Vertex catalog, direct cost tracking); claude-opus-5 in OpenRouter + Nous Portal; deepseek-v4-flash-0731 (#73479, #73516, #70946, #75501 — @teknium1)
Bedrock Converse API prompt caching (cachePoint) (#70231 — @JoaoMarcos44)
OpenAI data-residency endpoints get declared transport + correct catalog; provider-aware API-server request routing; backend-acknowledged session model lock; Nous sticky routing via top-level session_id (#74958, #70853, #70950, #69253 — @victor-kyriazakos, @teknium1)
Model picker: curated defaults + collapsible providers + select-all; stale caches served instantly with background refresh; custom-endpoint probe capped at 1.5s; honcho OAuth device-code login (#73172, #76430, #76922, #61608 — @OutThisLife, @teknium1, @kshitijk4poor, @akattelu)
ACP: named custom providers in the model selector; authenticated cross-provider model choices; non-blocking startup via background MCP discovery (#70082, #70404, #75985 — @israellot, @amanning3390, @kshitijk4poor)

Secrets & config

Command-helper secret source (composes with all vaults); one-command token rotation + actionable startup errors; opt-in encrypted break-glass cache for Bitwarden; vault-injected keys scoped per profile home; orchestrator preserve_existing + profile aliasing (#69266, #68605, #69251, #69250, #69058 — @teknium1)
${env:VAR} SecretRef parity between config.yaml and MCP config; secret-source env vars reach stdio MCP servers (#69267, #69053 — @teknium1)
Canonical config loaders for behavioral reads; table-driven config migration registry; DEFAULTCONFIG extracted to configdefaults.py; auto-migration support floor at v12 (#74237, #74200, #74182, #74433 — @teknium1)

🌐 Gateway, Relay & Fleet

Session activity heartbeats, stall watchdog, and bounded compression waits — re-landed hardened after an in-window revert cycle (originally #72424 by @fangliquanflq) (#76354 — @teknium1)
SessionState consolidation (19 session-keyed dicts → one turn/conversation/persistent-scoped object); TurnContext/TurnRunner seam extraction; declarative busy_policy on CommandDef (#74289, #74353, #74197 — @teknium1)
Relay parity waves: Phase 1 (supported_ops discovery, identity fields, /handoff aliasing), Phase 2 media, Phase 3 interactive prompts, Phase 4 thread lifecycle; egress typing indicators (#71300, #71363, #71404, #71624, #69721 — @benbarclay)
HSP skill sync: personal client (M1) + org-skills client (M2) + org-skill namespace with token-gated discovery (#66730, #70024, #70459 — @benbarclay)
Buzz (Block/Nostr) platform adapter with native WebSocket inbound transport + NIP-42 auth (#73610, #73761 — @teknium1)
Photon: native polls, effects, clarify-as-poll, rich links (4-PR salvage) (#73614 — @teknium1)
Slack: native Block Kit clarify buttons; opt-in reaction triggers; outbound payload sanitization; thread-context lifecycle fixes (#69318, #70195, #69317, #69320 — @teknium1)
Discord auto-thread sessions keyed on prospectivethreadid; reply references built from ids (no fetch_message); WhatsApp configurable inbound read receipts (#76513, #76875, #73322 — @benbarclay, @kshitijk4poor)
Kanban wakes resume the creator's DM/thread session; kanban/delegate wake-ups reach api_server sessions; per-task model + thinking-depth from the board (#72191, #70171, #69876, #76417 — @teknium1, @OutThisLife)
Relay: Discord tool-progress routed into the auto-thread instead of the parent channel (#77830 — @benbarclay)
Outbound webhooks — push signed lifecycle events to external endpoints; simplex channel enumeration in hermes send --list (#69406, #77110 — @teknium1)

🖥️ Hermes Desktop App

The platform wave

Artifacts — versioned cards, sandboxed live preview, right-rail viewer (#72345 — @teknium1)
Plugin SDK — Kanban as the founding desktop plugin; ctx.download hands the user a file; widget-app SDK (apps as state+reducer+render) with three reference apps; widget-grid layout engine + background-aware theme engine (#61173, #74413, #68306, #20379 — @OutThisLife)
Quick-entry window (global hotkey → any session); multiple GUI windows; floating pane placement; pane toggles anywhere + hidden header; ⌘O open-folder-as-project (#72315, #68259, #73143, #75848, #74623 — @teknium1, @OutThisLife)
SSH remote-backend connection mode; event-driven live sync replaces always-on polls; remote profile routing/sessions/pool lifecycle repaired (#68130, #73673, #72835 — @yoniebans, @OutThisLife)
Let the agent drive the shell (preview pane + pane focus) AND inspect the desktop app it's developing; find-in-page (Ctrl+F); GUI terminal copy/paste + font picker (#69519, #73121, #72235, #73705, #76395 — @OutThisLife, @teknium1)

Composer & UX

Attach files/folders/links via picker; composer chips for @ paths and pasted links; composer undo stack; double-ESC discards draft; double-Enter sends the queued turn; type-to-focus (#74668, #73110, #72201, #72288, #74736, #73101, #68918 — @OutThisLife)
2-keypress model switching (⌘⇧M); YOLO in ⌘K with live toggle state; keyboard-first pickers; keyboard navigation for clarify choices; server-owned pins that follow you between apps (#74545, #74674, #74602, #69799, #74234 — @OutThisLife)
Grouped, live-ticking tool-activity line; improved tool call detail views; @session links resolve to clickable titles; brand icons on known-domain links; iMessage-style emoji reactions (opt-in, two-way); double-click to heart (#72893, #69868, #71162, #73047, #74533, #74644 — @OutThisLife, @teknium1)
Sidebar date dividers + pinned section + opt-in stale-session auto-archive; sessions stop lying about running state; credit-usage toasts; configurable attachment size limit; Cron Blueprints + Webhooks pages; searchable timezone picker (#70822, #72303, #69828, #73221, #70066, #69687, #73505 — @OutThisLife, @austinpickett, @Adolanium, @teknium1)
RFC 8252 native desktop sign-in (system browser + PKCE, no webview cookies); "Connect to existing Hermes" in first-run onboarding; profile-correct pairing approvals with a desktop surface (#67920, #70907, #74446 — @benbarclay, @OutThisLife)
Keep-computer-awake toggle + notch wake indicator; /battery status-bar toggle; UI zoom 90% default preset; status bar hideable (#68140, #76396, #68860, #73161, #72960 — @OutThisLife, @teknium1)

Desktop performance (60fps wave 2)

Streaming cost independent of transcript length; 60fps on real sessions (reflow-gated pins, adaptive flush); drag at 60fps with five streaming tabs; multitab streaming made fast (#71835, #72504, #72346, #71780 — @OutThisLife)
Hidden-pane timers paused (agents view, cron sidebar, floating pet), scroll/status loops stopped in busy sessions (#77651 — @kshitijk4poor); idle CPU near zero in the background; sidebar/overlay render churn killed; statusbar + transcript stop re-rendering per token/sash-drag/session-switch; ⌘K opens instantly; renderer cold start keeps shiki/mermaid off the boot path (#75218, #73698, #72163, #72245, #72524, #74665, #73024 — @OutThisLife)
State diagnostics (render + store churn counters) + a lint rule banning atom-mirrored refs so the stale-read bug class cannot return; Playwright E2E suite with visual regression diffs (#71925, #71560, #65805 — @OutThisLife, @teknium1, @ethernet8023)

🖥️ CLI, TUI & Dashboard

! shell mode; /init AGENTS.md generation; /diff (staged/all/session, cross-surface); /context breakdown; /focus reduced-output view; Ctrl+S prompt stash; persistent /goal indicator; multi-select clarify (checkboxes) across CLI/gateway/TUI (#72257, #72178, #72240, #72242, #72302, #72262, #72244, #72188 — @teknium1, salvaging @SHL0MS, @iRonin, @gigi206 + more)
hermes import-agent — one-command migration from Claude Code / Codex CLI setups (#72190 — @teknium1)
Per-turn summary line + live token flow in the spinner; cross-surface theme SDK (one skin themes CLI, TUI, and desktop, live) (#72246, #68857 — @teknium1, @OutThisLife)
TUI: reach the model picker without wrecking your draft + mid-turn switching; slash menu leads with your most-used skills; attachments live in the composer; Arabic (ar) locale with RTL across desktop/dashboard/agent (#74756, #75931, #75210, #70870 — @OutThisLife)
hermes -w startup ~14s → ~1.8s; global --version fast path; banner update-check 6× faster; dashboard lazy-loads routes + GROUP BY session stats; session filtering tabs (Chats/Automation/All) (#71637, #62096, #74188, #72294, #73362, #73865 — @teknium1, @kshitijk4poor)
Runtime: Node 26 required across installers/heal/upgrade, managed Node/uv resolve before bare PATH, outdated managed trees heal to target major; brew + pip/PyPI wheel channels retired (shell installer / Docker / Nix are the supported channels) (#76459, #68217 — @ethernet8023)

🧩 Skills, Plugins & MCP

A2A v1.0 — Agent-to-Agent protocol plugin (closes #514) (#77109 — @teknium1)
Curator: surface unmanaged skills + curator adopt; skill-description truncation surfaced to authors; grounded-citations skill (+ fact-checking mode); simplify-code v1.1; tldraw-offline scripting skill (#71648, #70519, #71698, #77104, #70440, #66896 — @teknium1)
Office skills bundled: docx, xlsx, pdf + refreshed powerpoint; skills-tree debloat continues (yuanbao, segment-anything, jupyter, heartmula, audiocraft → optional-skills; claude-marketplace source removed; hub restructure absorbing themes/desktop-plugins/tui-widgets) (#68595, #70452–#70456, #73903 — @teknium1)
MCP: Comfy Cloud catalog entry with curated 20-tool default; hidden-whitespace warnings in MCP config; pinecone-research optional skill (#66112, #75736, #70512 — @teknium1)
MCP lazy server startup from a fingerprint-keyed on-disk tool-schema cache — configured servers no longer all boot at session start (design from #56832) (#77511 — @kshitijk4poor)
NeMo Relay observability integration — re-landed after an in-window revert, on stable NeMo Relay 0.6 (#67607 — @afourniernv)
Gateway health & diagnostics OTLP export (#64536 — @victor-kyriazakos)

🔒 Security & Reliability

Iron-proxy credential-injection egress firewall re-landed (#70848 — @teknium1)
DNS-pinned SSRF-safe fetches + Slack CDN allowlist; strict redaction at compaction boundaries; ReDoS eliminated in config-key redaction patterns; prose words embedding a secret keyword no longer masked (#70193, #69294, #76083, #67776 — @teknium1)
Tier-3 credential reads scoped (FAL/XAI/VERCEL/DAYTONA/GITHUB presence checks etc.); CVE dependency pins refreshed (cryptography, starlette, python-multipart); hindsight env file 0600; /model moved off the gateway event loop (#75888, #72362 — @teknium1)
Windows hardening wave: text-mode subprocess decode bug class closed repo-wide, console flashes hidden across daemons/env probes/LSP/installer paths, residual encoding gaps (MCP stdio, gateway update I/O, STT/TTS, desktop spawn) (#70875, #70205, #70264, #71014 — @teknium1, salvaging several community PRs)
State/session integrity: four session-state fixes (safe close tracking, flush-cursor class fix, row-retry, usage-PK healer); compact v23 FTS layout + hermes sessions optimize + CJK-bigram FTS; read-path split with per-thread read-only connections (#75883, #65798, #69423, #73344 — @teknium1, @kshitijk4poor)
OpenViking memory-provider hardening — fail closed on blocked endpoints, server verification before credentials are sent, config.yaml-first settings (#77747 — @kshitijk4poor)
Credential pool: reset-aware primary restore (stay on fallback until the rate-limit window resets) + deferred-refresh locking fixes; FTS UPDATE triggers narrowed with fail-closed CJK migration (#77631, #77628 — @kshitijk4poor)
Config-driven memory allocator trim with telemetry; holographic memory vectors stored float32; loop-invariant HRR encodes hoisted (#76905, #76917, #76881 — @kshitijk4poor)

🐛 Notable Bug Fixes

Voice: full-duplex interruption during generation AND playback; whole-turn desktop speech; auto-TTS delivery gaps (#74223, #69936, #73508 — @teknium1)
Desktop: Stop parks the queue instead of firing the next queued prompt; branch-in-new-chat restart loss; false remote-gateway reauthentication; cross-session composer leaks (#68725, #71960, #68250, #70986 — @SHL0MS, @alelpoan, @helix4u, @OutThisLife)
Gateway: session lists scoped before limiting; relay-backed home delivery after restart; timeline display events persisted (#65509, #70102, #69771 — @GodsBoy, @victor-kyriazakos, @ethernet8023)
Agent: context-length fallback logging + batch trajectory durability; Codex OAuth context windows revalidated against the live catalog (#76027, #68554 — @kshitijk4poor, @teknium1)
...plus roughly 770 more fix: PRs across every subsystem this window.

👥 Contributors

647 contributors shipped this release (commit authors, co-authors, and salvaged-PR credits).

Core

@teknium1, @OutThisLife (desktop, voice, perf), @kshitijk4poor (perf, caching, salvage), @ethernet8023 (runtime, E2E, desktop), @benbarclay (relay, HSP, auth)

All Contributors (alphabetical)

@02356abc, @0301chris, @0xAlcibiades, @0xDevNinja, @0xLeathery, @0xprincess, @0xr00tf3rr3t, @100yenadmin, @2001Y, @3ssiri, @55nx954gn6-debug, @686f6c61, @87degrees, @aaronlab, @abundantbeing, @Adolanium, @adriansotomora, @adurham, @afourniernv, @afurm, @AgenticSpark, @ahmadashfq, @AhmetArif0, @ai-ag2026, @AIalliAI, @aider4ryder, @airclear, @ajzrva-sys, @akattelu, @AKAZIK-py, @akb4q, @akshan-main, @AlanBurningsuit, @alelpoan, @AlexFucuson9, @AlexxRussell, @AllardQuek, @alt-glitch, @aman-merchant, @amanning3390, @amathxbt, @aml1973, @amoreno16003, @AndrewMoryakov, @andrexibiza, @andynguyendk, @andyylin, @aneym, @angelos, @aniruddhaadak80, @AnnasMazhar, @annguyenNous, @anoopmehendale-cue, @AnthonyFrancis, @arcabotai, @ArcherQAQ, @Ares4Tech, @arimu1, @arnoldfrancisca, @asimons81, @asorry75, @AtakanGs, @ATran28, @austinpickett, @Automata-intelligentsia, @awain7, @aweiker, @aydnOktay, @ayushere, @b, @baau, @baauzi, @baenregod, @bakhtiersizhaev, @Baophan00, @baoyu0, @Bartok9, @basilalshukaili, @BB-light, @bbopen, @Beandon13, @beardedeagle, @bedirhancode, @benbarclay, @benegessarit, @benjamin2026-dot, @bennybuoy, @BenSheridanEdwards, @BKStock, @BlackishGreen33, @bnikanjam, @bounce12340, @Bounty13, @bpross, @briandevans, @bricelb, @brunopirz, @bryanneva, @byshubham, @camaleonidas, @canorionen, @carbongotfound, @carljborg, @carlotestor, @carrion256, @caseyanthony, @cat-thats-fat, @Cdddo, @ceverson70, @chancelu, @chaos-xxl, @CharlesMcquade, @chazmaniandinkle, @chefboyrdave21, @chelsealong, @Christopher-Schulze, @chuenchen309, @ciabata-git, @cifangyiquan, @cipry0200, @ckaznocha, @ckorhonen, @CleanDev-Fix, @CocaKova, @coffee-the-dev, @colingreig, @Commander, @connorblack, @CoreyNoDream, @Cossackx, @crayfish-ai, @criptogus, @ctaylor86, @cucurigoo, @cypres0099, @d31tcjg, @Da7-Tech, @damiankluk, @danielblankhh, @DanielMaly, @Dannou, @davesecops, @davidgut1982, @DavidMetcalfe, @davidrobertson, @ddifa86, @ddy4633, @deacon-botdoctor, @deaneeth, @deepjia, @deltaahead, @DESXIE, @devsart95, @dhruvkej9, @dhruvraajeev, @DI404N, @diegomarino, @diffen77, @dirtyren, @dnth, @DocAwk, @dolphin-creator, @Dolverin, @dombejar, @doncazper, @dongjiang1989, @DonutsDelivery, @dorukardahan, @Doud-FR, @drafish, @Drexuxux, @drleadflow, @dsitmilis, @dskwe, @dso2ng, @dstkwll, @Dusk1e, @dyreckt, @eagle-nyp, @Eapwrk, @eason2026, @eazye19, @egilewski, @ehz0ah, @elcocoel, @eliemada, @eloklam, @elphamale, @embwl0x, @emozilla, @Enough1122, @enzo2, @erick713006, @ErnestHysa, @Esther-Zhu023, @ethernet8023, @evgyur, @f-trycua, @faikwo, @falkoro, @fangliquanflq, @fazerluga-creator, @fcavalcantirj, @ferminquant, @fesalfayed, @FixItFoundry, @flag0x369, @floatingrain, @FlorianVal, @flyingdoubleG, @FraserHum, @frizikk, @frohsinnllc, @Frowtek, @FvanW, @fyzanshaik, @ganzziani, @gercamjr, @giggling-ginger, @gigi206, @giladbau, @glesperance, @gnanam1990, @GodsBoy, @golldyck, @gonzalofrancoceballos, @gshall, @gumclaw, @Guoen0, @Gurud25, @gvago, @HaisamAbbas, @hansai-art, @hanyu1212, @happy5318, @haran2001, @hariNEzuMI928, @harjothkhara, @harrisonmedmedmetrics, @Harshkamdar67, @hdd69, @heathley, @helix4u, @HeLLGURD, @hellofrommorgan, @hereicq, @hermz580, @HexLab98, @hinablue, @HOYALIM, @hrnbld, @huntsyea, @iamwongeeeee, @ianks, @ibaldr89, @Icather, @ijevin, @ildunari, @Imgaojp, @imgyf, @immuhammadfurqan, @iniak, @iRonin, @isheng-eqi, @iso2kx, @israellot, @itsflownium, @IvanMiao, @iveywest, @izumi0uu, @Jaaneek, @JabberELF, @jackjin1997, @jakelongvu-bot, @Janig88, @jasoisjaso, @jbbottoms, @jeeaay, @jeeves-assistant, @jeff-mettel, @JeffStone69, @JeliTron, @jethac, @jfmusa2024-cyber, @Jiahui-Gu, @jinglun010-cpu, @JoaoMarcos44, @joelbrilliant, @John-Lussier, @johnkattenhorn, @Johnny-xuan, @johnnykor82, @joncaldwell90, @JonthanaHanh, @jordanhubbard, @JorkeyLiu, @jquesnelle, @jrfbch, @juanmartitegui, @Julientalbot, @juniperbevensee, @justemu, @kael-odin, @kaishi00, @kaiyisg, @kamonspecial, @kandotrun, @KCAYAAI, @keepConcentration, @kelsia14, @Kenmege, @kerpopule, @Kev-fs, @Kewe63, @kharitonov-ivan, @Kingdomwarrior23, @kingrubic, @Kinkoolino-Hermes, @kjames2001, @knoal, @kohoj, @Kolektori, @konsisumer, @koshaji, @kronexoi, @kshitijk4poor, @kuangmi-bit, @kudi88, @kylezh, @kyssta-exe, @Kyzcreig, @lanyusea, @LauraGPT, @LavyaTandel, @LeonSGP43, @leoprodz, @LevSky22, @lEWFkRAD, @lewis4x4, @lexgenius, @LFDMcore, @LiangYang666, @lidises, @light-merlin-dark, @lihengming, @Linux2010, @LionGateOS, @liuhao1024, @liusencomic-cyber, @ljsdut, @lkevincc0, @LLQWQ, @locker95, @logical-and, @LordNikon1983, @lost9999, @Love-JourneY, @LunarNexus, @luxiaolu4827, @lxman, @m4r13y, @MaartenDMT, @MacroAnarchy, @maff-t2b, @MahdiHedhli, @mahdiwafy, @malaiwah, @mannnrachman, @mapu-og, @markoub, @matarbot, @materemias, @matt-strawbridge, @mattezell, @MattMaximo, @mattmillerai, @mattshapsss, @MaxFreedomPollard, @maxmilian, @McHermes, @mehmetkr-31, @menhguin, @metamon-p, @mijanx, @MLcogTech, @moeadham, @mollusk, @monerostar, @MorAlekss, @morolab, @motoblurr, @MrAbsaroka, @mrzlab630, @ms-alan, @muctobi, @MustafaK99, @mwbrooks, @myk0la-b, @mzkarami, @namredips, @nanami7777777, @nanckh, @natebransc, @nateEc, @navahc09, @Ne0teric, @necoweb3, @nftpoetrist, @nickkarhan, @Ninso112, @nkreadly07, @nnnet, @NPFernando, @nrmjeremy, @nu476, @null-runner, @nullptr0807, @NYTEMODEONLY, @obelisk-complex, @OfficialDelta, @okalentiev, @oliviaaaa7788, @OmarB97, @omid3098, @ooiuuii, @oppenheimor, @oreoluwa, @ousiaresearch, @OutThisLife, @panDing19, @paralegalia, @patp, @PavelTajdus, @peacockesq, @Pebrd, @peterw, @phantom-instruction-set, @pierrenode, @PINKIIILQWQ, @piyushbag, @plainOldCode, @pnascimento9596, @pooyan6, @pprism13, @praneshnikhar, @PRATHAMESH75, @Prontsevich, @quantumbyte1617, @QuarkAssistant, @Que0x, @Qwinty, @rayjerrywoo, @rayjun, @Reaper-Forge, @RedClaus, @redsol-llc, @reinbeumer, @RelaxJonh, @RemyFevry, @replygirl, @rerdi92, @rhylryan21, @RichardHojunJang, @richkapp, @rkfshakti, @rlaope, @rob-coco, @rob-maron, @robbyczgw-cla, @robgfl45, @robzolkos, @rod-nxtlevel, @rodboev, @Roger--Han, @rsayar, @rudironsoni, @ruizanthony, @rungmc357, @s00rz, @s905060, @Sahil-SS9, @sakhnenkoff, @salimhamed, @samrusani, @sbe27, @ScaleLeanChris, @schattenan, @sealca, @seamusmore, @sebaorrego-koronet, @seppegadeyne, @sergioperezcheco, @sethmills21, @sg-shag, @sgtworkman, @shady2k, @shannonsands, @shellybotmoyer, @sherman-yang, @shivasymbl, @Shizoqua, @SHL0MS, @simonmmafs, @skyer-flyyy, @Skywind5487, @sl4m3, @Slopez2023, @SmallNew2003, @smfworks, @Soju06, @Solitud1nem, @solyanviktor-star, @somewheresy, @Sora-bluesky, @sowork-skills, @soynchux, @sparkeros, @spfcraze, @spiky02plateau, @spro-work, @SquabbyZ, @srojk34, @StanleyStetson, @StartupBros-com, @StellarisW, @stephenschoettler, @Stoltemberg, @stremtec, @Studio729, @stwith, @subhoya, @sunwz1115, @suparious, @supplefrog, @sycamoregroupltd, @szzhoujiarui, @tachyon-r, @Tamaz-sujashvili, @tandixit95, @tank321, @tavva, @tcconnally, @temalo, @th3wingman, @the3asic, @TheAngryPit, @TheEpTic, @theone139344, @TheSmokeDev, @thirstycrow, @tianma-if, @Tianworld, @tinetwork, @to-na, @tom-channel, @tomqiaozc, @toomij99, @trac3r00, @Tranquil-Flow, @Trantor-develops, @trevorgordon981, @trevornk, @trippyogi, @trymhaak, @tsuk1nose, @tusharui, @TutkuEroglu, @tw0316, @twe-cloud, @tymrtn, @UltraInstinct0x, @umi008, @unixwzrd, @upicat, @vaibhavjnf, @valda, @Vansh5632, @Variable85, @vb3, @VerbalChainsaw, @vexclawx31, @victor-kyriazakos, @vigilancetech-com, @virtuadex, @Vissirexa, @VittoriaLanzo, @VIVAAN-DHAWAN, @wangyunyou, @waroffchange, @wayne1992127, @web3blind, @webtecnica, @WeiYusc, @wen0531, @wernerhp, @wesleysimplicio, @westkite1201, @wgd753, @wgu9, @wjj1872744570-source, @wjq990112, @WojtekMR3, @WOLIKIMCHENG, @Wpnx330, @wreed4, @wuli666, @WXBR, @wz-heng, @x7peeps, @xcompass, @xd-Neji, @xenodmc, @Xipong, @xrazai, @Xue-1997, @xxxigm, @y0shua1ee, @yaleman, @yemi-lagosinternationalmarket, @ygd58, @yingliang-zhang, @yinkev, @yitang, @YLChen-007, @yoniebans, @youzi-1122, @ypwcharles, @yuexiongHNU, @yungchentang, @yuzilongleif-collab, @yyzquwu, @z23, @ZachariahChu, @zakhounet, @zapabob, @Zavianx, @zehuaw1, @zengzheqing, @Zeraphim, @zgzczzw, @zhangyang-crazy-one, @Zhekinmaksim, @Zioywishing, @zmlgit, @zombopanda, @ZundamonnoVRChatkaisetu Also: @kyssta-exe 25470058+kyssta-exe.

Thank you to every one of the 647 people who contributed code, co-authored fixes, filed the ~1,200 issues this release closes, and had their PRs salvaged into main. Hermes ships this fast because of you.

Full Changelog: v2026.7.20...v2026.8.3

v2026.7.30 [Jul 30, 2026] (2mo ago) details → github →

# Hermes Agent v0.19.1 (v2026.7.30)

Hermes Agent v0.19.1 (v2026.7.30)

Release Date: July 30, 2026

> Patch release. This tag rolls up the ~1,000+ PRs merged since v0.19.0 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs).

About this release

Since v2026.7.20 (v0.19.0, July 20): ~2,789 commits · ~4,748 files changed · ~442,000 insertions · ~392,300 deletions on main. This window is dominated by bug-fix and salvage waves across the gateway, voice subsystem, desktop app, and installer, plus continued platform work (Buzz/Nostr channel, FLUX3 video generation and delivery, Telegram media reliability, voice-mode regressions).

Full curated release notes for this window will ship with v0.20.0, which will document everything from v0.19.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

hermes update
or fresh install:
curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash

Full Changelog: v2026.7.20...v2026.7.30

v2026.7.20 BREAKING [Jul 20, 2026] (3mo ago) details → github →

# Hermes Agent v0.19.0 (2026.7.20) — The Quicksilver Release

Hermes Agent v0.19.0 (v2026.7.20)

Release Date: July 20, 2026 Since v0.18.0: ~2,245 commits · ~1,065 merged PRs · ~2,465 files changed · ~300,000 insertions · ~36,000 deletions · ~3,300 issues closed · 450+ community contributors

> The Quicksilver Release. Hermes is the messenger god, and this window we made him move like it. First-turn time-to-first-token dropped ~80% on every platform, reasoning streams live by default, the desktop app got a ~20-PR speed overhaul (14× faster streaming markdown, virtualized diffs, snappy session switching), and the TUI renders markdown incrementally. Around that speed spine: you can now manage your Nous subscription without leaving the terminal, plug Bitwarden and 1Password straight into Hermes, let smart approvals judge flagged commands for you by default, watch your subagents work live, and trust that a finished response survives a gateway crash thanks to a durable delivery ledger. This release also rolls up everything from the v0.18.1 and v0.18.2 infrastructure patch tags — those windows are fully documented here.

✨ Highlights

Hermes got dramatically faster — first token in a fraction of the time — Cold-start "Initializing agent..." used to eat ~4.3 seconds before your first turn even reached the model; it's now ~0.9s, an ~80% cut that applies to the CLI, gateway, TUI, desktop, and cron alike. Round 2 attacked what you see while waiting: reasoning models now stream their thinking live by default (no more staring at a spinner for 30 seconds), and the response box paints per token instead of per line. If Hermes ever felt like it took a deep breath before answering, that breath is gone. (#59332, #59389 — @teknium1)

The desktop app speed wave — 20+ targeted perf PRs — Long replies used to cost 14× more CPU in the markdown splitter than they do now; giant diffs froze the review pane until we virtualized it; switching sessions thrashes layout no more. Streaming no longer re-renders the sidebar and every tool row per token, profile backends pre-warm on hover intent, and boot-hidden panes mount at idle instead of on the cold-start critical path. The net effect: the desktop app feels like a native app under load, even with huge transcripts and busy agents. (#67154, #67818, #65898, #66033, #66747, #67742 and more — @OutThisLife)

Manage your Nous plan from the terminal — /subscription and /topup — Changing your subscription used to mean a trip to the billing website. Now /subscription opens a full flow right in the TUI or classic CLI: see your plan and remaining allowance, preview exactly what an upgrade costs ("Pay $46.30 & upgrade now") or when a downgrade takes effect, and apply it — with scheduled-change banners and undo. The desktop app got a matching billing settings tab. Your wallet never has to leave the keyboard. (#51639, #61054, #61067 — @alt-glitch)

Smart approvals are now the default — When Hermes wants to run a flagged command, an LLM reviewer now assesses it independently instead of asking you to approve every single one — and each verdict covers only that exact command, so a later command matching the same pattern gets its own review. Combined with the new user-defined deny rules (which block commands even under yolo mode) and /deny <reason> (which tells the agent why you refused so it course-corrects), day-to-day approval fatigue drops sharply without giving up control. (#62661, #59164, #54518 — @teknium1)

Plug your password manager into Hermes — Bitwarden & 1Password secret sources — API keys no longer have to live in a plaintext .env. A new pluggable SecretSource interface lets Hermes fetch secrets from Bitwarden and 1Password (op:// references) at load time, with multiple vaults enabled simultaneously, deterministic precedence, conflict warnings, and per-variable provenance. This consolidated eleven competing community PRs into one orchestrated interface — future vault providers drop in as plugins. (#59498 — @teknium1, 1Password provider salvaged from @hwrdprkns)

Watch your subagents work — live transcripts + durable background delegation — delegate_task dispatches now return live transcript files you can tail -f the moment the subagents launch: every tool call, result, and streamed reply, one human-readable log per child. And background delegation completions are now durable — if the process restarts mid-run, results are restored and delivered through an ownership-checked ledger instead of vanishing. Fan out a fleet, watch any worker live, and never lose the results. (#67479, #63494 — @teknium1)

A finished answer can no longer be lost — the delivery-obligation ledger — If the gateway died between generating your response and confirming the platform actually delivered it, that answer used to be silently gone (and you'd paid for the turn). Final responses are now recorded in a durable ledger in state.db around the platform send and redelivered on the next boot — closing a P1 silent-loss window for Telegram, Discord, Slack, and every other channel. (#67181 — @teknium1)

One gateway, many profiles — profile-based message routing — A single multiplexed gateway sharing one bot token can now route specific guilds, channels, or threads to different profiles — each with fully isolated config, skills, memory, and secrets. Point your work Discord server at the work profile and your hobby server at personal, from one bot. A second multiplex hardening wave means one misconfigured profile can no longer take down the whole gateway. (#64835 salvaging @Burgunthy, #65700, #60589 — @teknium1, @benbarclay + six salvaged contributors)

New providers and the newest frontier models — Fireworks AI and DeepInfra land as first-class providers (Fireworks with cost estimation and a #2 slot in the provider picker), Upstage Solar joins via salvage, and the model catalogs picked up GPT-5.6 (Sol/Terra/Luna + Pro variants, wired end-to-end across every route), grok-4.5 (GA), moonshotai/kimi-k3, claude-fable-5 / claude-sonnet-5, and GA tencent/hy3 — plus LM Studio JIT model loading for local setups. (#62593, #63969, #61616 — @kshitijk4poor completing @rob-maron's #61578, #60887, #65913, #64541, #65472)

Crank the thinking to max — new reasoning effort tiers and per-model control — Reasoning effort gained max and ultra levels (GPT-5.6 and Codex's top tiers), selectable everywhere from the CLI to the desktop, with sane clamping on providers with smaller scales. You can now also pin per-model reasoning-effort overrides in config, set per-slot effort in MoA presets (your advisors think hard, your synthesizer stays fast), and per-task effort for auxiliary models. Thinking depth is now a dial, not a global switch. (#62650, #64458, #64631, #64597 — @teknium1)

Your sessions, your data — export everything — hermes sessions export now writes Markdown, Quarto, HTML, prompt-only, and even Hugging Face-ready trace formats, with the full filter surface (age, workspace, platform), an opt-in --redact secret-scrubbing pass, and compacted-session lineage stitched into one logical export. Pair with the new prune filters and bulk archive to keep your session store tidy. Your conversation history is a real dataset now, not a black box. (#60186 salvaging @web3blind, #60492, #60507, #59327 — @teknium1)

Security hardening round — This window closed a long list of credential-surface gaps: Vertex credentials scoped away from subprocess env and through profile secret scopes, media/vision/image-gen local-file reads routed through one shared credential-read guard, a webhook body-size-cap sweep across every aiohttp server, bot-token redaction in Telegram transport errors, Fireworks token prefixes added to the redactor, six P1 browser/MEDIA/.env hardening PRs salvaged in one pass, and CI hardened against untrusted-ref interpolation. (#57660, #58709, #59215, #56582, #57842 — @teknium1, @srojk34, @kshitijk4poor, @jquesnelle)

⚡ Performance — the speed spine

First-turn latency (all platforms)

~80% TTFT cut — Discord capability detection off the critical path (token-keyed 24h disk cache + background refresh), Ollama probe skipped for known non-Ollama providers, agent-init blocking work removed; cold submit→dispatch ~4.3s → ~0.9s (#59332 — @teknium1)
Perceived-latency round 2 — display.show_reasoning default ON (watch the model think instead of a spinner), per-token response-box painting with width-aware force-flush, prompt-build caching, mtime-cached timezone resolution (#59389 — @teknium1)
Segment mixed tool batches to recover lost concurrency; drop per-call base64 re-serialization from request-size estimates (#64460, #67788 — @teknium1, @OutThisLife)

Desktop speed wave

14× less splitter CPU via incremental block lexing for streaming markdown; virtualized review-pane diffs (no more full-Shiki freeze); snappy session switching on large transcripts; killed the layout-thrash cascade on session switch (#67154, #67818, #65898, #66033 — @OutThisLife)
Cut startup serialization + per-turn REST amplification; pre-warm profile backends and gateway sockets on hover intent; idle-mount boot-hidden panes; fast model picker + dialogs (#66747, #66347, #67857, #66470 — @OutThisLife)
Stop per-token sidebar + tool-row re-renders during streaming; stop eager JSON.stringify of every tool's args/result; scope tool-diff subscriptions; batch sidebar session slices into one profile-DB pass; targeted file-tree revalidation; rAF-coalesced sash resizes (#67742, #67842, #67195, #67245, #67824, #67838, #67844 — @OutThisLife)
Systematized perf benchmark harness with trustworthy cold-start + first-token measurement, replacing 12 one-off scripts (#67466, #67697 — @OutThisLife)

Everywhere else

TUI renders streamed markdown incrementally per block (#67236 — @OutThisLife)
Skill discovery cached by scan signature; snapshot manifest builds ~5× faster; text prefilter before AST parse in tool discovery (#61414, #61131, #63941 — @kshitijk4poor, @ethernet8023)
Copy-on-write message prep instead of full deepcopy; model-metadata probe-cache cluster; gateway session.resume model + display history from one SELECT (#61133, #61368, #67247 — @kshitijk4poor, @OutThisLife)
hermes update skips npm install when Node manifests are unchanged; dashboard session-list payloads trimmed + messages paginated (#61580, #60883 — @kshitijk4poor)
Byte-stable gateway system prompts — pinned session-context render keeps the prompt cache alive across turns (#67403 — @kshitijk4poor)

🏗️ Core Agent & Architecture

Providers & models

Fireworks AI provider with cost estimation + cached picker price columns, promoted to #2 in provider pickers (#62593, #65476, #65214 — @teknium1)
DeepInfra hardened integration; Upstage Solar provider (#42231 salvage) (#63969, #64541 — @kshitijk4poor)
GPT-5.6 (Sol/Terra/Luna + Pro) end-to-end — context lengths, native/Codex catalogs, pricing, compaction caps across every route (#61616 — @kshitijk4poor, building on @rob-maron)
grok-4.5 (GA) catalog + reasoning allowlist; kimi-k3 on Nous Portal + OpenRouter (kimi-k2.x retired) + K3 discovery on the Kimi Coding endpoint; claude-fable-5 / claude-sonnet-5 / fugu-ultra curated; GA tencent/hy3 (#60887, #65913, #65922, #56617, #60943 — @teknium1)
Catalog-labeled silent default (GLM-5.2) + bare-provider /model cost-safe routing; LM Studio JIT load mode; adaptive thinking for Kimi-family Anthropic endpoints (#64771, #65472, #67606 — @teknium1, @kshitijk4poor)
GLM-5.2 native reasoning_effort controls; Gemini request-context improvements; extra HTTP headers for LLM API calls; per-client model routing on the API server (#58884, #61873 — @vishal-dharm, #57038, #57028 — @teknium1)
Claude Sonnet 5 fully wired — curated lists, intro pricing, and metadata across every route (#67932 — @teknium1)
Hide providers you don't use — enabled: false per-provider flag + excluded_providers config scrub unwanted providers from /model pickers and built-in resolution (#67971 — @teknium1)
Bedrock catalog wave: real context-window probing from the live endpoint, 1M-context rows for current-gen Claude + Fable, geo-prefix parity, versioned profile-ID pricing, Opus 4.8/4.7 rows (#68007, #67977, #68005, #67976 — @teknium1)
kimi-k3 rollout completed across Kimi-direct catalog surfaces with 1M context on canonical Kimi Coding endpoints (#68108 — @teknium1)
Provider pickers: Qwen providers folded into one group row; collapsible provider groups in the desktop model picker; friendlier TUI model display grouping same-endpoint providers (#67758, #67904, #67908 — @teknium1)

Reasoning & MoA

max + ultra effort levels across every surface and route (#62650 — @teknium1)
Per-model reasoning_effort overrides via a unified resolution chokepoint; per-task auxiliary effort; per-slot MoA preset effort; session-scoped /reasoning in the CLI (#64458, #64597, #64631, #67946 — @teknium1)
MoA: referencemaxtokens to cap advisor output and cut latency; per-preset fanout cadence (user_turn runs advisors once per user turn); stale presets surfaced without retries; half-filled preset saves rejected at the API boundary; aggregator resolves reasoning like an acting model (#56756, #57591, #64756 — @teknium1)

Delegation, approvals & the agent loop

Live subagent transcripts + durable background completions (see Highlights) (#67479, #63494 — @teknium1)
Smart approvals default; user-defined deny rules (block even under yolo); /deny <reason> relays the denial reason; plugin pretoolcall approve action escalates to a human gate (re-landed with rule keys) (#62661, #59164, #54518, #60504 — @teknium1, @kshitijk4poor)
Unified delegation concurrency caps (maxasyncchildren deprecated); explain long provider waits on the live status line; deterministic tool-output risk exposure (#56955, #64775, #61793 — @teknium1)
Codex: live TUI/desktop tool cards for the app-server runtime, commentary streamed as visible interim messages, compaction routed through thread/compact/start, max-output truncation recovery, oversized message ids dropped on replay, banked usage-limit resets via /usage reset (#66514, #66115, #60114, #58155, #62225 — @teknium1, @kshitijk4poor, @JoaoMarcos44, #64280 — @teknium1)
Hooks: oversized hook-injected context spills to disk (#20468 — @teknium1)
Vibe reactions — floating hearts on affection across CLI/TUI/desktop, token-free core detection (#62016 — @OutThisLife)

Secrets & config

Pluggable SecretSource interface + Bitwarden & 1Password providers (see Highlights) (#59498 — @teknium1, @hwrdprkns)
hermes config get / unset; warn on unknown root config keys + doctor deprecated-key reporting; display.timestamp_format (#65540, #67370, #40622 — @teknium1)
Auxiliary model usage recorded per task in session accounting; conversation-scoped Nous Portal usage tags across aux/MoA/delegate calls; --usage-file JSON report for hermes -z (#65537, #65468, #59615 — @teknium1)

Sessions & compression

Sessions export: Markdown/QMD/HTML/prompt-only/trace formats, HF upload, --redact, unified filters; full prune filter surface + bulk archive; CLI workspace filter + restore-cwd-on-resume (#60186, #60492, #60507, #59327, #63091 — @teknium1, @web3blind)
Compression: preserve human intent and durable handoffs; retain prompt cache when memory is unchanged; flatten multimodal content for the summarizer keeping image handles; gateway compression routing integrity (#67275, #67916, #65046, #56868 — @kshitijk4poor, @teknium1)
Gateway session metadata consolidated into state.db; routing index moved to state.db (sessions.json now an optional legacy mirror); exact API bytes persisted in an api_content sidecar (#58899, #59203, #67274 — @teknium1, @kshitijk4poor)

🌐 Gateway, Fleet & Relay

Durable delivery-obligation ledger for final responses (see Highlights) (#67181 — @teknium1)
Profile-based routing for inbound messages + multiplex hardening wave 2 + GATEWAYMULTIPLEXPROFILES override (see Highlights) (#64835, #65700, #60589 — @teknium1, @benbarclay + salvaged contributors)
Per-session turn lease + conversation-scope funnel; unified session reset boundaries (reset sessions stay reset); truthful runtime readiness checks; per-channel model and system prompt overrides; per-session /model overrides persist across restarts (#67401, #65783, #62645, #56967, #57030 — @teknium1)
Session auto-reset default off; /sessions search <query>; webhook payload filters + route scripts; platform HTTP event callback routing; configurable long-running status phrases (#60194, #57685, #60944, #65702, #58872 — @teknium1)
Relay: generic OIDC client-credentials provisioning (NAS-free), routed profile carried from the connector wire source, channel context consumed from the connector; Nous auth forensics + noussessionvalid on /api/status for hosted self-heal; Docker re-seeds a terminally-dead Nous bootstrap session on boot (#60730, #60586, #64649, #59976, #59969, #59983 — @benbarclay)

📱 Messaging Platforms

Inline choice pickers for /reasoning and /fast on Telegram, Discord, and Matrix — one-tap native buttons instead of typing (#65799 — @teknium1)
WhatsApp: native Baileys polls (clarify renders as a poll), locations, rich inbound metadata; dashboard pairing flow (#58865, #60571 — @teknium1)
Discord: recover messages missed during reconnect; auto-created threads renamed to generated session titles; configurable interactive view timeout; opt-in owner mentions on exec-approval prompts; optional admin-only gate for approval buttons (#66149, #60187, #60230, #60493, #51751 — @teknium1)
Slack: live per-tool status line (#67080 — @teknium1, salvaging #62007)
Telegram: per-topic free-response allowlist; Google Chat clarify prompts rendered as cards (#65543, #65546 — @teknium1)
Voice: stt.echotranscripts toggle; MEDIA: captions attached to the media bubble on standalone sends; display.toolprogress: log option (#58859, #61415, #57014 — @teknium1, @kshitijk4poor)

🖥️ Hermes Desktop App

Contribution-driven shell on a layout-tree model — panes, zones, and layouts as data; plugin-scoped i18n locale bundles followed (#60638, #67303 — @OutThisLife)
Capabilities page — Skills/Tools/MCP + Hub in one place, with responsive overlay nav; CLI/dashboard parity for skills hub, MCP test/toggle/catalog, maintenance ops, log filters; five UX fixes from live testing (#57590, #57441, #67482 — @OutThisLife, @teknium1)
Hermes Cloud connection mode (salvage of #55402); soft gateway switch + gateway-settings polish; terminal execution backend picker with health probes (#61912, #61916, #67203 — @OutThisLife, @teknium1)
Keybind hint tooltips + keybinds settings tab + unified worktree dialog; base-branch picker for new worktrees; green unread dot for background-finished sessions; background-task sidebar indicators; grouped tool calls across text-less messages; auto-scrolling window for long tool-call runs (#65204, #62243, #65109, #65174, #61147, #57913 — @ethernet8023, @OutThisLife)
Session + project color system (inherit from project, per-session override, shared across sidebar/tabs); unified active-project identity in chat status; workspace path status action (#67469, #67681, #67282, #63086 — @OutThisLife)
Declarative memory-provider panel + full-config modal; config-defined TTS/STT providers + xAI TTS params; custom endpoint settings; per-job cron model picker; profile-aware approval mode control; UI scale setting; Ctrl/Cmd+wheel zoom; chat backdrop toggle; /journey opens the memory graph overlay (#67206 salvaging @erosika, #67209, #67759 — @austinpickett, #67472, #63520, #60457, #67029, #64598, #57267 — @teknium1, @OutThisLife)
Full TypeScript conversion of the desktop tree (#57855 — @ethernet8023)

📊 Web Dashboard

Memory provider switching; safe session import flow; WhatsApp pairing; Discord-specific toolsets editable from the web UI; clarified manual Telegram bot setup (#60569, #63699, #60571, #65361, #64636 — @teknium1, @kshitijk4poor, @shannonsands)
Terminal keep-alive + reattach for dashboard chat sessions; heavy turns isolated in a compute host; paste/drop images into Chat; browser.headed schema toggle; profile + gateway topology on /api/status; mobile/hosted OpenAI OAuth login (#60515, #65895, #61929, #67046, #60537, #61330 — @teknium1, @OutThisLife, @benbarclay)
hermes serve is a true headless backend (no web UI build/mount) (#55923 — @OutThisLife)

🧰 CLI & TUI

/subscription + /topup terminal billing (see Highlights) (#51639 — @alt-glitch)
/model --once — one-turn model override that reverts automatically (#67113 — @teknium1, salvaging #29923)
Stacked slash-skill invocations — /skill-a /skill-b do XYZ loads both skills in order (Claude Code port), with autocomplete + ghost text (#57987, #58763 — @teknium1)
--safe-mode troubleshooting flag; uninstall dry-run; TLS failures fail fast with fix hints; /compact alias + preview flags; pip/Homebrew installs warned unsupported (#45300, #60111, #57992, #57029, #57225 — @teknium1, @ethernet8023)
TUI: model picker refresh support; custom skill bundles dispatched as agent turns; banner sizes skills display to terminal width (#59782 — @helix4u, #62859 — @Adolanium, #40624 — @teknium1)
Hermes Console REPL + perf follow-ups; hermes curator usage all-skills view; entry-point plugins surfaced in hermes plugins list (#57781 — @kshitijk4poor, #36727, #40623 — @teknium1)

🔧 Tool System, Skills & MCP

MCP: mcpservertool naming convention; server log notifications surfaced in agent.log; hosted OAuth completed across Dashboard + Desktop; configurable redirecturi/redirecthost for proxied/WAF setups; OAuth callback port races closed; Blender added to the MCP catalog with a curated 4-tool default (#52750, #57416, #66151, #65610, #65622, #64463 — @teknium1, @benbarclay)
Skills: security/unbroker (autonomous data-broker removal) + blind opt-out hardening; unreal-mcp companion skill; blender-mcp reworked around the catalog entry; humanizer pattern expansion; mcp-oauth-remote-gateway optional skill (#57438, #57902, #65989, #64715 — @SHL0MS, #65066, #65486 — @teknium1)
Browser: full snapshots stored on truncation, eval denylist opt-in; computer_use follows cua-driver's verify→escalate ladder (#65923, #67123 — @teknium1)
Kanban: modal create-task dialog + editable board project directory; Done-card results made obvious; grab-to-pan board scrolling; attachment toolset + CLI with SSRF-guarded URL fetch; project directory captured at board creation (#66333, #63638, #60226, #65698, #63249 — @teknium1)
Cron: durable execution audit history; one-shot stale-removal race fixed; run-claim TTL derived from HERMESCRONTIMEOUT (#61791 — @teknium1, #62014 — @PRATHAMESH75, #59567)
mem0: self-hosted dashboard backend + recall tuning + setup-wizard mode (#56943, #60494 — @kshitijk4poor, @teknium1)
Image gen: Codex image inputs; unsupported Codex image accounts classified; tool args recursively normalized by schema (cline port) (#57017, #63627, #52220 — @teknium1, @kshitijk4poor)

🔒 Security & Reliability

Vertex: credential/project/region resolution through the profile secret scope; VERTEXCREDENTIALSPATH/GOOGLEAPPLICATIONCREDENTIALS stripped from subprocess env (#56680, #56582 — @srojk34)
Six P1 hardening PRs salvaged in one pass — browser guards, MEDIA anchoring, .env lockdown, delegate ACP transport (#57660 — @teknium1)
Media/vision/image-gen local-file reads routed through the shared credential-read guard; native image routing guarded by file-safety policy; unified image-source resolver + terminal-backend confinement (#58709, #58752, #57890 — @teknium1)
Webhook body-cap sweep: explicit clientmaxsize on 3 uncapped aiohttp servers + completion sweep; Raft chunked-request body limit; timestamp-bound V2 webhook signatures (#59180, #59215, #58902, #58508 — @teknium1, @srojk34)
Redaction: Fireworks token prefixes + Telegram transport errors; env-lookup false positives fixed for KEY=value and JSON/YAML config fields; bot tokens scrubbed from Telegram connect/send errors (#58501, #58534, #58915, #58893 — @teknium1)
computer-use: subprocess env sanitized across all five cua-driver spawn sites (#58889, #59165 — @teknium1)
Dashboard: managed-files credential guard widened past .env + dir-tree gap closed; OAuth token TOCTOU closed with atomic 0o600 writes; stale dashboards can't recreate deleted profiles (#58222 — @kshitijk4poor, #60236 — @teknium1, #49435 — @LeonSGP43)
CI: untrusted refs passed through env, not run: interpolation; JS/TS tests wired into CI with source-regex tests banned; js-autofix pushes via PR instead of direct-to-main (#57842 — @jquesnelle, #60707, #65186 — @ethernet8023)
Docker: terminal network toggle with full-path coverage; Git Bash Mandatory-ASLR install failures detected; Windows updater console hidden during handoff (#59149 — @teknium1, #64651, #66040 — @helix4u)
Anthropic: request-local clients so the stale/interrupt watchdog never corrupts SQLite; per-profile OAuth file; OAuth login 429 fixed (UA must not be claude-code/) (#67238 — @OutThisLife, #59339, #58178 — @teknium1)
Gateway/agent: toolcallid deduplicated across pre-API sanitizers; background review inherits parent reasoning_config for Anthropic cache parity; /new memory extraction moved off the command path (#58350, #64379, #61139 — @teknium1, @kshitijk4poor)

🔁 Reverted in this window (for the record)

iron-proxy credential-injection egress firewall (#30179 → reverted in #58489) — not shipping in this release
dynamic-workflow orchestration skill (landed, then reverted) — not shipping
memory provider-actions extension point (landed, then reverted) — not shipping
Note: the plugin pretoolcall approve escalation was reverted mid-window but re-landed in #60504 and ships in this release.

👥 Contributors

450+ people contributed to this release (via commits, co-author trailers, and salvaged PRs) — the biggest contributor window yet. Thank you, all of you.

Core team

@teknium1 — release lead; TTFT perf wave, delivery + delegation durability, smart approvals, SecretSource, gateway multiplex + profile routing, sessions export, security round, and a ~290-PR community salvage burn
@OutThisLife — desktop app (the speed wave, layout-tree shell, Capabilities page, session colors, vibe reactions, TUI incremental markdown, perf harness)
@kshitijk4poor — GPT-5.6 end-to-end, DeepInfra + Upstage Solar providers, perf cluster, compression integrity, mem0, dashboard guards
@ethernet8023 — CI overhaul (JS/TS tests wired in, autofix-via-PR, python speedups), desktop keybinds/worktrees/status indicators, full desktop TypeScript conversion
@benbarclay — relay OIDC provisioning, gateway multiplex override, Nous auth self-heal, hosted MCP OAuth groundwork
@alt-glitch — terminal billing (/subscription, /topup), desktop billing tab
@helix4u — desktop provider/model UX, TUI model picker refresh, Windows install/updater hardening
@austinpickett — desktop custom endpoint settings
@SHL0MS — unbroker + unreal-mcp skills, humanizer expansion

Top community contributors

@srojk34 — security hardening: Vertex credential/project/region scoping through the profile secret scope, subprocess env stripping, Raft chunked-request body limits
@HexLab98 — 11 fixes across MCP capability gating, Windows installer PATH, desktop cron editing, gateway systemd warnings
@UnathiCodex — desktop stability: zoom across display moves, LaTeX rendering, resume-stall and runtime-readiness fixes
@xxxigm — <think> leak fix after thinking-only retry flush, dashboard auth/theme/PTY fixes
@erosika — desktop declarative memory-provider panel + honcho recall/timeout correctness
@Frowtek — credential security: master stores never mounted into skill sandboxes, live-transcript redaction, dashboard api_key precedence
@necoweb3 — browser private-page CDP guard, cron one-shot liveness, gateway compression fail-closed
@DavidMetcalfe — desktop updater version pill, Local/custom endpoint exposure, sidebar collapse behavior
@shannonsands — dashboard: mobile channel setup, Discord toolsets from web UI, Telegram setup clarity
@vishal-dharm — Gemini request-context improvements
@PRATHAMESH75 — cron one-shot stale-removal race, dashboard multiplex port-binding guard
@alelpoan, @embwl0x, @Adolanium, @giggling-ginger, @Drexuxux, @frizikk, @JoaoMarcos44, @wesleysimplici, @LeonSGP43, @pierrenode, @simpolism, @MorAlekss, @r266-tech, @WadydX, @nv-kasikritc — targeted fixes across desktop, TUI, gateway, cron, webhook, nix, and browser surfaces
Salvaged-work authors whose PRs were cherry-picked with credit this window: @Burgunthy (profile routing), @web3blind (sessions export), @hwrdprkns (1Password), @Christopher-Schulze, @Ahmett101, @sjiangtao2024, and many more — see the salvage PR bodies for full attribution

All contributors

@0-CYBERDYNE-SYSTEMS-0, @0disoft, @0xbyt4, @100yenadmin, @17324393074, @2751738943, @8294, @abhibansal-sg,
@adambiggs, @Adolanium, @aeyeopsdev, @aguung, @AhmetArif0, @Ahmett101, @ai-ag2026, @AIalliAI, @ajzrva-sys,
@alastraz, @alelpoan, @alex-fireworks, @alex-heritier, @alex107ivanov, @AlexFucuson9, @Alix-007,
@allenliang2022, @Almurat123, @AlsayedHoota, @alt-glitch, @alvarosanchez, @amanning3390, @AmAzing129,
@AndreasHiltner, @andrewhomeyer, @annguyenNous, @ansel-f, @antydizajn, @arminanton, @arnispiekus, @asimons81,
@asscan, @ats3v, @austinlaw076, @austinpickett, @avifenesh, @aydnOktay, @Bartok9, @bautrey, @bbednarski9,
@bbopen, @benbarclay, @bigstar0920, @binhnt92, @bird, @Black0Fox0, @BlackishGreen33, @bo.fu, @brendandebeasi,
@briandevans, @BROCCOLO1D, @Bruce-anle, @brunz-me, @Burgunthy, @bytesnail, @catbearlove1-lang, @Cdddo,
@cgarwood82, @CharmingGroot, @chouqin, @Christopher-Schulze, @claudlos, @CocaKova, @Code-suphub, @CodeForgeNet,
@craigdfrench, @CrazyBoyM, @crazywriter1, @cresslank, @cruzanstx, @cyrkstudios, @danilofalcao,
@datachainsystems, @DatTheMaster, @davidb73-hub, @davidgut1982, @DavidMetcalfe, @davidrobertson,
@deacon-botdoctor, @DECK6, @deepujain, @derek2000139, @designnotdrum, @deusyu, @devatnull, @devorun,
@dexhunter, @dfein38347g, @Dhravya, @DictatorBacon, @digitalbase, @dlkakbs, @dmabry, @DNAlec, @dodo-reach,
@doncazper, @dorokuma, @doxe0x, @Drexuxux, @dschnurbusch, @Dusk1e, @EdderTalmor, @egilewski, @elashera,
@Elektrofussel, @eliteworkstation94-ai, @embwl0x, @emo-eth, @emozilla, @enzo-adami, @Epoxidex, @ErnestHysa,
@Erosika, @esthonjr, @ethernet8023, @evefromwayback, @evelynburger, @F4TB0Yz, @falkoro, @fanyangCS, @firefly,
@fjlaowan1983, @flewe, @flo1t, @flow-digital-ny, @floze-the-genius, @frizikk, @Frowtek, @FuryMartin,
@fyzanshaik, @gauravsaxena1997, @geoffreybutler94, @georgedrury, @gigakun3030, @giggling-ginger,
@Git-on-my-level, @gitcommit90, @githubespresso407, @gnodet, @GottZ, @Gridzilla, @grimmjoww578, @gumclaw,
@Gutslabs, @HaiderSultanArc, @harjothkhara, @heathley, @hejuntt1014, @helix4u, @HeLLGURD, @hellno,
@herbalizer404, @HexLab98, @hmirin, @Hopfensaft, @Hotragn, @hsy5571616, @huanshan5195, @HumphreySun98,
@hwrdprkns, @hydracoco7, @hydraxman, @iamlukethedev, @iborazzi, @IgorGanapolsky, @iizotov, @ildunari,
@infinitycrew39, @IpastorSan, @irresi, @isfttr, @isheng-eqi, @itsflownium, @izumi0uu, @Jaaneek, @JacketPants,
@jaisup, @jakelongvu-bot, @jakepresent, @jaketracey, @JAlmanzarMint, @JasonFang1993, @jbbottoms, @jcjc81,
@JiaDe-Wu, @Jiahui-Gu, @Jigoooo, @jingsong-liu, @jneeee, @JoaoMarcos44, @joelbrilliant, @John-Lussier, @jplew,
@jtstothard, @juniperbevensee, @Jupiter363, @justinschille, @k4z4n0v4, @kaishi00, @karfly, @kartik-mem0,
@kavioavio, @KCAYAAI, @kenyonxu, @keslerm, @kevinrajaram, @knoal, @kocaemre, @kohoj, @konsisumer, @krowd3v,
@kshitijk4poor, @kuangmi-bit, @kubolko, @kyssta-exe, @Kyzcreig, @l0h1nth, @labsobsidian, @laurinaitis,
@LavyaTandel, @lawyer112, @lemonwan, @LeonSGP43, @lEWFkRAD, @linfeng961, @liuhao1024, @liuwei666888, @ljy-2000,
@loes5050, @logical-and, @LoicHmh, @loongfay, @lord-dubious, @lost9999, @lucasfdale, @lucaskvasirr,
@luxuguang-leo, @ly-wang19, @m0n5t3r, @m1qaweb, @M1racleShih, @MaartenDMT, @mahdiwafy, @MaheshBhushan,
@ManniBr, @marcelohildebrand, @marcolivierlavoie, @markoub, @MarkVLK, @Marxb85, @matantsevs,
@maxpetrusenkoagent, @mbac, @mdc2122, @mguttmann, @Mibayy, @michaelHMK, @mijanx, @minchang, @momomojo,
@MorAlekss, @morluto, @msh01, @mssteuer, @mvanhorn, @nanami7777777, @nankingjing, @necoweb3, @neo-claw-bot,
@neoguyverx, @nicha16, @nikshepsvn, @nima20002000, @nnnet, @NousResearch, @nullptr0807, @nv-kasikritc,
@okisdev, @OmarB97, @ooiuuii, @ooovenenoso, @oppih, @Osraka, @ostravajih, @otsune, @OutThisLife, @OYLFLMH,
@patrick-muller, @pdmartins, @pedrommaiaa, @Peterskaronis, @petrichor-op, @pgregg88, @pierrenode, @pixel4039,
@plcunha, @pnascimento9596, @Polyhistor, @PRATHAMESH75, @professorpalmer, @Punyko8, @Que0x, @Qwinty,
@r0gersm1th, @r266-tech, @rabadaki, @ragingbulld, @RainbowAndSun, @rainbowgore, @randimt, @rarf, @rasitakyol,
@rayjun, @raymondyan-zhijie, @re-ITRT, @RenoMG, @Rival, @RKelln, @rlaehddus302, @rob-maron, @rodboev,
@roryford, @rungmc357, @ruslanvasylev, @s0xn1ck, @s905060, @s96919, @sahibzada-allahyar, @sahil-shubham,
@Sahil-SS9, @SahilRakhaiya05, @sam7894604, @SAMBAS123, @samrusani, @sanidhyasin, @sasquatch9818, @sberan,
@ScotterMonk, @seagpt, @sebastianlutycz, @SemonCat, @setclock, @shannonsands, @sharziki, @shashwatgokhe,
@SHL0MS, @shuangxinniao, @SilentKnight87, @simplast, @simpolism, @SiteupAgencia, @sjiangtao2024, @sk-holmes,
@slow4cyl, @smtony, @soddy022, @Soju06, @solyanviktor-star, @SongotenU, @spiky02plateau, @sprmn24, @SquabbyZ,
@srojk34, @ssiweifnag, @stantheman0128, @StellarisW, @stephenschoettler, @suninrain086, @superposition,
@Supersynergy, @sweetcornna, @szafranski, @tanmayxchoudhary, @tarunravi, @tcconnally, @terry197913, @Thatgfsj,
@thegoodguysla, @thestudionorth, @TheTom, @TinkerOfThings, @tjboudreaux, @tjp2021, @Tortugasaur, @Tosko4,
@Tranquil-Flow, @trevorgordon981, @trismegistus-wanderer, @tt-a1i, @tuancookiez-hub, @TurgutKural, @Umi4Life,
@UnathiCodex, @unsupportedpastels, @uzaylisak, @valda, @vampyren, @veradim, @victor-kyriazakos, @virtualex-itv,
@vishal-dharm, @Vissirexa, @vizi0uz, @vkkong, @vKongv, @VolodymyrBg, @vortexopenclaw, @VrtxOmega, @WadydX,
@waroffchange, @waseemshahwan, @web3blind, @webtecnica, @wesleion, @wesleysimplicio, @williamumu,
@WilsonKinyua, @wxy-nlp, @wyuebei-cloud, @x7peeps, @x9x9x9x9x9x91, @xuezhaolan, @xxxigm, @ya-nsh, @yatesjalex,
@ygd58, @yingliang-zhang, @yinkev, @YLChen-007, @yu-xin-c, @yungchentang, @zapabob, @zccyman, @zeapsu,
@ziliangpeng, @zwcf5200, @zzpigpinggai

Also: bo.fu, Paulo Henrique, kyssta-exe 25470058+kyssta-exe.fu, Paulo Henrique, kyssta-exe 25470058+kyssta-exe.

Full Changelog: v2026.7.1...v2026.7.20

v2026.7.7.2 [Jul 8, 2026] (3mo ago) details → github →

# Hermes Agent v0.18.2 (2026.7.7.2)

Hermes Agent v0.18.2 (v2026.7.7.2)

Release Date: July 7, 2026

> Same-day patch on top of v0.18.1, picking up the WhatsApp Baileys dependency fix needed for tagged-release Docker builds.

What's in this patch

fix(whatsapp): unpin Baileys from git commit, use published 7.0.0-rc13 (#60643) — the WhatsApp bridge dependency now installs from the published npm release instead of a pinned git commit, making installs and Docker image builds reliable.

Full curated release notes for the entire post-v0.18.0 window ship with v0.19.0.

Updating

hermes update        # existing installs
pip install -U hermes-agent

Full Changelog: v2026.7.7...v2026.7.7.2

v2026.7.7 [Jul 8, 2026] (3mo ago) details → github →

# Hermes Agent v0.18.1 (2026.7.7)

Hermes Agent v0.18.1 (v2026.7.7)

Release Date: July 7, 2026

> Patch release. This tag rolls up the ~660 PRs merged since v0.18.0 (July 1) — bug fixes, hardening, and in-progress feature work — into a stable tagged release for downstream consumers (Docker images, hosted deployments, PyPI installs).

About this release

This is an infrastructure-driven patch tag rather than a fully curated release. Since v0.18.0 shipped six days ago, main has accumulated roughly 667 commits across ~990 files (+89.5k/−10.4k lines), including installer/updater self-healing on Windows, dashboard and gateway fixes, WhatsApp dashboard pairing, MCP and provider fixes, and a large volume of stability work.

Full curated release notes for this window will ship with v0.19.0, which will document everything from v0.18.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped; it's documented in the next minor release.

Updating

hermes update        # existing installs
pip install -U hermes-agent

Full Changelog: v2026.7.1...v2026.7.7

v2026.7.1 [Jul 1, 2026] (3mo ago) details → github →

# Hermes Agent v0.18.0 (2026.7.1) — The Judgment Release

Hermes Agent v0.18.0 (v2026.7.1)

Release Date: July 1, 2026 Since v0.17.0: ~1,720 commits · 998 merged PRs · 2,215 files changed · ~251,000 insertions · ~41,000 deletions · 949 issues closed · 370+ community contributors

> The Judgment Release. Over the last week and a half the team put nearly all of its effort into one goal: resolve every P0 and P1 issue and PR in the entire Hermes Agent repo — and as of this release, 100% of them are closed. Zero open P0s. Zero open P1s. That's ~700 highest-priority items cleared as part of ~1,950 total issues and PRs closed this window. We intend to keep P0/P1 at zero from here on.
>
> On top of that clean-sweep, v0.18.0 is about how well Hermes thinks and how it knows when its work is actually done. Mixture-of-Agents became a first-class citizen — named ensembles of models you can pick like any other model, with every reference model's reasoning shown to you and the aggregator's answer streamed live. The agent learned to verify its own work against evidence instead of vibes, /goal gained completion contracts, and /learn + /journey turned self-improvement into something you can see and steer. Underneath, the gateway became genuinely deployable-at-scale (scale-to-zero, drain coordination), the desktop grew first-class coding projects and a playable memory graph, and subagents can now fan out in the background.

🎯 The P0/P1 Clean Sweep — 100% resolved

This is the release headline. For a week and a half the team hammered the priority backlog day and night, and every single P0 and P1 across the whole repo is now closed:

| Priority | Issues closed | PRs merged |
|---|---|---|
| P0 (critical) | 3 | 8 |
| P1 (high) | 493 | 188 |
| Total | 496 | 196 |

That's ~692 highest-priority items resolved in twelve days — and at the moment the sweep completed, the open P0/P1 count hit 0 across the entire repo. The final cluster to fall was the interrupt-protected-compression sibling-fork bug (issue #56391) and its fix (#56416), closed on an all-nighter right before this release cut.

Special shoutout to @kshitijk4poor, who burned through the priority backlog day and night alongside the core team — the cron reliability wave, the compression-fork fix, the credential-exfil hardening, and a huge share of the P1 closures are his.

We're keeping P0/P1 at 0 from here forward. 🫡

✨ Highlights

Mixture-of-Agents is now a first-class model you can pick — MoA used to be a mode you toggled; now every named MoA preset shows up as a selectable model under a moa provider, right alongside Claude, GPT, and Grok in every model picker (CLI, TUI, desktop, gateway). Pick "my-council" the same way you'd pick any model, and Hermes routes your prompt through that ensemble automatically. An ensemble of frontier models deliberating on your hardest questions is now one selection away, on every surface. (#46081, #53548, #53561 — @teknium1)

See every model's reasoning, then watch the answer stream in — When a MoA ensemble runs, each reference model's full output now renders as its own labelled block — you can read what GPT-5 thought, what Claude thought, and what Grok thought, before the aggregator synthesizes them into one answer. And that final answer now streams to you live instead of appearing all at once after a long silence. This works in the CLI, the TUI, and the desktop app. You get to watch the committee deliberate, not just read the verdict. (#53793, #53855, #55625, #56101 — @teknium1)

The agent verifies its own work — "done" means proven, not claimed — Hermes now records verification evidence for coding work and can decide it's finished by actually running your project's checks, not by asserting success. /goal gained completion contracts: you state what "done" looks like, and the standing-goal loop judges completion against that evidence instead of stopping when the model feels like it. There's a pre_verify hook for wiring in custom checks and a one-time migration that tunes the defaults sensibly. The difference between "I think I fixed it" and "the tests pass, here's proof." (#50501, #52285, #55413, #53552 — @teknium1, @OutThisLife)

/learn — turn anything into a reusable skill by describing it — Run /learn <anything> and Hermes distills a reusable skill out of whatever you point it at — a directory, a URL, or just the workflow you walked it through five minutes ago. It writes the skill to the standards in your CONTRIBUTING.md automatically. The next time you need that workflow, it's already there. Teaching Hermes a new trick is now a single command, not a manual skill-authoring session. (#51506, #52372 — @teknium1)

/journey — a playable timeline of everything Hermes has learned about you — The CLI and TUI gained /journey, a learning timeline that shows the memories and skills Hermes has accumulated over time — and you can edit or delete any of them right from the view. Pair it with the desktop's new memory graph (a top-down, playable radial timeline of memories and skills) and for the first time you can actually see what your agent knows, watch it grow, and prune what's wrong. Your agent's memory stops being a black box. (#55555, #55859, #55226 — @OutThisLife)

Delegate a pile of work and keep going — background fan-out — delegate_task can now fan out multiple subagents that all run in the background: your chat is never blocked, and when every subagent finishes, their results come back as a single consolidated turn. Kick off "research these five competitors in parallel" or "audit these three modules," then carry on with something else while a small fleet works. When it's all done, you get one clean summary instead of babysitting each one. (#49734 — @teknium1)

First-class coding Projects in the desktop app — The desktop app gained real, per-profile Projects — a sidebar of your codebases, a coding rail, a review pane, git worktree management, and agent-facing project tools, all backed by a proper project → repo → lane model. Instead of scattered chat sessions, your coding work is organized into projects the agent understands and can act on. It's the desktop turning into an actual coding cockpit. (#49037, #54385, #54517 — @OutThisLife)

Run Hermes at scale — scale-to-zero and drain coordination — The gateway can now go dormant when idle and quiesce cleanly before a restart, migration, or auto-update — without dropping in-flight conversations. A hosted or relay-only Hermes can scale to zero when nobody's talking to it and wake back up on demand, and disruptive lifecycle actions coordinate an external drain so nobody gets cut off mid-turn. Running Hermes for a team or as a hosted service just got a lot more production-grade. (#52243, #52937, #54824 — @teknium1, @benbarclay)

Cheaper self-improvement — smarter background review — The post-turn self-improvement fork (the one that decides whether to save a memory or skill) now routes to an auxiliary model, digests context instead of replaying the whole conversation, and adapts its cadence — so the "learn from what just happened" loop that runs after your turns costs a fraction of what it used to. You keep the self-improvement, you stop paying full main-model price for it. (#49252 — @teknium1)

Compose your next prompt in your editor — /prompt — /prompt opens your $EDITOR so you can hand-write a long, multi-line prompt in real markdown instead of fighting a one-line input box. Draft a detailed spec, a structured question, or a big paste, save, and it's queued as your next message. Small thing, huge quality-of-life win for anyone who writes Hermes more than a sentence at a time. (#50509 — @teknium1)

Google Vertex AI — Gemini through your GCP service account, no static key — Vertex AI is now a first-class provider for Gemini models over Vertex's OpenAI-compatible endpoint. The reason a plain custom-provider setup always died mid-session is that Vertex has no static API key — every request needs a short-lived OAuth2 access token (~1h TTL) minted from a service-account JSON or Application Default Credentials. Hermes now mints and auto-refreshes those tokens for you, so if your org runs Gemini through Google Cloud, you point Hermes at your service account and it just works — no token-pasting, no mid-session expiry. (#56363 — @teknium1, @slawt)

Security round — This window hardened several surfaces: MCP-config persistence attack surface locked down, cron base_url overrides that could exfiltrate provider credentials blocked, a non-reusable sentinel for prefix secrets in file reads, Slack app-level (xapp-) token redaction, a browser cloud-metadata floor enforced on every backend, and an aiohttp CVE floor across the lazy messaging paths. Fewer ways for a prompt-injected or misconfigured session to leak a credential. (#50476, #56196, #54166, #56227, #52349, #56237 — @teknium1, @kshitijk4poor, @claudlos)

🧠 Mixture-of-Agents (MoA)

MoA graduated from a mode to a first-class part of the model system this window.

Presets as selectable virtual models — each named MoA preset appears as a model under provider moa; pick it in any model picker and Hermes routes through the ensemble (#46081, #53561, #53775 — @teknium1)
/moa is now one-shot sugar — runs a single prompt through the default preset and restores your model afterward; persistent switching goes through the model picker (#53548 — @teknium1)
Reference-model output shown as labelled blocks in CLI, TUI, and desktop — read each model's reasoning before the aggregator's synthesis (#53793, #53855 — @teknium1)
Aggregator response streams live instead of appearing whole after a silence (#55625 — @teknium1)
References see full tool state and fire on every user/tool response; advisory references end on a user turn and get a reference-role system prompt (#54016, #54007 — @teknium1)
Opt-in full-turn trace persistence to JSONL (moa.save_traces) for debugging and eval (#56101 — @teknium1)
Reliability: reference + aggregator models called through their provider's real route; context window resolved from the aggregator (not the 256K default); auxiliary tasks resolve to the aggregator; virtual provider blocked as a reference/aggregator slot; tolerant of hand-edited preset config (#53580, #53780, #53827, #53281, #53275, #53556 — @teknium1)
MoA slot provider-identity unified on the single call_llm chokepoint; HermesBench results documented (#55991, #53206 — @teknium1)

✅ Verification & Goals — the agent proves its work

Completion contracts for /goal — state what "done" looks like; the standing-goal loop judges against evidence, not the model's say-so (#50501 — @teknium1)
/goal wait <pid> — park the standing-goal loop on a background process instead of re-poking the agent (#50503 — @teknium1)
Coding verification evidence ledger — profile-scoped record of canonical project checks detected by agent.coding_context; gateway exposes verification status (#52285, #52286 — @OutThisLife)
pre_verify hook + coding guidance config; verification stop loop + ad-hoc verification scripts (#55413, #52296, #52297 — @OutThisLife)
verify-on-stop defaults OFF with a one-time v32 migration; skips doc-only edits; surface-aware "auto" default restored; gated off for messaging surfaces (#53552, #54740, #55449, #52412 — @teknium1, @OutThisLife, @GodsBoy)

🎓 Self-Improvement (Learn / Journey)

/learn <anything> — distill a reusable skill from a directory, URL, or a workflow you just walked through; honors CONTRIBUTING.md skill standards and mixed requirements (#51506, #52372, #55956 — @teknium1)
/journey — CLI + TUI learning timeline of accumulated memories and skills, with in-place edit/delete (#55555, #55859 — @OutThisLife)
Cheaper background review — aux-model routing + context digest + adaptive cadence for the post-turn self-improvement fork (#49252 — @teknium1)
memory graph in the desktop — playable radial timeline of memories + skills over time (#55226 — @OutThisLife)

🖥️ Hermes Desktop App

Coding cockpit

First-class Projects — per-profile sidebar, coding rail, review pane, agent project tools (project → repo → lane); remote-gateway-aware folder picker + git cockpit (status, review, worktrees) (#49037, #54385 — @OutThisLife)
Multi-terminal panel with read-only agent terminals; persist & restore terminal tabs + scrollback across relaunch (#54517, #54585 — @OutThisLife)
PR-style file diffs in chat; in-app spot editor for the file preview pane; inline rich embeds, diagrams & alerts in assistant markdown (#50731, #52772, #52935 — @OutThisLife)

UX & surfaces

Conversation timeline rail for long threads; context-usage breakdown popover; read-only spectator transcript for subagent watch windows; pop the composer into a draggable floating window (#51094, #54907, #55033, #49488 — @OutThisLife, @austinpickett)
Read replies aloud (auto-TTS) composer toggle; remember window size/position/maximized across launches; redesigned clarify prompt; shared overlay Panel primitive for cron/profiles/agents (#55154, #52086, #52993, #54558 — @OutThisLife)
Backup import/create/download from the web UI; add context-usage popover; flag already-installed themes in install pickers; config-driven Electron launch flags + GPU policy (#54611, #55410, #53991 — @teknium1, @OutThisLife)
Pets — roaming pet (opt-in), calmer/realistic roam, Alt+wheel scaling never cropped, frame-perfect hatch flow + CPU-safe chroma, pop-out overlay + notifications (#55114, #55400, #52877, #47959, #52303 — @OutThisLife)

Refactor wave (composer / god-file de-entangle)

Decomposed the composer into isolated engine hooks; extracted branch/esc/url/placeholder/popout engines; split thread.tsx, sidebar/index.tsx, onboarding overlay, and use-prompt-actions god files into focused modules; shared WebSocket layer decoupling desktop from dashboard (hermes serve) (#55500, #55842, #55451, #55453, #55807, #55504, #54568 — @OutThisLife)
perf: bound tool-result rendering so big /learn runs don't freeze; fast session switching under load (#52273, #52620 — @OutThisLife)

📊 Web Dashboard

Auto-initiate portal SSO redirect on unauthenticated load; interactive auth setup on no-provider non-loopback bind; confidential-client (client_secret) support in self-hosted OIDC (#54846, #50551, #55344 — @teknium1, @benbarclay)
Catalogue all memory-provider API keys in OPTIONALENVVARS; list & add arbitrary custom .env keys on the Keys page; expose cron job execution fields; backup import/create/download (#54546, #54552, #53551, #54611 — @benbarclay, @teknium1)
Offload PTY spawn/close off the event loop; exclude non-interactive providers from interactive login surfaces (#53227, #53239 — @IAvecilla)

🏗️ Core Agent & Architecture

Delegation & subagents

Background fan-out — parallel subagents run in the background, one consolidated return when all finish; calm "will resume" affordance for background delegate_task (#49734, #52756 — @teknium1, @OutThisLife)
Track background subagents in the CLI + TUI status bar (#51441, #51485 — @teknium1)

Agent loop, tools & coding context

One-shot LLM helper + llm.oneshot gateway RPC; expose coding-context project facts (project.facts RPC) (#51261, #51259 — @OutThisLife)
web_extract truncate-and-store instead of LLM summarization; concurrent @-reference expansion (#54843, #55207 — @teknium1, @kshitijk4poor)
Friendly human-phrased tool labels for built-in tools; /reasoning full (uncapped thinking); /timestamps + timestamps in /history; /prompt composes in $EDITOR (#55166, #50499, #50506, #50509 — @teknium1)
Per-reasoning-model stale-timeout floor in stream + non-stream detectors; escalate SIGTERM→SIGKILL on host-pid termination after grace (#52845, #50489 — @teknium1)
Multiple HERMESWRITESAFEROOT dirs; opt-in HTTP/WS body capture to an isolated, share-excluded guibodies.log (#53292, #49044 — @kshitijk4poor)

Compression & sessions

In-place compaction option (single session id); flip in_place default to True with a guard fix (#49739, #52658 — @teknium1)
Backup includes projects.db and kanban boards in the pre-update snapshot (#52990 — @kshitijk4poor)

Providers & models

Google Vertex AI first-class provider for Gemini over the OpenAI-compatible endpoint — auto-mints and refreshes short-lived OAuth2 tokens from a service-account JSON / ADC (no static key); salvages & modernizes #8427 by @slawt (#56363 — @teknium1, @slawt)
Krea via managed Nous Subscription gateway; Z.AI endpoint picker (Global/China/Coding Plan); Ollama-cloud reasoning_effort wiring; remove google-gemini-cli + google-antigravity OAuth providers (#52647, #52364, #51494, #50492 — @teknium1, @kshitijk4poor)
Honor NOUSINFERENCEBASE_URL env override for Nous OAuth; keep Nous auth fresh for idle dashboard/gateway agents (#52270, #50567 — @benbarclay, @teknium1)

🌐 Gateway, Fleet & Relay

Scale-to-zero & drain

Scale-to-zero idle detection + dormant-quiesce (Phase 0); hardened dormancy guards; fixed arm-gate counting disabled placeholder platforms (#52243, #52359, #52831 — @teknium1, @benbarclay)
External drain coordination (safe-shutdown Phase 2); suppress home-channel shutdown broadcast on flagged drains; persist in-flight transcript on restart/shutdown drain timeout; busy/idle readout for safe lifecycle actions (#52937, #54824, #50312, #50131 — @teknium1, @benbarclay, @kshitijk4poor)
Default restartdraintimeout to 0 to kill a systemd crash loop; self-heal a gateway stranded in draining/degraded (#54066, #55397 — @teknium1)

Relay (Phase 5 / 6)

Wake primitive (gateway side); going-idle / buffered-flip primitive; passthrough_forward over WS; multi-platform-per-agent identity + per-frame egress; forward stable instance id at self-provision; declare relevance policy to the connector (#51595, #51572, #50702, #52830, #50772, #51248 — @benbarclay)
Authorize relay-delivered events by delivery, not source.platform; adopt scope_id wire key; purge platform-specific scope terminology (#52306, #55289, #56016 — @benbarclay)

Gateway core & rendering

Typed send-error classification (SendResult.errorkind); per-platform typingindicator toggle; per-category context breakdown in /usage (#50342, #55394, #55204 — @teknium1)
API server: configurable concurrent-run cap to prevent DoS; scope run approvals by run id (#50007, #56129 — @teknium1)

📱 Messaging Platforms

Cron continuations — continuable cron jobs (thread-preferred continuation with DM-mirror fallback); flat in-channel continuable cron delivery for Slack; warn when gateway not running on cron create/list (#52250, #56254, #51696 — @teknium1)
Telegram: configurable command menu + raised default cap so skills stay visible; gate rich draft previews separately; drain general send pool on pool timeout before retry (#51716, #52088, #54121 — @teknium1, @helix4u)
Slack: opt-in Block Kit rendering for agent messages; --no-assistant flag for manifest generation (#56102, #51487 — @teknium1)
Discord: render reasoning as -# subtext via display.reasoning_style (#51168 — @teknium1)
Native WhatsApp media delivery via the Baileys bridge; Teams native sendvideo/sendvoice/send_document; photon sidecar upgraded to spectrum-ts v8 with tapback correlation; Raft gateway setup wizard (#53598, #49308, #53451, #56230 — @teknium1)
Signal: AAC voice-note remux + shared markdown formatting (#49530 — @kshitijk4poor)
Migrate slack/dingtalk/whatsapp/matrix/feishu/telegram/wecom/email/sms adapters to bundled (#49408 — @teknium1)

🔧 Tool System, Skills & MCP

Blank Slate setup mode — minimal agent, opt in to everything (#36733 — @teknium1)
MCP: config persistence attack surface hardened; block base_url exfil; keepalive for short-TTL sessions (see Security) — plus catalog & UX carried from v0.17.0
Skills: /learn distillation (see Self-Improvement); cloudflare-temporary-deploy optional skill; creative-ideation v2.1.0 method library (#50849, #42402 — @teknium1, @SHL0MS)
Kanban: task lifecycle plugin hooks (claimed/completed/blocked); typed block reasons + unblock-loop breaker; handoff freshness stamping (#50349, #52848, #53973 — @teknium1)
Plugins: ctx.profile_name for session-agnostic profile access (#50346 — @teknium1)
LSP: PowerShellEditorServices language server; mem0 v3 API + OSS mode + update/delete tools (#55930, #15624 — @teknium1, @kartik-mem0)

⚡ Performance

Cold start: lazy-load gateway platform adapters; parse config + plugin manifests with libyaml CSafeLoader (#54448, #54486 — @teknium1)
State: merge FTS5 segments + handoffstate index to curb write-lock contention; single-pass listprofiles alias map + skill-count cache + event-loop offload (#54752, #54770 — @kshitijk4poor, @teknium1)

🔒 Security & Reliability

Harden MCP-config persistence attack surface; block cron base_url overrides that exfiltrate provider credentials; non-reusable sentinel for prefix secrets in file reads (#50476, #56196, #54166 — @teknium1, @kshitijk4poor)
Redact Slack App-Level (xapp-) tokens; browser cloud-metadata floor on all backends (CDP non-local); re-check private-network guard after browser_back navigation; scope /resume and /sessions to caller origin (IDOR); aiohttp 3.14.1 CVE floor across lazy messaging paths + pin-drift guard (#56227, #52349, #56526, #56378, #56237 — @teknium1, @claudlos, @kshitijk4poor)
Cron reliability wave: fail closed when an unpinned job's provider drifts; run missed-grace jobs once instead of deferring forever; keep the ticker alive on BaseException + heartbeat-aware status; layer enabled MCP servers onto per-job toolsets; guard cron model-tool path + auto-resume loop breaker (#51051, #50062, #50016, #50117, #56240 — @kshitijk4poor, @teknium1)
Windows: suppress console flashes + harden gateway restarts; prefer cmd npm shim on PATH fallback; respawn gateway windowless after GUI update; prefer managed node for whatsapp/desktop (#52340, #50398, #52239 — @helix4u, @teknium1)

🔁 Reverts (in-window, for the record)

cron job storage returned to per-profile (reverts #32117 + #50993); don't clone auth.json (duplicating OAuth grant causes sibling revocation); windows terminal-popup PRs rolled back; prompt_caching.enabled toggle backed out for re-evaluation (#51116, #51732, #53853, #56126 — @teknium1)

👥 Contributors

381 people contributed to this release (via commits, co-author trailers, and salvaged PRs). Thank you, all of you.

Core

@teknium1 — release lead; MoA first-class, verification/goals, /learn, background review, security round, providers, the P0/P1 clean-sweep
@OutThisLife — desktop app (projects, memory graph, /journey, multi-terminal, composer refactor wave, pets, verification UX)

Top community contributors

@kshitijk4poor — the P0/P1 backlog burn: cron reliability wave, state perf, security (cron credential-exfil), gateway/signal, TUI config — a huge share of the priority closures
@benbarclay — relay Phase 5/6, scale-to-zero / drain coordination, dashboard auth/keys, gateway hardening
@ethernet8023 — CI/docker (unified jobs, faster builds, timings report)
@helix4u — Windows hardening (console flashes, npm shim, gateway restarts)

All contributors

@0xbyt4, @0xDevNinja, @0xsir0000, @1RB, @595650661, @aaronlab, @abchiaravalle, @adammatski1972, @AetherAgents,
@Afnath-max, @agt-user, @ahmadashfq, @AhmetArif0, @AIalliAI, @aieng-abdullah, @ailang323, @ailthrim, @aj-nt,
@alelpoan, @alloevil, @amathxbt, @ambition0802, @anderskev, @andressommerhoff, @angelos, @annguyenNous,
@Antimatter543, @arminanton, @arthurzhang, @asimons81, @austinpickett, @baolingao, @Bartok9, @basilalshukaili,
@BBCrypto-web, @bbopen, @Beandon13, @beardthelion, @benbarclay, @benbenlijie, @binhnt92, @bitcryptic-gw,
@Blaryxoff, @bogerman1, @bradhallett, @brett539, @briandevans, @buihongduc132, @bykim0119, @catapreta,
@chaithanyak42, @charleneleong-ai, @CharlieKerfoot, @chazmaniandinkle, @chrispersico, @Christopher-Schulze,
@chriswesley4, @claudlos, @clovericbot, @cmcejas, @codexGW, @Cossackx, @counterposition, @coygeek, @CRWuTJ,
@cyb0rgk1tty, @cyb3rwr3n, @cypctlinux, @cypres0099, @dalenguyen, @Danamove, @DanAsBjorn, @DataAdvisory,
@davidgut1982, @DavidMetcalfe, @davidvv, @de1tydev, @denisqq, @devorun, @devsart95, @DhivinX, @DiamondEyesFox,
@difujia, @Disaster-Terminator, @djimit, @djstunami, @dodo-reach, @donovan-yohan, @Dr1985, @DrZM007, @Dusk1e,
@egilewski, @ehz0ah, @Eji4h, @EloquentBrush0x, @Elshayib, @emozilla, @entropy-0x, @Erosika, @EtherAura,
@etherman-os, @ethernet8023, @f-trycua, @fayenix, @fesalfayed, @firefly, @flamiinngo, @flobo3, @francescomucio,
@franksong2702, @friendshipisover, @fsaad1984, @fyzanshaik, @GauravPatil2515, @gdeyoung, @georgex8001,
@GodsBoy, @graphanov, @Gromykoss, @gustavosmendes, @Gutslabs, @H2KFORGIVEN, @haileymarshall, @hakanpak,
@happy5318, @haran2001, @harjothkhara, @heathley, @hehehe0803, @helix4u, @herbalizer404, @HexLab98,
@HiddenPuppy, @Hinotoi-agent, @HODLCLONE, @houko, @huangsen365, @huangxudong663-sys, @huangxun375-stack,
@HwangJohn, @iaji, @iamlukethedev, @IamSanchoPanza, @IAvecilla, @Icather, @iizotov, @indigokarasu,
@infinitycrew39, @ipriyaaanshu, @isair, @islam666, @itenev, @itsflownium, @izumi0uu, @Jaaneek, @JabberELF,
@jackjin1997, @jackroofan, @janrenz, @jasnoorgill, @jasonQin6, @jcjc81, @jearnest11, @jeeves-assistant,
@Jeffgithub0029, @jeffrobodie-glitch, @JezzaHehn, @jimmyjohansson84, @jmmaloney4, @jnibarger01, @JoaoMarcos44,
@jplew, @Junass1, @justemu, @justin-cyhuang, @JustinOhms, @jvradahellys24-art, @Kailigithub, @kaishi00,
@kangsoo-bit, @kartik-mem0, @keiravoss94, @kenyonxu, @kernel-t1, @Kewe63, @KeyArgo, @KiruyaMomochi, @kn8-codes,
@Kolektori, @konsisumer, @kshitijk4poor, @kyssta-exe, @Kyzcreig, @Lazymonter, @LehaoLin, @LeonSGP43, @lEWFkRAD,
@libre-7, @LIC99, @LifeJiggy, @linyubin, @liuhao1024, @lkevincc0, @lkz-de, @loes5050, @londo161, @lubosxyz,
@m24927605, @MaheshtheDev, @manus-use, @marco0158, @MarioYounger, @martinramos002-bot, @MattKotsenas,
@max-chen, @MaxFreedomPollard, @maxmilian, @maxpetrusenko, @memosr, @Mibayy, @Minksgo, @mintybasil, @mkslzk,
@mohamedorigami-jpg, @MorAlekss, @mrparker0980, @ms-alan, @namredips, @nankingjing, @natehale, @necoweb3,
@neo-2026, @Nickperillo, @nightq, @nikshepsvn, @nnnet, @nocturnum91, @nodejun, @NousResearch, @nycomar,
@OmarB97, @orbisai0security, @oreoluwa, @outsourc-e, @OutThisLife, @p-andhika, @panghuer023, @Paperclip,
@peetwan, @pefontana, @petrichor-op, @pinguarmy, @PINKIIILQWQ, @pmos69, @PolyphonyRequiem, @pprism13,
@PRATHAMESH75, @professorpalmer, @pyxl-dev, @Que0x, @qWaitCrypto, @r266-tech, @RafaelMiMi, @Railway9784,
@randomuser2026x, @rayjun, @rc-int, @rebel0789, @redactdeveloper, @riyas22, @rlaope, @rob-maron, @rodboev,
@rodrigoeqnit, @rratmansky, @rrevenanttt, @ruangraung, @Ruzzgar, @ryo-solo, @s010mn, @Sahil-SS9,
@SahilRakhaiya05, @SandroHub013, @Sanjays2402, @sasquatch9818, @ScotterMonk, @season179, @sgabel, @sgaofen,
@sgtworkman, @shandian64, @shannonsands, @shashwatgokhe, @shawchanshek, @sherman-yang, @SHL0MS, @SidUParis,
@SimoKiihamaki, @simpolism, @sjh9714, @skabartem, @skyc1e, @slawt, @soynchux, @spiky02plateau, @spjoes,
@sprmn24, @srojk34, @stepanov1975, @steveonjava, @Subway2023, @sweetcornna, @swissly, @Sworntech-dev,
@syahidfrd, @synapsesx, @szzhoujiarui-sketch, @talmax1124, @telos-oc, @testingbuddies24, @texhy, @tgmerritt,
@theAgenticBuilder, @thestral123, @tkwong, @Tortugasaur, @Tranquil-Flow, @trevorgordon981, @truenorth-lj,
@tt-a1i, @tuancookiez-hub, @TutkuEroglu, @tymrtn, @udatny, @UgwujaGeorge, @underthestars-zhy, @uperLu,
@uzunkuyruk, @valenteff, @valentt, @vanthinh6886, @Versun, @victor-kyriazakos, @virtuadex, @vKongv,
@w31rdm4ch1nZ, @weidzhou, @wgu9, @whoislikemiha, @wnuuee1, @woaini30050, @WuKongAI-CMU, @WuTianyi123, @WXBR,
@x7peeps, @x9x9x9x9x9x91, @Xowiek, @xxchan, @xxxigm, @xydigit-zt, @yapsrubricsz0, @yashiels, @yeyitech, @ygd58,
@YLChen-007, @yong2bba, @yoniebans, @ypwcharles, @yu-xin-c, @yungchentang, @yusekiotacode, @YuShu, @yyzquwu,
@zapabob, @zccyman, @zeapsu, @zmlgit, @znding04, @Zyxxx-xxxyZ

Also: Lucas Nicolas.

Full Changelog: v2026.6.19...v2026.7.1

v2026.6.19 BREAKING [Jun 19, 2026] (4mo ago) details → github →

# Hermes Agent v0.17.0 (v2026.6.19)

Hermes Agent v0.17.0 (v2026.6.19)

Release Date: June 19, 2026 Since v0.16.0: ~1,475 commits · ~800 merged PRs · 1,693 files changed · 235,390 insertions · 50,730 deletions · 300+ issues closed · 245 community contributors

> The Reach Release. v0.16.0 put Hermes on your desktop. v0.17.0 is about how far that reach extends — across new places to talk to it, deeper into the tools you already use, and out to the people running Hermes for a team. Hermes reached two new channels (iMessage via Photon, and the Raft agent network), the desktop app gained substantial new capability, subagents can now run in the background, image generation learned to edit, and Cursor's Composer model is reachable through an xAI Grok subscription. The dashboard got a full profile builder and secure login, the Skills Hub browser was rehauled, the memory tool got a major upgrade, and the curator stopped spending aux-model budget on every routine run. 300+ issues closed ride along, plus a security round.

✨ Highlights

Hermes reaches iMessage — Photon Spectrum, no Mac relay required — There's now an iMessage platform plugin built on Photon's managed line pool. Run hermes photon login, authenticate with a device code, and Hermes can send and receive iMessage — no Mac sitting in a closet running a relay, no BlueBubbles bridge to babysit. It's positioned as the successor to BlueBubbles: free to start, nothing to self-host. If your friends and family live in the blue bubbles, Hermes lives there now too. (#32348, #42582, #44713 — @teknium1)

Raft — Hermes joins the Raft agent network as a gateway channel — A new bundled Raft platform adapter lets Hermes connect to Raft as an external agent through a wake-channel bridge. Set RAFT_PROFILE, run the bridge, and Raft can wake Hermes to handle messages — with a privacy-by-contract design where wake payloads carry only metadata (event IDs, timestamps), never message bodies. Another surface where Hermes can show up and do work. (#48210 — @xxchan, @teknium1)

A substantially more capable desktop app — v0.16.0 shipped the desktop app; v0.17.0 deepened it across dozens of PRs. Rebindable keyboard shortcuts, native OS notifications with per-type toggles, live subagent watch-windows that stream a delegated agent's activity into its own pane, a composer model selector with per-model presets, automatic RTL/bidi text direction, a resizable VS Code-themed terminal pane, per-thread composer drafts, and the ability to install any VS Code Marketplace theme directly into the app. The desktop is now a serious daily driver, not a preview. (#45866, #40660, #47060, #46959, #43292, #44596 — @OutThisLife, @teknium1)

Background / async subagents — delegate work and keep going — delegate_task(background=true) now dispatches a subagent that runs in the background and returns a handle immediately. You and the model keep working while it churns, and the full result re-enters the conversation as a new turn the moment it finishes. Kick off a long research dive or a multi-step build, then carry on with something else instead of sitting blocked waiting on it. (#40946, #46968 — @teknium1)

Edit images, not just generate them — image-to-image in imagegenerate — imagegenerate can now edit and transform a source image, not only create one from scratch. Pass an existing image and a prompt and it routes to the backend's edit endpoint (same tool, same pattern as video_generate), across every supported image provider. "Make this logo blue," "remove the background," "turn this sketch into a render" — all from the tool you already use. (#48705 — @teknium1)

Automation Blueprints — schedule things without learning cron — Pick an automation by name and Hermes asks you for what it needs — no cron syntax, no slot=value typing. One blueprint definition renders natively on every surface: a form in the dashboard, a slash command in the CLI/TUI/messenger, a conversation with the agent, an entry in the docs catalog. "Daily news briefing at 8am" becomes a thing you set up by answering questions, not by memorizing 0 8 *. (#41309 — @teknium1)

Cursor's Composer model, through your xAI Grok subscription — grok-composer-2.5-fast is now in the xAI OAuth model picker, with its context window reconciled to the full 200k. Composer is the fast coding model behind Cursor — and if you have an xAI Grok subscription, you can now point Hermes at it directly over OAuth, no separate API key. Your Grok plan, Hermes's agent loop, Composer's coding speed. (#47908, #6f89e17 — @teknium1)

Full profile builder in the dashboard — Build a complete Hermes profile from the browser — pick its model, choose its skills, attach its MCP servers — without hand-editing config.yaml. The dashboard also unified multi-profile management into one machine-wide view with a global profile switcher, so you manage every profile from a single place. (#39084, #44007 — @teknium1)

Skills Hub browser rehaul — The dashboard's Skills Hub got a ground-up rework: connected hubs, a Featured section, full skill previews before you install, and a security scan on each skill. Browsing and installing skills from the trusted taps (OpenAI, Anthropic, HuggingFace, NVIDIA) is now a real browsing experience, not a flat list. (#40384, #43398 — @teknium1)

The memory tool got a major upgrade — atomic batch operations — The memory tool gained an operations array that applies a batch of add/replace/remove edits atomically against the final character budget. The model can free up space and add new entries in a single call — even when an add alone would overflow the budget — collapsing what used to be a fragile multi-turn dance into one reliable operation. Memory updates are now faster and far less likely to fail mid-edit. (#48507 — @teknium1)

Secure dashboard login — The dashboard's authentication was hardened: every token-required endpoint now correctly returns 401 behind the OAuth gate, websocket auth uses the served dashboard token, and a warning fires when a public_url override is silently rejected. Exposing your dashboard to the network is safer by default. (#42578, #42578 — @benbarclay, @teknium1)

Official WhatsApp Business Cloud API adapter — Alongside the existing Baileys bridge, Hermes now speaks the official WhatsApp Business Cloud API — Meta's first-party, hosted, no-bridge-process path. Point it at your Business API credentials and Hermes talks WhatsApp through the supported channel, with no QR-scanning bridge process to keep alive. (#44331, #43921 — @jquesnelle, @teknium1)

Rich text for Telegram — Bot API 10.1 rich messages — Telegram replies now render as proper rich messages via Bot API 10.1: better formatting, cleaner long-message handling, native markup instead of flattened text. It's on by default with an opt-out, so your Telegram conversations look the way they should without any configuration. (#44829, #45584, #45953 — @teknium1)

Curator cost optimization — no aux-model spend on routine runs — The skill curator now prunes stale skills by default but no longer runs its LLM-powered consolidation pass unless you opt in (curator.consolidate: true or hermes curator run --consolidate). The deterministic inactivity sweep keeps running for free; the opinionated, aux-model-spending "build umbrella skills" fork is now off by default. Routine background curation costs you zero tokens. (#47840 — @teknium1)

🖥️ Hermes Desktop App

New surfaces & UX

Rebindable keyboard shortcuts panel; native OS notifications with per-type toggles; curated turn-completion cue + dismissable error banners (#40660, #45866, #42480, #47985 — @OutThisLife, @teknium1)
Live subagent watch-windows — stream a delegated agent's activity into its own pane; composer status stack + editable prompts; open any chat in its own window; new-session-in-compact-window hotkey (#47060, #44630, #43219, #46951 — @OutThisLife, @teknium1)
Composer model selector + per-model presets + external-provider disconnect; surface every provider/model from hermes model in the GUI; unify provider list to one source; warn when a main-model switch leaves auxiliary tasks pinned elsewhere (#46959, #40563, #49080, #40286 — @teknium1, @OutThisLife)
Install any VS Code Marketplace theme; assignable themes per profile; window translucency slider; unified overlay design system + BrandMark + onboarding redesign (#43292, #42286, #45086, #40708 — @teknium1, @OutThisLife)
Resizable VS Code-themed terminal pane + palette polish; auto-detect RTL/bidi text direction in chat; Mac-style session switcher (^Tab / ^1-9); worktree-aware sidebar grouping; hover-reveal collapsed sidebars; messaging source folders in sidebar (#42521, #44596, #43111, #45273, #41670, #41751 — @OutThisLife)
Arrow-key history + queue editing in composer; expand full command inline from the approval bar; follow-streaming-at-bottom + jump-to-bottom button; first-class cron jobs in the sidebar + dashboard scheduler (#40234, #44864, #45263, #40684 — @OutThisLife, @teknium1)
Desktop pets — pop-out overlay + notifications (#47938 — @teknium1)
Full tool-backend config (pickers + per-backend settings) in Settings; run tool-backend post-setup installs from the GUI; uninstall the Chat GUI without removing the agent; Shift+click status-bar zap to toggle YOLO globally; /browser connect on a local gateway (#41232, #40559, #40355, #41666, #47245 — @teknium1, @OutThisLife)
Japanese + Traditional Chinese language switching (#40114)
"Restart gateway" action (renamed from "Restart messaging") surfaced in the statusbar + on messaging save/toggle toasts; rendered logs are selectable/copyable (#49094 — @OutThisLife)

Remote-gateway & multi-profile

Remote media relay — attach images/PDFs and display agent-written images over the network for the first time; remote-gateway file attachments via file.attach (#41336, #42634 — @teknium1)
Client + backend version buttons + remote-backend update flow; browse remote backend files; route global-remote profile REST calls; recover chat after sleep/wake by revalidating a stale remote backend (#42181, #44326, #47011, #41350 — @OutThisLife, @teknium1)
Multi-profile fallout cleanup — WS auth + cross-profile session reads; release profile backends before delete; scope session list/model switch/timer per session (#44529, #42613, #41103, #41120, #41182 — @OutThisLife, @teknium1)
Stream subagent activity into watch windows; keep streaming painting in unfocused secondary chat windows; recover stranded session windows (#47060, #47919, #47655 — @OutThisLife)

📊 Web Dashboard

Full-featured profile builder (model + skills + MCPs); unify multi-profile management — one machine dashboard + global profile switcher; profile-scoped skills & toolsets; session switcher panel on the Chat tab (#39084, #44007, #43808, #49077 — @teknium1)
Skills hub browser rehaul — connected hubs, featured, preview + security scan; SKILL.md editor on Skills page + attach-skill selector in cron modals; full per-MCP catalog detail; full tool-backend config in the GUI (#40384, #44231, #48520, #40418 — @teknium1)
Enable webhooks from the Webhooks page; idempotent hermes dashboard register; auto-restart gateway after Telegram QR onboarding; file browser; change UI font from the theme picker; reasoning-effort picker in the chat sidebar (#44021, #42455, #43424, #43512, #41145, #49141 — @teknium1)

🏗️ Core Agent & Architecture

God-file refactor wave (run_agent.py / cli.py / gateway/run.py)

cli.py main() 3297 → 954 lines — extracted 28 subcommand parsers into hermescli/subcommands/, then promoted 9 closure handlers; 32 slash-command handlers → CLICommandsMixin; 18 model-flow wizard functions → modelsetup_flows; agent-construction cluster → CLIAgentSetupMixin (#41798, #41835, #41942, #42174, #42153 — @teknium1)
gateway/run.py 19157 → 15870 lines — 42 slash-command handlers → GatewaySlashCommandsMixin; authorization cluster → GatewayAuthorizationMixin; kanban watcher loops → GatewayKanbanWatchersMixin (#41886, #42159, #41849 — @teknium1)
runagent.py turn loop — extracted prologue into TurnContext, post-loop tail into finalizeturn, consolidated inner-retry-loop recovery flags into TurnRetryState (#41778, #42169, #41828 — @teknium1)

Agent loop, prompt & tools

memory batch operations — atomic add/replace/remove array against the final char budget, so a single call can free space and add entries (#48507 — @teknium1)
search_files lossless densification — headroom evaluation report + the one densification improvement worth shipping (fewer tokens per result, same matches) (#47866 — @teknium1)
Removed the agent-callable sendmessage tool; coding-context posture across CLI/TUI/desktop/ACP; readfile extracts .ipynb/.docx/.xlsx to text (#47856, #43316, #37082 — @teknium1)
Context-file handling: configurable truncation limit + warnings; scale context-file cap to model window + point agent at the truncated file (#47251, #47846 — @teknium1)
Compression: temporal anchoring in compaction summaries; raise compaction trigger to 85% for gpt-5.5 on Codex OAuth (#41102, #40957 — @teknium1)
Adaptive middleware (consumed by NeMo-Relay observer telemetry); usable mid-turn steer — desktop affordance + trusted injection (#29724, #40240 — @teknium1)

Provider & model support

New models: z-ai/glm-5.2 (verified 1M context, OpenRouter + Nous), anthropic/claude-fable-5, laguna-m.1 + nemotron-3-ultra, xAI Composer 2.5 in the OAuth picker; default xAI to grok-build-0.1 (#47391, #45695, #42979, #42629, #47908, #47371 — @teknium1)
Model picker: Refresh-Models control to bust stale cache; persist Nous recommended-models to disk + fall back on Portal failure; seed catalog disk cache from checkout on update; MiniMax-M3 reports true 1M context (#48691, #42628, #42614, #43338 — @teknium1)
Anthropic adaptive models: default to modern thinking contract; never send reasoning field; route reasoning_effort to verbosity; require confirmation for very expensive selections (#42991, #43012, #43436, #43391 — @teknium1)
Auth: auto-detect OpenRouter credential from the pool; keep Codex OAuth pool accounts distinct on add/re-auth; resolve xAI OAuth across profiles + write rotated tokens back to root; honor model.default_headers for custom OpenAI-compatible providers (#42263, #42316, #46614, #41096 — @teknium1)
Bedrock falls back to non-streaming InvokeModel when IAM denies the streaming variant; Ollama default maxtokens=65536; surface model refusals as contentfilter (#44293, #41694, #46013 — @teknium1)

Sessions, state & multi-agent

Optional max session cap; drop empty sessions on CLI exit and rotation; ACP session-provenance metadata for compression rotation (#42389, #43855, #41724 — @teknium1)
Delegation: resolve custom-endpoint subagent pools by endpoint identity; remove the default subagent wall-clock timeout; stop subagent completion lines leaking into parent CLI display (#41730, #45149, #44223 — @teknium1)
Kanban: config-gated auto-subscribe on kanban_create; machine-global singleton lock for the embedded dispatcher; pin assigned profile toolsets for workers; hold reclaim while worker still alive (#48635, #49068, #45590, #49064 — @teknium1)
Memory: configurable Hindsight retain observation scopes; OpenViking setup UX; Honcho gateway-gated identity tree; Supermemory session-level ingest (#46611, #48262, #44431, #38756 — @teknium1, @alt-glitch)

📱 Messaging Platforms (Gateway)

New channels

iMessage via Photon Spectrum — hermes photon login (device-code OAuth), gRPC-native channel (no webhook), markdown rendering, emoji reactions, outbound media via spectrum-ts (#32348, #42582, #44713, #42397 — @teknium1)
WhatsApp Business Cloud API adapter (official, no bridge process) (#44331, #43921 — @jquesnelle, @teknium1)
SimpleX — groups, native attachments, text batching, auto-accept; Raft bundled platform plugin with activity hooks (#42584, #48210 — @teknium1)

Gateway core & rendering

Render terminal tool calls as native bash code blocks on markdown platforms; bare fenced code blocks in chat; optional message timestamps for LLM context; configurable toolprogressgrouping (#41215, #42576, #47253, #47228 — @teknium1)
Telegram: Bot API 10.1 rich messages (now always-on with opt-out); opt-in Online/Offline bot status indicator; stop cutting long streamed responses; MarkdownV2 on progress edits; gate oversized voice/audio before download (#44829, #45584, #49134, #43761, #44245 — @teknium1)
Discord: propagate roleauthorized so DISCORDALLOWEDROLES works end-to-end; recover from runtime gateway task exits; cancel bot_task on connect failure; stop typing after replies (#43327, #44383, #44432, #44836 — @teknium1)
Slack: scope top-level channel messages when replyinthread=false; thread approval UX (block-size overflow + typed-prefix); make video attachments available to agents; registerslackaction_handler plugin API (#41703, #43444, #45512, #44664 — @teknium1)
Replied-to media attachments included; document attachments classified as DOCUMENT on Signal/Email/SimpleX/Teams; WhatsApp restarts stale bridge processes; Matrix room-context isolation; QQbot CPU-spin fix; Weixin rate-limit circuit breaker (#46107, #44695, #44205, #18505, #40574, #41718 — @teknium1, @banditburai)

🖥️ CLI, TUI & Setup

/version slash command; /billing interactive terminal billing (TUI + CLI); show time since last final agent response on the status bar; persist resolved approval/clarify prompts in scrollback (#40214, #45449, #44265, #44702 — @teknium1)
Lock hermes worktrees so concurrent processes can't clobber them; display custom profile alias names in list/show; clone profiles from any source (#48699, #40371, #45630 — @teknium1)
Opt-in structured profile-build path on first contact; configurable per-platform system-prompt hints; configurable background memory/skill notifications (#41114, #48630, #47226 — @teknium1)
TUI: interactive Plugins Hub enable/disable overlay; session name in the terminal titlebar; paint approval/clarify/sudo/secret modals directly (not via throttle); wrap long approval commands instead of truncating (#42965, #43188, #41155, #44691 — @teknium1)
TTS: Gemini persona prompts + audio tags; xAI auto speech tags + speed/streaming knobs; Piper speaker_id; OGG for Telegram auto-TTS (#43442, #49061, #49062, #49060, #41644 — @teknium1)

🔧 Tool System, Skills & MCP

image-to-image / editing in image_generate across all backends; shrink images to provider dimension limit (#48705, #45979 — @teknium1)
MCP: official Unreal Engine 5.8 MCP server in the catalog; elicitation handler so MCP servers can prompt for mid-tool-call confirmation (payment/OAuth) on whichever surface owns the session — CLI/TUI/Telegram/Slack; expose late-connecting MCP tools to the agent between turns (cache-safe); keepalive ping for short-TTL HTTP sessions; block exfil-shaped / suspicious stdio configs before probe; capability-gate tools/list so prompt-only servers connect; preserve stdio argv passthrough + Windows env vars (#48397, #49203, #49208, #49221, #46083, #44550, #44324 — @teknium1, @lgalabru)
Skills: simplify-code skill (parallel 3-agent code review & cleanup) + risk-tiered application with Chesterton's Fence; find & diff user-modified bundled skills; optional payments skills (Stripe Link, MPP, Projects); CLI-based shop skill; live per-source browse progress (#41691, #49070, #48286, #31343, #47309, #43398 — @teknium1, @colinwren-stripe)
Curator: make skill consolidation opt-in (prune stays default-on) (#47840 — @teknium1)
Plugins: install from a subdirectory within a repo; accept browser-pasted GitHub URLs in hermes plugins install; session:compress lifecycle event + threadid/chattype in agent:start/end context (#42963, #33539, #47252, #41672 — @teknium1)
Memory/skill write approval gate (default off) — boolean writeapproval replaces the tri-state writemode (#38199, #43354 — @teknium1)

🌐 Fleet, Relay & Automation

Managed scope — administrator-pinned, user-immutable config & secrets from a root-owned /etc/hermes (#49098 — @teknium1)
Multiplex all profiles over one gateway process (opt-in) (#48273 — @benbarclay)
Pluggable CronScheduler + Chronos managed-cron provider (scale-to-zero) (#48275 — @benbarclay)
Automation Blueprints — parameterized automation templates across every surface (#41309 — @teknium1)
Gateway-Gateway relay (phases 0-3): relay adapter + capability descriptor, connector⇄gateway channel auth + signed-HTTP inbound + enroll CLI, WS-only inbound, managed-boot self-provision client (#48078, #48147, #48294, #48242 — @teknium1)

🐳 Docker, Nix & Installer

s6: detect supervisor directly for gateway restart; register profile gateways without auto-starting; persist desired state; clear stale log locks (#46290, #46266, #46292, #46289 — @teknium1)
Docker: optimize image size (.dockerignore, drop dev deps, split layers); pre-install matrix deps; supervised gateway uses --replace; harden hosted install tree against self-modification (#38749, #42413, #47555, #47490 — @teknium1)
Nix: cold npm build fixes + auto-fix-lockfiles workflow; hashless npm deps via importNpmLock; refresh npmDepsHash after Electron 40.10.2 pin (#41867, #48883, #48457 — @teknium1)
Installer: clear unmerged git index before autostash; scope install-method stamp to the code tree (#45515, #48188 — @teknium1)

🔒 Security & Reliability

Fail closed on own-policy gateway adapters; fail closed for approval-button auth on Slack/Feishu/Discord when no allowlist is set (#45634, #41226 — @teknium1)
Redact secrets in request debug dumps; withhold host metadata from public status; block exfil-shaped / suspicious MCP stdio configs before probe (#46637, #45642, #46083 — @teknium1)
Close shell-escape denylist bypass + fail-closed on missing approval module; scrub operator environment before launching cua-driver MCP; sanitize env for cron job-script subprocesses; bound TodoStore content length/count; scan REST cron prompts for parity with the agent tool (#40591, #48423, #49207, #41648, #41335 — @teknium1, @kshitijk4poor)
Bump urllib3 and PyJWT to clear CVEs; Langfuse redacts base64 data URIs instead of truncating into invalid base64 (#40179, #43322 — @teknium1)

🪟 Windows

Dashboard /chat tab via ConPTY (winptybridge) + tests; resolve PowerShell host instead of bare powershell for uv install; resolve powershell.exe by absolute path so Desktop install doesn't stall (#42251, #48341, #40927 — @teknium1)
Repair stale winget registration + refresh/merge PATH; kill hermes before recreating venv to release bcrypt.pyd lock; read HERMESHOME from the registry when env is stale; quarantine running hermes.exe during update repair (#44084, #45120, #46772, #40409 — @teknium1)
JOB-breakaway watcher reliability + status --deep probes; handle Windows PTY stdin + detached WS frames; decode subprocess output as UTF-8; confirm-modal on native Windows (#40909, #41953, #44328, #42419 — @teknium1)

🐛 Notable Bug Fixes

Percent-encode non-ascii URL components; sanitize : in FTS5 queries so colon searches don't silently return empty (#41430, #40653 — @teknium1)
Preserve multimodal user content through crash-resilience persist; flatten multimodal content before provider sync; strip MEDIA directives from compressor input (#47907, #44738, #44708 — @teknium1)
Re-enter retry loop on genuine Nous 429 so the fallback guard runs; scope Nous tags to Nous auxiliary calls; suppress "Credit access paused" notice on free models (#45136, #45801, #43669 — @teknium1)
Cron: don't strict-scan script-injected output in no-skills jobs; resolve per-job provider "custom" to providers.custom instead of codex; repair cron ownership on container restart (#43223, #43505, #41976 — @teknium1)
(300+ issues closed this window; full per-area fix list is exhaustive — these are the highest-impact.)

↩️ Reverted in this window (not shipping)

html-artifact skill + sketch/architecture-diagram/concept-diagrams fold (#48899) — reverted (#49053); absent on main.
Cron per-job profile support reverted (#43956); a nix patchPhase workaround reverted (#42151).

👥 Contributors

A huge thank-you to everyone who contributed to this release — 245 contributors across commits, co-author trailers, and salvaged PRs.

Core

@teknium1

Top community contributors (by merged PRs)

@OutThisLife — 92 PRs (desktop app maturity (shortcuts, notifications, watch-windows, themes))
@kshitijk4poor — 60 PRs (onboarding, model picker, cron env sanitization)
@xxxigm — 27 PRs (desktop & gateway fixes)
@benbarclay — 23 PRs (gateway multiplex, Chronos cron, dashboard auth)
@helix4u — 21 PRs (gateway & installer reliability)
@austinpickett — 19 PRs (dashboard & desktop UX)
@alt-glitch — 14 PRs (usage-aware credits, Supermemory)
@ethernet8023 — 14 PRs (desktop build pipeline & Linux/Windows)
@liuhao1024 — 5 PRs (session lifecycle fixes)

All contributors (alphabetical)

@0z1-ghb, @0xdany, @0xneobyte, @0xyg3n, @1960697431, @895252509, @achaljhawar, @Adolanium, @AhmetArif0, @AIalliAI, @aimable100, @AJ, @ak2k, @alarcritty, @AlchemistChaos, @aldoeliacim, @alelpoan, @AlexanderBFoley, @alfred-smith-0, @ali-nld, @alt-glitch, @am423, @ameobius, @AMIK-coorporations, @annguyenNous, @ArcanePivot, @ARegalado1, @asdlem, @ashishpatel26, @austinpickett, @banditburai, @barronlroth, @Bartok9, @basilalshukaili, @bbednarski9, @bcsmith528, @benbarclay, @benegessarit, @benfrank241, @bionicbutterfly13, @BlackishGreen33, @blut-agent, @bmoore210, @bpasquini, @briandevans, @BROCCOLO1D, @capt-marbles, @ccook1963, @Cdddo, @channkim, @ChasLui, @chimpera, @chromalinx, @CiarasClaws, @claytonchew, @cnfi, @colinwren-stripe, @cresslank, @cyb0rgk1tty, @dangelo352, @davidgut1982, @deaneeth, @definitelynotguru, @Diyoncrz18, @draix, @dschnurbusch, @Dusk1e, @dusterbloom, @ehz0ah, @emozilla, @enesilhaydin, @Erosika, @ethernet8023, @Evisolpxe, @firefly, @flooryyyy, @flyinhigh, @foras910521-lab, @Frowtek, @ft-ioxcs, @fyzanshaik, @Ganesh0690, @gauravsaxena1997, @giladbau, @glesperance, @GodsBoy, @goku94123, @H-Ali13381, @HaozheZhang6, @haran2001, @harshitAgr, @hbentel, @helix4u, @HeLLGURD, @Hermes, @huangxun375-stack, @iamlukethedev, @ianculling, @IAvecilla, @iborazzi, @infinitycrew39, @islam666, @ITheEqualizer, @itsflownium, @Jaaneek, @james47kjv, @jeeves-assistant, @jeffrobodie-glitch, @JezzaHehn, @jiangkoumo, @jimjsong, @JimLiu, @JimStenstrom, @jmsunseri, @JoaoMarcos44, @joel611, @JoelJJohnson, @joerj123, @johnjacobkenny, @jooray, @joshuadow, @jplew, @justinbao19, @Justlrnal4, @Kailigithub, @kamonspecial, @kdunn926, @Kenmege, @Kewe63, @kmccammon, @konsisumer, @kristianvast, @kshitijk4poor, @kyssta-exe, @l37525778-coder, @LaPhilosophie, @leo4226, @LeonSGP43, @liuhao1024, @Llugaes, @loongfay, @loongzhao, @lsaether, @m4dni5, @manishbyatroy, @MaxFreedomPollard, @maxmilian, @maxtrigify, @mnajafian-nv, @mohamedorigami-jpg, @mollusk, @MrDiamondBallz, @mssteuer, @mvanhorn, @naqerl, @Nea74, @necoweb3, @nepenth, @nicoloboschi, @NormallyGaussian, @OmarB97, @omegazheng, @OndrejDrapalik, @OutThisLife, @oxngon, @OYLFLMH, @Paperclip, @paulb26, @pengyuyanITYU, @PhilipAD, @pinguarmy, @plcunha, @ProgramCaiCai, @psionic73, @qin-ctx, @qingshan89, @Que0x, @qWaitCrypto, @r266-tech, @randomsnowflake, @rbrtbn, @rewbs, @rio-jeong, @Rivuza, @rob-maron, @rodboev, @ruangraung, @RyTsYdUp, @Sahil-SS9, @salesondemandio, @sanidhyasin, @sarvesh1327, @sdyckjq-lab, @shannonsands, @SHL0MS, @simpolism, @sitkarev, @skyc1e, @skylarbpayne, @SNooZyy2, @Spaceman-Spiffy, @srojk34, @sweetcornna, @synapsesx, @Tamaz-sujashvili, @tangtaizong666, @temalo, @tfournet, @thedavidweng, @TheGardenGallery, @tim404x, @tomekpanek, @Tranquil-Flow, @tt-a1i, @tuancookiez-hub, @underthestars-zhy, @Veritas-7, @victor-kyriazakos, @wesleysimplicio, @WolframRavenwolf, @WompaJango, @x1erra, @xiaoxinova, @xtymac, @xushibo, @XVVH, @xxchan, @xxxigm, @xy200303, @y0shua1ee, @yanxue06, @yatesjalex, @YLChen-007, @yoniebans, @youjunxiaji, @yubingz, @zakame, @zapabob, @zccyman, @zimigit2020, @ziwon, @zwcf5200, @zxcasongs.

Full Changelog: v2026.6.5...v2026.6.19

v2026.6.5 BREAKING [Jun 6, 2026] (4mo ago) details → github →

# Hermes Agent v0.16.0 (2026.6.5) — The Surface Release

Hermes Agent v0.16.0 (v2026.6.5)

Release Date: June 5, 2026 Since v0.15.2: 874 commits · 542 merged PRs · 1,962 files changed · 205,216 insertions · 46,217 deletions · 399 issues closed (2 P0, 62 P1, 16 security-tagged) · 170 community contributors (including co-authors)

> The Surface Release. Hermes meets you wherever you work. A brand-new native desktop app — built across 100 PRs and 159 commits in a single week — gives you Hermes as a real macOS/Linux/Windows application: one-click install, in-app self-update, drag-and-drop files into chat, an inline model picker in the status bar, concurrent multi-profile sessions, a full Simplified Chinese translation, and the ability to connect to a remote Hermes gateway over OAuth or username/password. Alongside it, the web dashboard grew a full browser-based administration panel (MCP catalog, messaging channels, credentials, webhooks, memory, pluggable OIDC / username-password login), and first-time setup got a "Quick Setup via Nous Portal" path that gets you from install to first message in seconds. The default skill set was trimmed to what you actually need, NVIDIA/skills joined the trusted Skills Hub taps, the model picker is now fuzzy-searchable everywhere (desktop, web, TUI, CLI), and /undo finally lets you take back the last N turns. 2 P0 and 62 P1 closures ride along, plus a security round (CVE-2026-48710 Starlette pin, SSRF off-loop hardening, subprocess credential stripping).

✨ Highlights

Hermes Desktop — a real native app, not a terminal wrapper — This is the headline. There's now a apps/desktop/ Electron application that installs like any other desktop app on macOS, Linux, and Windows, updates itself in place from inside the app, and gives you a polished GUI for everything Hermes does. You get a proper chat window with streaming, a session list you can archive and search, drag-and-drop files anywhere in the chat area, clipboard image paste, a Cmd+K command palette, and a model picker right in the status bar. If you've been telling friends "it's a CLI agent" and watching their eyes glaze over — now you can just send them an installer. None of this existed a week ago. (#20059, #35607, #37099, #37379, #38631 — @OutThisLife, @jquesnelle, @ethernet8023, @austinpickett, @benbarclay)

Run the desktop app against a remote Hermes — sign in with OAuth or username/password — The desktop app doesn't have to run Hermes locally. Point it at a remote Hermes gateway (your homelab, a hosted box, a teammate's server) and it connects over a secure WebSocket, authenticating with OAuth or a username/password login — no fiddling with --insecure flags or hand-copied session tokens. Each profile can target its own remote host, and you can run concurrent sessions across multiple profiles in one window with cross-profile @session links. The practical version: your laptop runs a thin GUI, the heavy agent runs wherever your API keys and compute live. (#37888, #38851, #39330, #39778 — @benbarclay, @OutThisLife, @teknium1)

The web dashboard is now a full admin panel — configure everything from the browser — The dashboard grew from "view your sessions" into a complete administration surface. There's a Channels page that sets up every gateway messaging platform (Telegram, Discord, Slack, etc.) from the browser, an admin panel for the MCP catalog with enable/disable toggles, credential management, webhook and hook creation, memory configuration, gateway controls, and a System page with check-before-update and one-click Debug Share. You no longer have to SSH in and edit config.yaml to wire up a new messaging channel or MCP server — it's all point-and-click now. (#36704, #36736, #37211, #38205, #38600 — @teknium1)

Hermes Desktop speaks Simplified Chinese — full 简体中文 in the chat GUI — The desktop app now ships a complete Simplified Chinese (简体中文) translation across every UI surface — the chat window itself, sidebar, settings, command center, cron, messaging, profiles, skills, agents, the lot. English stays the default; switch language in Appearance settings and the choice persists to your config (display.language). It's built on a proper typed i18n layer, so adding more languages from here is straightforward. (#38241 — @JimLiu)

Leaner default skill set — Hermes ships only what you actually need — The bundled skill set got a deliberate trim. Skills that were redundant or dead are gone (spotify — superseded by the native Spotify plugin's 7 tools; linear — superseded by hermes mcp install linear; kanban-codex-lane, debugging-hermes-tui-commands, a stale domain orphan, and several empty category markers). Heavier or niche skills moved from bundled to optional (the Baoyu creative set, dspy, subagent-driven-development, minecraft-modpack-server, pokemon-player, hermes-s6-container-supervision) — still one hermes skills install away, just not loaded by default. And a new environments: relevance gate keeps context-specific skills (kanban, docker/s6) out of the skills index for users who'll never use them, while still loading them on explicit request. The result: a smaller, sharper default skill list, less noise in the picker, and a lighter prompt. The curator can now prune unused built-in skills too (not just agent-created ones), with usage tracked for every skill. (#39028, #36701, #36228 — @teknium1)

NVIDIA/skills is now a built-in trusted skills tap — NVIDIA/skills joins OpenAI, Anthropic, and HuggingFace as a default trusted tap in the Skills Hub — discoverable, browsable, searchable, and auto-updating through the same pipeline. NVIDIA's verified skills for CUDA-X, AIQ, cuOpt and the rest of their product stack are one install away, with real category labels from the repo's skills.sh.json sidecar. (#34333 — @teknium1)

Quick Setup via Nous Portal — from install to first message in seconds — First-time setup was thinned down to two clear paths: Quick Setup (sign in with Nous Portal, get a model picker, start chatting immediately) or Full Setup (the detailed wizard for power users). hermes portal is now the human-readable alias that runs the full quick-setup Nous flow. The first-run menu explains the difference inline so newcomers aren't guessing. The goal: a brand-new user shouldn't need to read docs to send their first message. (#35723, #36227, #38449, #38465 — @teknium1, @kshitijk4poor)

Fuzzy model picker, everywhere — type a few letters, find your model — The model picker now does fuzzy search across the desktop app, web dashboard, TUI, and CLI. Type "v4fl" and deepseek-v4-flash surfaces; multi-endpoint providers are grouped under one row instead of cluttering the list with duplicates, and each row carries a description so you know what you're picking. The catalog refreshes hourly instead of daily, so new models show up the same day they launch. New this window: deepseek-v4-flash, MiniMax-M3 with 1M context, qwen3.7-plus. (#36928, #35227, #35756, #35659, #36214 — @kshitijk4poor, @teknium1)

/undo [N] — take back the last N turns — Said the wrong thing, or sent the agent down a bad path? /undo backs up N user turns, prefills your last message so you can edit and resend, and soft-deletes the turns in between. It works in the CLI, the TUI, and across messaging platforms (Telegram, Discord, etc.) with full parity. Closes a long-standing request (#21910). (#36229, #36699 — @teknium1)

Choose your default interface — cli or tui — You can now set whether hermes chat drops you into the classic CLI or the Ink TUI by default, with a --cli flag to override per-invocation. The TUI also got a single unified /model command and a Sessions overlay for switching between live sessions. Use the interface you actually like. (#37782, #37112 — @OutThisLife)

🖥️ Hermes Desktop App (NEW)

Install & lifecycle

macOS desktop install + in-app self-update; rebuild-and-relaunch cleanly on macOS (#35607, #36198, #38296 — @OutThisLife)
macOS installer renamed to "Hermes" and turned into a launcher (#37516 — @OutThisLife)
Build desktop in its own desktop stage on macOS/Linux instead of silently skipping; content-hash build stamp, --build-only / --force-build flags (#36134 — @OutThisLife, #37597 — @ethernet8023)
Boot-failure recovery + live API-key validation; cancellable install; recover from corrupt cached Electron download (#35864, #37379, #39032 — @OutThisLife, @teknium1)
Windows: recover from corrupt Electron cache in bootstrap install; stop racing our own backend during in-app update (#39465, #39828 — @teknium1, @OutThisLife)
Linux: configure Electron sandbox helper; detect linux arm64 binary; disable GPU acceleration on remote displays to stop flicker (#37691, #38594, #37932 — @ethernet8023, @OutThisLife)
Require Node ≥20.19/22.12 for the desktop build; zero eslint/typecheck debt + prettier pass (#38255, #39100 — @OutThisLife)

Remote-gateway & multi-profile

Connect to OAuth-gated remote gateways; username/password login for remote gateways; per-profile remote gateway hosts (#37888, #38851, #39778 — @benbarclay, @teknium1, @OutThisLife)
Concurrent multi-profile sessions, cross-profile @session links; re-mint OAuth WS ticket on gateway reconnect; gate OAuth remote connect on AT-or-RT (#39330, #38886, #39464 — @OutThisLife, @teknium1, @benbarclay)
Offer remote sign-in on a gated-gateway boot failure; validate live WebSocket in remote gateway test (#39402, #39511 — @teknium1)

Chat UX & settings

Drop files anywhere in the chat area; clipboard image paste with dedupe; attachments on Enter, IME composition handling (#36262, #38306, #38677 — @OutThisLife, @teknium1)
Background needs-input indicator, clarify redesign, Cmd+K palette & UI consistency pass; inline model picker in the status bar; YOLO toggle in the status bar (TUI parity) (#38631, #37738, #38517 — @OutThisLife)
Session-list overhaul, session hygiene/archive, media streaming + connecting overlay; search sessions by id (SQL-bounded) (#37379, #37099, #39062 — @OutThisLife, @teknium1)
Dedicated Providers settings + polished Accounts/API-keys UX; consolidate skills + tools management into one pane; move model management into Settings (#38551 — @austinpickett, #37310, #37330 — @jquesnelle)
Render approval/sudo/secret prompts so tools stop silently timing out; surface skill & quick-command slash commands in the palette; first-class xAI Grok OAuth provider in the launcher (#38578, #38531, #37697 — @teknium1, @OutThisLife)
"Choose provider later" skip on first-run onboarding; onboarding can configure a local/custom endpoint without an API key; custom zoom shortcuts (#39483, #38572, #37894 — @teknium1, @ethernet8023)
macOS helper microphone entitlement; scroll-jump fixes (native anchoring, at-rest jump, wheel-up snap-back); thinking block stays open mid-streaming (#37745 — @xxxigm, #37866, #38221, #38809 — @OutThisLife, @teknium1, @stremtec)
GUI quality-of-life triage batch; salvaged AhmetArif0 desktop/dashboard fixes; rename session via session.title RPC so /title works (#37536 — @austinpickett, #39070, #39410 — @teknium1, @benbarclay)
hermes debug share / /debug / hermes logs now include desktop.log (#38203 — @teknium1)
Simplified Chinese (简体中文) translation across every desktop UI surface — typed i18n layer, switch in Appearance settings, persisted via display.language (English remains default) (#38241 — @JimLiu)
Full multi-profile support over one global-remote dashboard; remote-profile sessions are first-class (resume, read, rename/archive/delete); new chats honor their profile in global-remote mode (#39921, #39894, #39993 — @OutThisLife)

📊 Web Dashboard

Administration panel (NEW)

Full administration panel — MCP catalog with enable/disable toggles, pairing, webhooks, credentials, memory, gateway, hook creation, system settings (#36704, #36736 — @teknium1)
Channels page — set up every gateway messaging channel from the browser (#37211 — @teknium1)
System page: check-before-update flow + Debug Share (#38205, #38600 — @teknium1)
nous-blue theme, bulk sessions, schedule picker; enriched profiles dashboard + de-dupe channel env vars; configurable terminal background via theme (#37383, #37872 — @austinpickett, #37156 — @teknium1)
Always enable embedded chat; remove dashboard --tui flag (#38591 — @benbarclay)

Auth

Pluggable username/password login (Option B); generic self-hosted OIDC provider + multi-provider verify fix; hermes dashboard register for self-hosted OAuth client (#38819 — @benbarclay, #38917, #38802 — @teknium1)
Rotate dashboard sessions via refresh token; share /api/ public allowlist between legacy and OAuth gates; drop /api/ paths from OAuth next= round trip (#37247, #34254, #36244 — @benbarclay)
Chat tab works in gated (OAuth) mode; trust non-web WS origins on OAuth-gated binds after ticket auth; authenticate server-spawned PTY child WS; sanction plugin WS/upload auth via SDK helpers (#34793, #37870, #37972, #38549 — @teknium1, @benbarclay, @kshitijk4poor)
Allow desktop websocket origins on remote binds (#37747 — @teknium1)

🏗️ Core Agent & Architecture

Provider & model support

New models: deepseek-v4-flash (+ trimmed variants, maker-grouped curated lists), MiniMax-M3 with 1M context on native minimax providers, qwen3.7-plus (Nous + OpenRouter), gemini-3.5-flash to Gemini OAuth + API-key pickers (#35659, #36214, #39409, #37046 — @teknium1)
Model picker: fuzzy search across WebUI/TUI/CLI; group multi-endpoint providers under one row; refresh provider descriptions + describe grouped rows; refresh catalog hourly; stop routing OpenAI selection to OpenRouter (#36928 — @kshitijk4poor, #35227, #35773, #35756, #37175)
Always show Nous Tool Gateway backends, login on select; surface the Nous free tool pool (entitlement + setup prompt); route FAL video gen through managed Nous gateway (#35792 — @teknium1, #36153, #33259 — @alt-glitch)
Persist mid-session model switch to database; recover model on post-interrupt recovery turn (#35256, #35381 — @teknium1)
Credential pool: STATUS_DEAD for terminal OAuth failures; isolate custom provider picker credentials (#34412, #34810 — @teknium1)
Disable Nous Portal legacy session-key inference fallback — JWT-only (#34508 — @kshitijk4poor)

Agent loop, prompt & tools

/undo [N] — backs up N user turns with prefill + soft-delete (CLI/TUI + messaging-platform parity) (#36229, #36699 — @teknium1)
Progressive tool disclosure for MCP and plugin tools (scoped); embedder environment-hint hook for the system prompt; universal task-completion guidance + local Python toolchain probe (#34493, #34574, #34340 — @teknium1)
Uncap delegation maxspawndepth (floor 1, no ceiling); broaden Hermes self-knowledge pointer to docs + skill; hermes prompt-size diagnostic (#39772, #38538, #35276 — @teknium1)
perf(read_file): compact line-number gutter — ~14% fewer tokens per read (now the only format) (#35368, #35532 — @teknium1)
Resolve agent cwd from TERMINAL_CWD via one reader; align prefill messages key handling; resume relaunches in the session's original working directory (#35028 — @banditburai, #38760 — @helix4u, #38562 — @teknium1)
Prevent session-id fork from concurrent compressions; observer telemetry hooks + NeMo-Relay plugin (gated tool emit) (#34351, #38232 — @teknium1)

Sessions, state & memory

perf(state): merge FTS5 segments on VACUUM + hermes sessions optimize; keep /branch sessions visible after parent reopen; survive missing FTS5 runtimes (#34596, #39214 — @teknium1, @kshitijk4poor, #35452 — @helix4u)
Honcho: make startup fail open; harden self-hosted setup paths (#24847 — @stephenschoettler, #35170 — @kshitijk4poor)
Supermemory: session-level ingest + kebab aliases (#38756 — @alt-glitch)

🧩 Multi-Agent (Kanban) & Skills

Kanban

goal_mode cards run workers in a /goal loop; file attachments on tasks; attach images referenced in task bodies to worker vision (#35710, #35395, #34210 — @teknium1)
defaultassignee fallback + per-profile concurrency cap; POST /runs/{runid}/terminate endpoint; gate notifier watcher on dispatchingateway (#34244, #34449, #37174 — @teknium1)
CLI dispatch config passthrough + humanizer skill swap (#34337 — @teknium1)

Skills

Leaner default skill set (#39028 — @teknium1):
Removed (redundant / dead): spotify (→ Spotify plugin's 7 native tools), linear (→ hermes mcp install linear), kanban-codex-lane, debugging-hermes-tui-commands, stale domain orphan, empty category markers (diagramming, gifs, inference-sh, mlops/training, mlops/vector-databases)
Bundled → optional: baoyu-article-illustrator, baoyu-comic, creative-ideation, pixel-art, dspy, subagent-driven-development, minecraft-modpack-server, pokemon-player, hermes-s6-container-supervision
Consolidated: webhook-subscriptions + native-mcp folded into the hermes-agent skill as on-demand references; writing-plans merged into plan (v2.0.0)
New environments: frontmatter relevance gate (kanban / docker / s6) — context-specific skills stop appearing in the index for users who won't use them, still load on explicit request
Curator can now prune unused built-in skills (not just agent-created), with usage tracked for every skill (#36701 — @teknium1)
Blank-slate skills — install --no-skills + opt-out/opt-in for the default profile (#36228 — @teknium1)
NVIDIA/skills trusted tap — NVIDIA/skills is now a default trusted Skills Hub tap alongside OpenAI/Anthropic/HuggingFace; skills.sh.json sidecar gives taps real category labels (#34333 — @teknium1)
Skills Hub: fix browse cap, add source links + copy buttons + category cleanup (#37143 — @teknium1)
New optional skills: grok (xAI Grok Build CLI), antigravity-cli operator (under autonomous-ai-agents) (#34582, #34583, #34604 — @teknium1)

📱 Messaging Platforms (Gateway)

Structured stream-event protocol + Telegram draft formatting parity; per-platform streaming defaults (Telegram on, Discord off) + dashboard toggles; surface gateway streaming block in DEFAULT_CONFIG (#37250, #37303, #37285 — @teknium1)
Discord voice-channel mixer — ambient idle bed + verbal acks that overlap TTS; explain /voice usage when toggled bare (#39659, #39766 — @teknium1)
Handle Feishu meeting invitations; bluebubbles group mention gating; matrix bang-command aliases; matrix fail-closed approval reaction auth (#39040, #37091, #38175 — @teknium1, @alt-glitch, #34567)
Clean service restart flow; close ResponseStore + dispose unowned adapter on reconnect failure; weixin asyncio.wait_for timeouts (#36188 — @helix4u, #37679 — @Fearvox, #35117 — @banditburai)

🖥️ CLI, TUI & Setup

Configurable default interface (cli vs tui) + --cli flag; TUI single /model command + unified Sessions overlay; nudge toward /agents dashboard when delegation starts (#37782, #37112 — @OutThisLife, #34704 — @kshitijk4poor)
Thin out setup — Quick Setup via Nous Portal + Full Setup defaults; explain Quick vs Full inline; hermes portal human-readable Portal onboarding alias + full quick-setup Nous flow (#35723, #36227, #38449, #38465 — @teknium1, @kshitijk4poor)
Set process title to hermes in ps/top/htop; warn on unsupported pip installs + fix stale update-check cache (#35143, #34846 — @teknium1)
TUI perf: stop slow/dead MCP servers from freezing startup; stop eager MCP discovery from blocking agent-capable startup; stop persisting full tool output in trail lines (silent OOM) (#35273, #35397, #38224 — @teknium1)
TUI fixes: auto-recover session on unexpected gateway death; reassemble split SGR mouse sequences; preserve UTF-8 in PowerShell clipboard; reset terminal input modes on exit; /save snapshots under Hermes home (#35893, #38564 — @OutThisLife, #35222 — @teknium1, #36864 — @maxmilian, #38251 — @austinpickett)
Setup model/provider pickers migrated off simpletermmenu to curses (ESC + ghost-row fixes); default browser/TTS picker to free local backend, not paid Nous (#35806, #37800 — @teknium1)

🔧 Tool System & Installer

single managed-uv path, delete fts5 installer escalation; installer commit pinning opt-in (default branch-follow); shallow clones (#37660 — @ethernet8023, #37123 — @jquesnelle, #39423 — @ethernet8023)
ensure_uv() survives the update boundary (no first-run crash); harden venv rebuild + verify core deps after install; require managed marker before destructive clean; stash/restore by default for non-interactive updates (#39780 — @OutThisLife, #38887, #39568, #39645 — @teknium1, @helix4u)
MCP: stop reporting false OAuth success when no token was obtained; vision honors model.supportsvision in visionanalyze + browservision; MiniMax t2av2 TTS raiseforstatus (#34807, #34562, #39057 — @teknium1)
yuanbao: cache resolved media resources by resourceId (#34474 — @teknium1)

🐳 Docker & Deployment

Container reuse + bounded-sync cleanup + orphan reaper; auto-join Docker socket group for docker-in-docker backend; boot non-root containers (skip s6-setuidgid drop when already unprivileged) (#33645, #34407 — @benbarclay, #34837 — @IAvecilla)
Skip unnecessary boot chown when volume ownership matches remapped UID; seed gatewaystate.json from HERMESGATEWAYBOOTSTRAPSTATE on first boot; tag containers with hermes-agent labels for identification (#35027 — @Foldblade, #37896 — @benbarclay)
Point TUI launcher at prebuilt bundle via HERMESTUIDIR; consolidate node/nix workspace lockfile + update all consumers (#37923, #36171 — @benbarclay, @ethernet8023)

🔒 Security & Reliability

CVE-2026-48710 (Starlette BadHost) — pin patched Starlette ≥1.0.1 (#35118 — @teknium1)
Run URL SSRF checks off the event loop in async paths; strip Bedrock inference bearer token from subprocess env; add bws_cache.json to file-safety read guard; neutralize file paths in mutation-verifier footer (#39046, #34498, #34421, #35684 — @teknium1)
Restore approval/sudo context in executecode + guard entry points; add docker restart/stop/kill to DANGEROUSPATTERNS; sanitize invisible unicode in vetted skill content; deepcopy tools before in-place xAI mutation (#34497, #33438 — @teknium1, @Sarbai, #37245, #34416)
Sandbox-mirror soft guard for writes to per-task .hermes mirrors; honcho fail-open on startup (#32213 — @briandevans, #24847 — @stephenschoettler)

🐛 Notable Bug Fixes

399 issues closed this window (2 P0, 62 P1, 16 security-tagged, 262 bug-labeled).
Desktop: keep in-flight new chats from vanishing on refresh; Stop button actually interrupts when a turn is queued; stop background session messages bleeding into the active transcript; slash/@ completion menu navigable & Esc-dismissable; IME Enter no longer splits messages (#37908 — @OutThisLife, #37948, #37975, #37937 — @kshitijk4poor, #38333 — @stremtec)
Update: stop stash/restore from clobbering desktop source on managed clones; don't fail desktop rebuild/skills sync on mid-rebuild venv; export launcher virtualenv to uv (#38542, #38885, #35224 — @teknium1)
Voice: honor PIPEWIRE_REMOTE in PortAudio fallback; allow /voice over SSH when a sound server is reachable; restore mistralai (2.4.8 clean, ban lifted) (#33473 — @Dusk1e, #35719, #34841 — @teknium1)

📚 Documentation

New Desktop App guide + remote-backend sections (session token, --tui requirement, username/password connect, dashboard/gateway prerequisites) (#37457, #38144, #38180, #38534, #39128 — @teknium1)
Dashboard auth-provider suitability + registration across dashboard/Docker/Desktop; network egress isolation guide for Docker (#39633 — @benbarclay, #26385 — @Manzela)

!Hermes Agent v0.16.0 — The Surface Release

👥 Contributors

A huge thank-you to the 170 community contributors (including co-authors) who shipped work in this release.

Core

@teknium1

Top community contributors (by merged-PR count)

@OutThisLife (52) — built the desktop app end to end: install, self-update, remote-gateway connect, multi-profile sessions, chat UX, status-bar model picker
@benbarclay (44) — Docker hardening, dashboard auth (OIDC, username/password, refresh-token rotation), desktop OAuth remote connect
@kshitijk4poor (29) — fuzzy model picker, setup/portal onboarding, desktop completion-menu & Stop-button fixes, honcho hardening
@ethernet8023 (18) — desktop build pipeline (content-hash stamp, build flags), Linux/arm64 desktop support, managed-uv consolidation
@austinpickett (8) — dashboard nous-blue theme + bulk sessions, desktop Providers settings, GUI QoL triage
@alt-glitch (7) — Nous tool-pool entitlement surfacing, FAL video-gen managed gateway, supermemory session ingest, matrix aliases
@helix4u (6) — gateway service-restart flow, update destructive-clean guard, config prefill alignment
@jquesnelle (4) — installer commit-pinning opt-in, desktop skills/tools + model-management consolidation
@JimLiu — full Simplified Chinese (简体中文) desktop translation + typed i18n layer

All Contributors

@0xharryriddle, @a1245582339, @adybag14-cyber, @AhmetArif0, @alaamohanad169-ship-it, @alelpoan, @alt-glitch,
@Aman113114-IITD, @amathxbt, @aminvakil, @annguyenNous, @aqilaziz, @Archerouyang, @ashishpatel26, @asimons81,
@austinpickett, @banditburai, @baofuen, @Bartok9, @bbednarski9, @beardthelion, @bedirhancode, @benbarclay,
@benfrank241, @blackpilledsoftware-prog, @bluefishs, @brian-doherty, @briancl2, @briandevans, @BROCCOLO1D,
@caojiguang, @CharZhou, @counterposition, @coygeek, @CryptoByz, @davetist, @davidgut1982, @dchenk, @dirtyren,
@donovan-yohan, @dparikh79, @dskwe, @Dusk1e, @dvir-pashut, @EloquentBrush0x, @emozilla, @ErnestHysa, @Erosika,
@ethernet8023, @f3rs3n, @faisfamilytravel, @Fearvox, @ferminquant, @fesalfayed, @firefly, @flooryyyy,
@Foldblade, @Frowtek, @gbarany, @Glucksberg, @GodsBoy, @haran2001, @harjothkhara, @HashClawAI, @hayka-pacha,
@helix4u, @HeLLGURD, @Hinotoi-agent, @hllqkb, @IAvecilla, @inchargeautomation-lab, @Interstellar-code, @isair,
@ITheEqualizer, @jeffrobodie-glitch, @JezzaHehn, @JimLiu, @Julientalbot, @julio-cloudvisor, @karmeleon,
@Kenmege, @Kewe63, @Kolektori, @konsisumer, @kshitijk4poor, @kurobaryo, @kweiner, @kyssta-exe, @Kyzcreig,
@LengR, @leonardsellem, @LeonSGP43, @libre-7, @liuboacean, @liuhao1024, @loongzhao, @luyao618, @MaheshtheDev,
@Manzela, @mathijsvandenhurk, @MattMaximo, @maxcz79, @maxmilian, @Moikapy, @MustafaKara7, @nateGeorge,
@nepenth, @nielskaspers, @ninjmnky, @octavioturra, @OCWC22, @ohMyJason, @ousiaresearch, @outsourc-e,
@OutThisLife, @Pluviobyte, @polnikale, @pxdsgnco, @Que0x, @r266-tech, @redpiggy-cyber, @rewbs, @rexdotsh,
@rob-maron, @SaguaroDev, @sahibzada-allahyar, @Sarbai, @sarvesh1327, @scubamount, @SeaXen, @seppegadeyne,
@shannonsands, @SHL0MS, @SimoKiihamaki, @SiTaggart, @solaitken, @sprmn24, @stephenschoettler, @steveonjava,
@stremtec, @Subway2023, @sweetcornna, @Sylw3ster, @ThyFriendlyFox, @tillfalko, @tmchow, @TonyPepeBear,
@Tranquil-Flow, @truenorth-lj, @tuancookiez-hub, @Twanislas, @tymrtn, @uzunkuyruk, @ViewWay, @VinciZhu,
@vinoth12940, @vladkvlchk, @vynxevainglory-ai, @WadydX, @wenchengxucool, @whyhkzk, @worlldz, @Wysie, @x1am1,
@xxxigm, @ygd58, @youngstar-eth, @zapabob, @zhaoleibd, @Zyrixtrex

Full Changelog: v2026.5.29.2...v2026.6.5

v2026.5.29.2 [May 29, 2026] (4mo ago) details → github →

# Hermes Agent v0.15.2 (2026.5.29.2)

Hermes Agent v0.15.2 (v2026.5.29.2)

Release Date: May 29, 2026

🐛 Bug Fixes

Packaging): ship bundled plugin.yaml manifests in wheel and sdist (827f7f07)

👥 Contributors

Thank you to everyone who contributed to this release!

@outsourc-e (1 commit)
@dparikh79 (1 commit)
@ousiaresearch (1 commit)
@libre-7 (1 commit)

Full Changelog: v2026.5.29...v2026.5.29.2

v2026.5.29 [May 29, 2026] (4mo ago) details → github →

# Hermes Agent v0.15.1 (2026.5.29) — The Patch Release

Hermes Agent v0.15.1 (v2026.5.29)

Release Date: May 29, 2026 Since v0.15.0: 28 commits · 21 merged PRs · hotfix release · 9 contributors

> The Patch Release. A same-day hotfix for v0.15.0. Headline fix: the dashboard infinite-reload loop that hit anyone running v0.15.0 in loopback mode (Docker, hosted Hermes, fresh installs). A handful of other v0.15.0 follow-ups go along for the ride — kanban worker SIGTERM, /model picker unification, /yolo session bypass, the full 19,932-entry skills.sh catalog, .md media delivery restoration, gateway probe-stepdown safety, web-URL redaction passthrough, kanban worker vision on referenced images, hindsight observation-default. Docker users get an explicit --insecure opt-in env var (no more bind-host inference), MCP server bare-command PATH resolution, and arm64 PR-build cache fixes.

✨ Highlights

Dashboard 401 reload loop fixed — In loopback mode the dashboard's identity probe (/api/auth/me) returns 401 by design, but v0.15.0's stale-token reload guard treated every 401 as a rotated session token and full-page-reloaded to pick up a fresh one. Every successful sibling call cleared the one-shot reload guard, so the page reload-looped forever (Firefox: "Navigated to /sessions" storm; Chrome: React re-render storm). Fix adds an allowUnauthorized opt-out to fetchJSON that skips only the loopback stale-token reload — 401 still throws so AuthWidget swallows it, gated-mode login_url redirects are unaffected. Closes #34206, #34202. (#30698 — @austinpickett)

Docker dashboard --insecure is now an explicit env opt-in, never derived from bind host — Previously the Docker entrypoint inferred --insecure when the dashboard bound to a non-loopback host. That conflated "I want LAN access" with "I want to disable the same-origin guard." The fix splits them: bind host is bind host, and disabling the dashboard's loopback auth requires an explicit HERMESDASHBOARDINSECURE=1. Existing setups that genuinely wanted insecure binding must now set the env var. (#34188, #34204 — @benbarclay)

MCP bare command resolution under Docker — MCP servers configured with bare commands (npx, npm, node) now resolve against /usr/local/bin so they actually launch inside the Docker image where those binaries live. v0.15.0 left these failing silently in containers when the agent's effective PATH didn't include the Node toolchain location. (#34186 — @benbarclay)

Skills page sidebar / source pills restored — A stale useMemo dependency in the new dashboard skills page collapsed the source pills and category sidebar to "All" only. Fixed; both surfaces now reflect the live catalog state. (#34194)

Kanban worker can be killed again — SIGTERM on a kanban worker was being absorbed by an intermediate process and the worker stayed running. Closes #28181. (#34045)

Full skills.sh catalog (858 → 19,932 entries) — The skills hub page was pulling a partial paginated catalog. The fetch now walks the sitemap, so all 19,932 skills.sh entries surface in the picker instead of just the first 858. (#34025)

🐛 Bug Fixes

Dashboard / Web

/api/auth/me 401 no longer triggers reload loop in loopback mode — (#30698 — @austinpickett)
Skills page source pills + category sidebar restored — stale useMemo dep (#34194)

Docker

--insecure is now explicit opt-in via env var, not derived from bind host (#34188 — @benbarclay)
Dashboard test suite repaired to match the insecure-opt-in fix (#34204 — @benbarclay)
arm64 PR builds skip the GHA cache to avoid cache-thrash on cross-arch builders (#33704 — @BROCCOLO1D)

MCP

Bare npx/npm/node resolve against /usr/local/bin for Docker compatibility (#34186 — @benbarclay)

Kanban

Worker SIGTERM actually terminates the process (#34045)
Workers receive images referenced in task bodies for vision-capable models (#34210)

Gateway

.md files deliver again — media-delivery validation defaults to denylist-only instead of an overly-narrow allowlist (#34022)
Probe stepdown safety — on a context-overflow without an explicit provider context limit, the agent no longer steps down to a smaller model based on an unknown ceiling (salvage of #33673) (#33826)

CLI

/yolo mid-session enables the per-session bypass instead of just toggling the env var (which the running agent had already snapshotted) (#33931 — @kshitijk4poor)
/model and hermes model show the same list, plus disk cache for picker startup (#33867)

Skills

Full skills.sh catalog via sitemap — 858 → 19,932 entries (#34025)

Redaction

Web URLs pass through unchanged — the redactor was eating query parameters that looked credential-shaped (#34029)

✨ Small Features

Hindsight default narrowed to observation-only for recall_types — tool path is also narrowed (#34079 — @nicoloboschi, follow-up #34091 — @kshitijk4poor)
Memory providers receive completed-turn message context — salvage of #28065 (#34097 — @kshitijk4poor, credit to @devwdave)

📚 Documentation

--no-supervise / HERMESGATEWAYNO_SUPERVISE documented in the reference docs (follow-up to #33583) (#33751 — @r266-tech)

🛠️ Infrastructure

Vercel deploy workflow accepts workflow_dispatch so docs deploys can be manually triggered (#34081)
@nous-research/ui bumped to 0.18.2 (Nix npmDepsHash also updated to match) (#34193 follow-ups — @austinpickett)

👥 Contributors

Core

@teknium1

Community

@austinpickett — dashboard 401 reload-loop fix (the headline), @nous-research/ui bump, Nix npmDepsHash updates
@benbarclay — Docker --insecure opt-in, MCP bare-command resolution, dashboard test repair
@kshitijk4poor — /yolo session bypass, completed-turn memory context salvage, hindsight follow-up docs
@nicoloboschi — hindsight recall_types observation default
@BROCCOLO1D — arm64 PR build cache fix
@r266-tech — --no-supervise reference docs
@yangguangjin — probe stepdown safety (salvage of @yanghd's #33673)
@devwdave — completed-turn memory context (credited via salvage)
@andrewhosf — co-author

Issue Reporters (the 401 loop)

@routesmith (#34206)
@beeaton (#34202)

Full Changelog: v2026.5.28...v2026.5.29

v2026.5.28 [May 28, 2026] (4mo ago) details → github →

# Hermes Agent v0.15.0 (2026.5.28) — The Velocity Release

Hermes Agent v0.15.0 (v2026.5.28)

Release Date: May 28, 2026 Since v0.14.0: 1,302 commits · 747 merged PRs · 1,746 files changed · 282,712 insertions · 36,699 deletions · 560+ issues closed (15 P0, 65 P1, 19 security-tagged) · 321 community contributors (including co-authors)

> The Velocity Release. Hermes gets dramatically faster — to start, to run, to ship work, and to grow. The 16,083-line runagent.py collapses to 3,821 (-76%) across 14 cohesive agent/* modules. Kanban grew into a real multi-agent platform across 104 PRs — orchestrator auto-decomposition, swarm topology, scheduled tasks, worktree-per-task, per-task model overrides. The cold-start perf wave keeps going: another second shaved off launch, 47% fewer per-conversation function calls, hermes --version flipping the head-to-head benchmark against Codex CLI. sessionsearch is 4,500× faster and free now. Promptware defense lands against Brainworm-class attacks. Bitwarden Secrets Manager replaces N per-provider API keys with one bootstrap token. Skill bundles let one slash command load a whole workflow. The Ink TUI gets a multi-session orchestrator. Two new imagegen providers (Krea 2 Medium + Large, FAL ported to plugin), the Nous-approved MCP catalog with an interactive picker, an OpenHands orchestration skill, ntfy as the 23rd messaging platform, and a deep xAI integration round (Web Search plugin, xai-oauth hermes proxy upstream, retired-May-15 model detection + hermes migrate xai, natural TTS speech-tag pauses, baseurl leak guard, OpenAI-style execution guidance for Grok). 15 P0 + 65 P1 closures alongside.

✨ Highlights

The Big Refactor — run_agent.py is no longer 16,000 lines — The file at the heart of Hermes — the agent conversation loop — has been reduced from 16,083 lines to 3,821 (-76%), with the extracted code redistributed across 14 cohesive modules under agent/. Behavior is unchanged: every extraction keeps a thin forwarder on AIAgent, every test patch path still works, every external caller is compatible. The reason you care: future Hermes development moves faster, plugin authors can finally grep the codebase, and the file that took 90 seconds to load in your editor opens in a blink. (#27248)

Kanban grew into a real multi-agent platform — 104 PRs end to end — Triage auto-decomposes one task into a tree of sub-tasks. hermes kanban swarm creates a full Swarm v1 graph in one command — root, parallel workers, gated verifier, gated synthesizer, shared blackboard. Tasks support per-task model overrides (cheap models for boilerplate, expensive ones for hard sub-tasks), board-level default workdirs, per-task worktree paths and branches, scheduled start times, configurable claim TTL, retry fingerprinting, stale-task detection, respawn guards, and a drag-to-delete trash zone. Workers report through /workers/active, /runs/{id}, and /inspect endpoints. (#27572, #28443, #28364, #28394, #28462, #28384, #28467, #28455, #28452, #28432, #28468, #28420)

Cold-start perf wave keeps going — another second saved, 47% fewer per-turn function calls — Three new optimization rounds: defer openai.baseclient import (-240ms / -17MB on every CLI invocation), hot-path optimizations cut 47% of per-conversation function calls (399k → 213k for 31-turn chat), defer compression-feasibility check (-170 to -290ms on every agent construction), adaptive subprocess polling (-195ms per tool call, 1+ second per turn). Termux cold start drops from 2.9s to 0.8s. hermes --version cold drops 63% (701ms → 258ms), flipping the head-to-head benchmark against Codex CLI from 5/11 wins to 6/11. (#28864, #28866, #28957, #29006, #29419, #30121, #30609, #31968)

sessionsearch rebuilt — no LLM, no cost, 4,500× faster — The old sessionsearch was an aux-LLM-powered tool that cost ~$0.30/call and took ~30 seconds to summarize three sessions, sometimes confabulating when the right session wasn't even in the FTS5 hit list. The new shape is one tool with three modes (discovery, scroll, browse) inferred from which args are set — no mode parameter, no aux-LLM, no config knob, no companion skill. Discovery is ~20ms instead of ~90s; scroll is ~1ms. Searching your past sessions for context is now free and instant. (#27590)

Promptware defense — Brainworm-class attacks blocked at three chokepoints — Inspired by recent Brainworm / Promptware Kill Chain research (Origin HQ, arxiv 2601.09625), Hermes now defends the context window against prompt-injection attacks that try to hijack the agent via tool output, recalled memory, or stored skills. Single source of truth (tools/threat_patterns.py) with ~15 new Brainworm/C2 patterns; recalled memory is scanned at load time; tool results get delimiter markers so a malicious file or remote service can't impersonate Hermes' own system content. Paired with a new security-guidance plugin that pattern-matches dangerous code writes. (#32269, #33131, #9151)

Bitwarden Secrets Manager — one bootstrap token replaces every per-provider API key — Stop keeping plaintext API keys in ~/.hermes/.env. Install Bitwarden Secrets Manager (bws auto-installs lazily on first use), point Hermes at it with one bootstrap token (BWSACCESSTOKEN), and every credential you need comes from Bitwarden at startup. Rotate a key in the Bitwarden web app and the rotation actually takes effect — Bitwarden defaults to source-of-truth so its values overwrite matching env vars on startup. Flip secrets.bitwarden.override_existing: false to invert. EU Cloud and self-hosted Bitwarden server URLs supported. Detected credentials are now labeled with their source so you can see at a glance which keys came from Bitwarden vs. the local env. (#30035, #31378, #30364)

ntfy as the 23rd messaging platform — push notifications without an account — ntfy is the self-hostable push-notification service with no signup, no API key, just a topic URL. Hermes now adapts to it as a platform plugin (zero edits to core), so your agent can send you push notifications from any cron job, kanban task completion, or chat send_message — to your phone, your watch, your desktop, your homelab. (salvages #30625 → originally #4043) (#30867)

Skill bundles — /<name> loads multiple skills at once — A skill bundle is a named group of skills that loads them all together with one slash command. Set up your "writing day" bundle (humanizer + ideation + obsidian + youtube-content) and /writing-day activates all four for the session. Skills Hub now has health checks, a freshness badge, and a watchdog cron. Three new optional skills land: code-wiki (Karpathy's LLM-Wiki, persistent indexed dev wiki), openhands (delegate to OpenHands for parallel coding agents), and web-pentest (OWASP-style web pentest recipes). (#28373, #32345, #32240, #32261, #32265)

TUI session orchestrator — multiple live sessions in one TUI window — The Ink TUI gained an active-session switcher overlay. List, switch between, refresh, and close multiple live process-local sessions without leaving the TUI; dispatch a new session with a session-scoped model picker. Plus a wave of TUI polish — mouse-tracking DEC mode presets, scrollback preservation across branches and termux, slash-dropdown fixes, x.com link rendering, and CJK / IME input rendering improvements. (salvages #27642) (#32980, #30084)

Two new imagegen providers — Krea 2 Medium + Large, FAL ported to plugin — Krea joins the imagegen lineup as a built-in plugin: Krea 2 Medium ($0.03) and Krea 2 Large ($0.06), auto-discovered, selectable via hermes tools → Image Generation → Krea. Available through both the native Krea plugin and the FAL.ai catalog. The FAL.ai backend got pulled out of the monolithic image-generation tool into plugins/imagegen/fal/, completing the four-way architectural parity already established by web, browser, and videogen — new image providers are now one file, not a fork. (#33236, #30380, #33506)

Nous-approved MCP catalog with interactive picker — A curated catalog of Nous-vetted MCP servers, mirroring the optional-skills shape. Run hermes mcp and you get an interactive picker; install with one keystroke, credentials prompted at install time and written to ~/.hermes/.env. Ships with the n8n manifest first. Closes the discovery gap that left users hunting GitHub for trusted MCP servers. (#30870)

OpenHands orchestration skill — A new optional skill under optional-skills/autonomous-ai-agents/openhands/ lets the agent delegate coding tasks to the OpenHands CLI alongside claude-code, codex, and opencode. OpenHands is the model-agnostic member of that family — any LiteLLM-supported provider works (OpenAI, Anthropic, OpenRouter, your own), so you can route a sub-task to the cheapest model that can finish it. Drop-in worker for kanban swarms and /delegate flows. (closes #477) (#32261)

Deep xAI integration round — Web Search plugin, OAuth proxy upstream, May 15 retirement detection, natural TTS, security hardening — Six interlocking xAI improvements:
xAI Web Search lands as a plugins/web/xai/ provider, slots alongside Brave / Tavily / Exa / SearXNG / DDGS / Firecrawl — reuses your existing Grok OAuth or XAIAPIKEY credentials, no new env vars. (#29042)
hermes proxy gains an xAI upstream — your local OpenAI-compatible endpoint can now be backed by SuperGrok OAuth, no PKCE-refresh code to write in your client. (#28356)
May 15 model retirement detection — grok-4, grok-4-fast{,-reasoning,-non-reasoning}, grok-3, grok-code-fast-1, grok-imagine-image-pro etc. are detected in doctor and chat startup, with hermes migrate xai to one-shot config migration to the supported model. No more silent 404s after the retirement date. (#29277)
Opt-in autospeechtags for xAI TTS — inserts light [pause] tags between paragraphs and sentences for more natural-sounding voice replies. Default OFF. (#29376)
xai-oauth baseurl pinned to x.ai origin — closes a silent credential-leak vector where XAIBASE_URL could repoint OAuth-authenticated inference to an attacker-controlled host. (#28952)
OpenAI-style execution guidance applied to Grok models — Grok and xai-oauth now get the same family-specific execution discipline block GPT/Codex have, so the model stops claiming completion without tool calls and stops suggesting workarounds instead of using existing tools. (#27797)
Plus xsearch degraded-results surfacing, tier-gated 403 with API-key fallback, PKCE codechallenge round-trip fix, dead-token quarantine on terminal refresh failure, MiniMax-style short-token refresh on per-request, and WKE=unauthenticated honor at both classifier sites. (#29484, #28351, #27560, #28116, #30619, #30872)

🏗️ Core Agent & Architecture

The Big Refactor — `run_agent.py` 16k → 3.8k

runagent.py from 16,083 → 3,821 lines (-76%), extracted into 14 cohesive agent/* modules. runconversation alone was 3,877 lines before the refactor. Every extraction keeps a thin forwarder on AIAgent, every test-patch path is preserved, every external caller stays compatible. (#27248)

Agent loop & conversation

Auxiliary task layered fallback (primary → chain → main agent → graceful fail) on capacity errors (402/429/connection). (salvages #26811 + #26998) (#27625)
Buffer retry/fallback status; surface only on terminal failure (no more noisy "retrying..." spam in mid-run output). (#33816)
Host contract for external context engines — condenses 5 prior PRs into one extension surface. (#33750)
Fallback immediately on provider content-policy blocks. (#33883)
Re-pad reasoning_content on cross-provider fallback to require-side providers. (salvage #33784) (#33795)
Per-turn tool-outcome verifier — patch tool gets indent preservation, CRLF preservation, per-file failure escalation. (#32273)
Single-knob native vision for custom-provider models. (#29679)
Background review fork isolated from external memory plugins. (#27190)
Background review inherits parent toolset config for tools[] cache parity. (#29704)
Recover from providers returning list-type tool content. (#30259)
Treat partial-stream stub responses as length truncation rather than clean stop. (#30998)
OpenAI execution guidance applied to xAI Grok / xai-oauth. (#27797)
ContextVars propagate to concurrent tool worker threads.
Preload jiter native parser. (#33692)
Expose context engine tools with saved toolsets. (salvage of #31194) (#33719)

Sessions & memory

session_search rebuilt — single-shape (discovery + scroll + browse), no aux-LLM, ~20ms vs. ~90s. (#27590)
Salvage #29182 — opt-in JSON snapshot writer for sessions. (#29278)
Persist platformmessageid for recall across gateway restarts. (#29449)
Inline memory-context mentions stay visible in conversation. (#28132)
Recalled memory labeled informational, not authoritative. (#28583)
Memory + context-engine tool injection gated on enabled_toolsets. (#30177)
Guard against external drift in MEMORY.md / USER.md. (#30877)
Honcho runtime peer mapping — correctness follow-ups + setup wizard + docs. (#30077)
Periodic memory logging for leak detection. (salvage of #17667) (#27102)

Codex / Responses-API maturation

TTFB watchdog for stalled Codex Responses streams. (#32042)
Actionable hint when stale-call detector fires on known silent-reject pattern. (#32016, #33133)
Drop SDK responses.stream() helper; consume events directly. (#33042)
Gracefully recover from invalidencryptedcontent. (salvage of #10144) (#33035)
Recover Codex Responses streams with null output. (#32963, #33390)
Drop foreign-issuer reasoning and transient rs_tmp reasoning replay state. (#33156, #33146)
Codex 429 quota classified as rate-limit, not missing credentials. (#33168)
Codex chat path falls back to credential_pool when singleton is empty. (#33189)
Codex re-auth syncs credential_pool. (#33164)
Omit tools key when no tools registered. (#33409)
Parse Codex image-generation SSE directly. (#32933)

🎛️ Kanban — Multi-Agent Maturation Wave

Orchestration & dispatch

Orchestrator-driven auto-decomposition on triage. (#27572)
Kanban swarm topology helper — hermes kanban swarm creates a Swarm v1 graph (root + parallel workers + gated verifier + gated synthesizer + shared blackboard). (salvages #26791 by @Niraven) (#28443)
Dispatcher wires review agents from the review column. (#28449)
Stale-detection for running tasks in dispatcher. (#28452)
Respawn guard blocks repeat worker storms. (#28455)
Respawn guard defers blocker_auth instead of auto-blocking. (#28683)
Cross-profile cron jobs surface in dashboard. (#28457)
Worker visibility endpoints: /workers/active, /runs/{id}, /inspect. (salvages #23761 by @Interstellar-code) (#28432)

Task configuration & scheduling

Per-task model override. (#28364)
Board-level default workdir. (#28394)
Configurable worktree paths and branches. (#28462)
Scheduled task start times. (#28384)
Scheduled status for delayed follow-ups. (#28467)
Trimmed task comments. (#28399)
Initial-status for human-ops cards. (#28414)
maxinprogress config to cap concurrent running tasks. (#28420)
Filter tasks by workflow fields. (#28454)
--sort for hermes kanban list. (#28427)
Optional board parameter on all MCP tools. (#28444)
Stamp originating ACP session_id on tasks. (#28447)
autopromotechildren config toggle. (#28344)
archive --rm to hard-delete archived tasks. (#28355)
Promote dependents when parent is archived. (#28372)
Promote blocked tasks when parent dependencies complete. (#28377)
Demote ready children when parent is reopened. (#28382)
promote verb for manual todo→ready recovery + bulk --ids. (salvage #29464) (#31334)

Dashboard

Drag-to-delete trash zone + bulk delete. (#28468)
Surface per-task model_override in show + tool output. (#28442)
Cross-profile notification delivery via kanban.notification_sources. (#28395)
Scratch-workspace deletion warning for users. (#30949)
Mobile dashboard UX polish. (#28127)

Reliability

Worker log retention configurable. (#27867)
Configurable claim TTL. (#28392)
Fingerprint crash errors to prevent fleet-wide retry exhaustion. (#28380)
Reset failure counters on unblock_task. (#28379)
Detect cycles in decomposetriagetask sibling-link pre-validation. (#28088)
Surface unusable triage auxiliary model (auto-decompose aware). (#27871)
Align failure diagnostics with retry limit. (#27868)
Align worker terminal timeout with task runtime. (#27864)
Auto-install bundled skills (kanban-worker) on init. (#28368)
Make legacy task migration idempotent. (#28397)
Serialize DB initialization. (#28383)
Persist worker session metadata on completion. (#28387)
Pass accept-hooks to worker chat subprocess. (#28393)
Preserve worker tools with restricted toolsets. (#28396)
Avoid unsafe Windows worker Hermes shim resolution. (#28398)
Sync slash subcommands with live parser. (#28376)
Show scheduled kanban tasks in dashboard. (#28400)
Assign single-task kanban decompositions. (#28401)
Configurable max_tokens for kanban specify. (#28374)
Per-job profile support for cron. (#28124)
Codex app-server: include every Kanban-pinned path in writable_roots. (#28435)
Cache kanban worker guidance at session init for prompt-cache reuse. (#28425)

⚡ Performance

openai.baseclient import deferred — 240ms / 17MB off every CLI cold start. (#28864)
Agent-loop hot-path optimizations — 47% fewer per-conversation function calls (399k → 213k for 31-turn chat). (#28866)
Compression-feasibility check deferred — 170-290ms off every agent construction. (#28957)
Adaptive subprocess poll — ~195ms off every tool call, 1+ second per turn. (#29006)
Termux TUI cold start speedup. (#29419)
Termux non-TUI cold start speedup. (salvage #29438) (#30121)
Termux fast-path version + deferred bare-prompt agent startup. (#30609)
Cut hermes --version wall time 63% — flips head-to-head vs Codex CLI. (#31968)
Date-only timestamp + loud gateway-DB roundtrip logging — improves prompt-cache hit rate. (#27675)
Cache kanban worker guidance at session init for prompt-cache reuse. (#28425)

🔧 Tool System

Tool surface

patch: indent preservation, CRLF preservation, per-file failure escalation. (#32273)
terminal: warn at call time when background=true runs silently. (#31289)
terminal: nudge homebrewed CI pollers at the tool surface. (#33142)
x_search: surface degraded results + validate dates. (#29484)
x_search: auto-enable toolset when xAI credentials are configured. (#27376)
computer_use: route SOM/vision captures via auxiliary.vision. (#30126)
transcription: reject symlinked audio inputs. (#10082)
TTS: prevent double [pause] in xAI auto speech tags. (#32237)
TTS: preserve native audio outside Telegram voice delivery. (#28512)
TTS: opt-in xAI autospeechtags speech-tag pauses for natural voice replies. (#29376)
Voice: chunk oversized CLI recordings. (#30044)
Voice: honor PULSESERVER / PIPEWIREREMOTE inside Docker. (#22534)

Browser

All cloud browser providers (Browserbase, Anchor, Camofox, Hyperbrowser, etc.) migrated to image_gen-style plugins. (salvages #25580) (#27403)
Auto-launch Chromium-family browser for CDP. (#29106)
Docker: discover agent-browser Chromium binary at boot. (#33184)

Image generation

Krea provider plugin (Krea 2 Medium + Large). (#33236)
FAL backend ported to plugins/image_gen/fal. (salvage #27966) (#30380)
Cache xAI ephemeral URL responses to disk. (#31759)

Web search

xAI Web Search as a provider plugin. (#29042)

MCP

Nous-approved MCP catalog with interactive picker. (#30870)
TLS client certificate (mTLS) support for HTTP and SSE MCP servers. (#33721)
Stdin paste-back fallback for headless OAuth flow. (#32053)
skip at paste prompt bypasses auth without disabling server. (#32069)
Registry-aware mcp_ prefix on both ends of round-trip. (#31700)

🧩 Skills Ecosystem

Skills system

Skill bundles — /<name> loads multiple skills. (#28373)
Skills Hub: health checks, freshness badge, and a watchdog cron. (#32345)
Opt-in AST deep diagnostics on skill writes. (salvage of #30918) (#31198)
Bundled/pinned skill protection in background-review prompts. (#28338)
Show user-modified skill names in bundled skill sync summary. (#28671)
Load symlinked skill slash commands. (#27759)
Deduplicate Skills Hub search results by identifier, not name. (#29490)

New skills

openhands — delegate-to-OpenHands orchestration skill (closes #477) (#32261)
code-wiki — persistent indexed dev wiki (closes #486) (#32240)
web-pentest — OWASP recipes (closes #400) (#32265)
baoyu-article-illustrator (#28287)

☁️ Providers

xAI deep integration

xAI Web Search as a plugins/web/xai/ provider plugin. (#29042)
hermes proxy xAI upstream — OpenAI-compatible local proxy backed by xai-oauth. (#28356)
May 15 model retirement detection + hermes migrate xai for grok-4 / grok-3 / grok-code-fast-1 / grok-imagine-image-pro. (#29277)
Opt-in autospeechtags for natural xAI TTS voice replies. (#29376)
xai-oauth base_url pinned to x.ai origin — closes silent credential-leak vector. (#28952)
OpenAI-style execution guidance applied to Grok / xai-oauth models. (#27797)
xAI: detect retired May 15 models in doctor/chat startup. (#29277)
xAI: resolve Grok Build context for OAuth. (#30579)
xAI OAuth: tier-gated 403 with API-key fallback. (#28351)
xAI OAuth: PKCE code_challenge echo. (#27560)
xAI OAuth: quarantine dead tokens on terminal refresh failure. (#28116)
xAI OAuth: honor WKE=unauthenticated disambiguator at both classifier sites. (#30872)
xAI OAuth: accept bare-code manual paste (state=None). (closes #26923) (#33880)
xAI OAuth: fall back to manual paste on loopback timeout. (#33231)
xAI proxy: handle 429 rate-limit responses in proxy retry path. (#33743)

Other providers

OpenAI API as a first-class provider (distinct from Codex runtime). (#31898)
Microsoft Entra ID auth for Azure Foundry (with 1M Anthropic-Messages beta preserved on Bearer). (salvages #27509, #27022) (#28101, #28084)
OpenRouter sticky routing — sessionid passed via extrabody so a long-running session keeps landing on the same upstream provider. (@Cybourgeoisie) (#33939)
Nous: JWT token for inference; stop replaying invalid Nous refresh tokens. (@rewbs) (#27663)
Nous Portal: one-shot setup, status CLI, and Nous-included markers. (#30860)
Anthropic adapter: extract 7 helpers from convertmessagesto_anthropic. (salvage #27784) (#30386)
Catalog: add qwen3.7-max to Alibaba + Alibaba-Coding-Plan model lists. (#33129)
opencode-go: route qwen3.7-max via anthropic_messages. (@beardthelion) (#32780)
opencode-go: expose Kimi K2 + DeepSeek reasoning controls. (#30845)
Remove Vercel AI Gateway and Vercel Sandbox.
MiniMax OAuth: refresh short-lived access tokens per request. (#30619)
Codex OAuth: quarantine terminal refresh errors. (#28118)
Codex: drop dead model slugs that HTTP 400 on ChatGPT Pro. (#33424)
Codex: sync manual:device_code pool entries on re-auth. (#33744)
MiniMax OAuth: quarantine terminal refresh errors. (#28119)

🔑 Secrets

Bitwarden Secrets Manager integration with lazy bws install. (#30035)
Bitwarden: EU Cloud + self-hosted server URL support. (#31378)
Label detected credentials with their source (Bitwarden). (#30364)

📱 Messaging Platforms (Gateway)

Gateway core

Deliverable mode — agents ship artifacts as native uploads from any platform (Slack/Discord/Telegram/Teams/Email). (#27813)
hermes send — pipe any script's output to any messaging platform. (salvage of #19631) (#27188)
Debounce queued text follow-ups during active sessions. (salvage of #31235) (#31341)
Plugin-transformed final_response delivered through streaming gate. (#31433)
Refresh cached agent tools on /reload-mcp. (#32815)
Harden kanban + provider cleanup races on long-running workloads. (#29479)

New / reorganized adapters

ntfy — 23rd platform, push notifications, plugin shape, zero core edits. (salvages #30625 → #4043) (#30867)
Discord adapter migrated to bundled plugin. (salvage of #24356) (#30591)
Mattermost adapter migrated to bundled plugin. (salvage of #30916) (#31748)

Edit status messages in place instead of appending. (based on #30141 by @qike-ms) (#30864)
Skip-STT audio path + 2GB cap via local Bot API server. (#28541)
Route image documents (.png/.jpg/.webp/.gif) through vision pipeline. (#28519)
Route audio file attachments away from STT pipeline. (#28478)
disabletopicauto_rename gateway flag. (#28523)
ignorerootdm config to drop messages without thread_id. (#28536)
Chat-scoped auth without sender user_id. (#28525)
Fail-closed auth fallback when TELEGRAMALLOWEDUSERS is empty. (#28494)
Roll over tool progress bubbles + scope audiofilepaths. (#28482)
Avoid duplicate text after auto-TTS voice replies. (#28509)
Mark final voice reply notify-worthy so Telegram delivers it audibly. (#28504)

Discord

Recover Windows voice opus decoding. (#33182)
allowanyattachment config to accept arbitrary file types. (#27245)
Transcribe native voice notes. (#28993)
Define UI view classes after lazy install. (#28817)

Signal / Matrix / Feishu / Slack / WeCom

Signal: require_mention filter for group chats. (#28574)
Matrix: warn on clock-skew silent message drops. (#27330)
Matrix E2EE installs full dep set; plugins respect is_connected. (#31688)
Feishu: require webhook auth secret + honor config extras. (#30746)
Feishu: enforce auth and chat binding for approval buttons. (#30744)
Slack: socket recovery + Windows restart dedupe. (#28873)
WeCom: safe-parse untrusted XML. (#32442)

DingTalk / Webhooks / Microsoft Graph

DingTalk: transcribe native voice notes. (#28993)
Webhook: enforce INSECURENOAUTH safety rail on dynamic route reloads. (#30863)
Webhook: restrict default toolset capabilities. (#30745)
Microsoft Graph: harden webhook auth requirements. (#30169)

🖥️ CLI & TUI

CLI

/update slash command in CLI and TUI. (#23854)
Update auto-rollback when post-pull syntax check fails. (#28669)
--branch flag for hermes update. (@jquesnelle) (#29591)
/exit --delete flag to remove session on quit. (salvage of #17665) (#27101)
▶ N indicator in status bar for running /background tasks. (#27175)
Live background terminal-process count in status bar. (#32061)
Append session recap to /status output. (salvage of #18587) (#27176)
Configurable paste-collapse thresholds (TUI + CLI). (salvage #29723) (#32087)
/resume accepts position numbers. (#31709)
Bring tool-call display back — verbose mode, specific failure reasons, todo progress. (#31293)
Validate runtime token refresh in Qwen auth status. (#31196)

TUI

TUI session orchestrator — multiple live sessions in one TUI window. (salvages #27642) (#32980)
mouse_tracking DEC mode presets. (salvage of #26681 by @OutThisLife) (#30084)
Termux scrollback preservation + touch-friendly defaults. (#28910)
Full assistant text in scrollback (no history truncation). (#28829)
Preserve scrollback when branching sessions. (#30162)
Preserve Python dunder identifiers in markdown. (#28582)
Active profile shown in TUI prompt. (#28581)
Improve Charizard completion menu contrast. (#28346)
Stop slash dropdown chopping last char of /goal. (#31311)
Clipboard copy on linux/wayland. (#29342)
Anchor splitReasoning unclosed-tag regex; stop eating last paragraph. (#29426)
Surface verbose tool details. (#30225)
Load Linux skills on Termux + salvage @adybag14-cyber's Termux gates. (#30166)
Handle images with codex app-server. (#31220)
Refresh virtual transcript on viewport resize. (#31077)
Ignore late thinking deltas after completion. (#31055)
Commit composer input bursts immediately. (#31053)
Log parent gateway lifecycle exits. (#31051)
Clear TTS env var on voice off + TTS indicator in status bar. (#30987)
Pass --expose-gc as node argv instead of NODE_OPTIONS. (#29998)
Align composer cursorLayout with wrap-ansi to kill multiline cursor drift. (#27489)
Harden Terminal.app rendering and color paths. (#27251)
Keep /goal verdict out of compact status row. (#27971)
Clamp curses color 8 for 8-color terminals (Docker). (#30260)

🔒 Security & Reliability

Promptware & memory hardening

Promptware defense — shared threat patterns + memory load-time scan + tool-result delimiters. (#32269)
Expand memory content scanning patterns to parity with skills guard. (#9151)
Harden Skills Guard multi-word prompt patterns. (@YLChen-007) (#26852)
Split cron scanner so skill prose stops false-positiving exfil patterns. (#32339)

File safety

Protect Hermes control-plane files from prompt injection (auth.json, config.yaml, webhook_subscriptions.json, mcp-tokens/). (salvages @PratikRai0101's #14157) (#30397)
Write-deny <root>/.env when running under a profile. (#29687)
Defense-in-depth read-deny on credential stores. (salvages #17659 + #8055) (#30721)
TTS output_path traversal + update ZIP symlink reject. (salvage #6693 + #15881) (#32056)
Reject symlinked audio inputs. (#10082)

Credential safety

Avoid persisting borrowed credential secrets — runtime env-sourced keys no longer leak into auth.json. (#31416)
Validate Nous Portal inferencebaseurl against host allowlist. (salvages #27612) (#30611)
Harden API server key placeholder handling. (#30738)
Harden Google Chat OAuth credential persistence. (@Zyrixtrex) (#24788)
xAI OAuth: pin inference base_url to x.ai origin. (#28952)
Quarantine dead OAuth tokens on terminal refresh failure (xAI, Codex, MiniMax). (#28116, #28118, #28119)

Supply-chain

On-demand supply-chain audit via OSV.dev — hermes audit. (#31460)
hermes update syntax-validates critical files post-pull, auto-rollback on failure. (#28669)
Quarantine hermes.exe vs concurrent Windows instance. (#26677)

Other hardening

Restrict default webhook toolset capabilities. (#30745)
Harden Microsoft Graph webhook auth requirements. (#30169)
Require source CIDR allowlisting for public msgraph webhook binds. (#33722)
Require APISERVERKEY before dispatching API server work. (#33232)
env_passthrough: apply GHSA-rhgp-j443-p4rf filter to config.yaml path. (@roadhero) (#27794)
Dashboard + WeCom: restrict markdown link schemes; safe-parse untrusted XML. (#32442)
Salvage project-plugin RCE bypass fix from PR #29311 (GHSA-5qr3-c538-wm9j). (#30837)
Cross-profile soft guard on file-write tools + system-prompt hint. (#31290)
Reject unsafe tar members in Android psutil compatibility installer. (#33742)
Reject non-regular tar members during tirith auto-install. (#33786)

🪟 Native Windows (Beta Continued)

Complete Windows bootstrap — dep_ensure + install.ps1 + detection. (@alt-glitch) (#27845)
install.ps1: strip BOM, -Commit/-Tag pin params, harden git ops. (@jquesnelle) (#28169)
Consolidate ACP browser bootstrap into install.{sh,ps1}. (@alt-glitch) (#27851)
hermes update quarantines live hermes.exe. (#26677)
Discord voice opus decoding on Windows. (#33182)
Windows Docker Desktop compatible compose file. (@Sunil123135) (#31031)

🖥️ Web Dashboard

Hardened Slack socket recovery + Windows restart dedupe. (#28873)
Web dashboard: migrate checkboxes to @nous-research/ui + design-system polish. (@austinpickett) (#28814)
Web dashboard: collapsible sidebar. (@austinpickett) (#33421)
Dashboard typography & contrast pass. (salvage of #28832) (#30714)
Skills page: lazy-fetch catalog instead of bundling 34MB into JS. (#33809)

🐳 Docker

s6-overlay container supervision — abstract ServiceManager protocol (systemd/launchd/Windows/s6 backends), per-profile gateway supervision in-container, container-restart reconciliation, hadolint/shellcheck CI. (salvage of #30136, @benbarclay) (#31760)
Auto-redirect gateway run to supervised mode inside the s6 image. (@benbarclay) (#33583)
Tee supervised gateway stdout to docker logs. (@benbarclay) (#33621)
Drop docker exec to hermes uid before invoking the CLI. (@benbarclay) (#33628)
Align HOME for dashboard and s6 gateway services. (@Dusk1e) (#33481)
Bake build-time git SHA into image so hermes dump reports it. (@benbarclay) (#33655)
hermes update prints docker pull guidance instead of bogus git error. (@benbarclay) (#33659)
Upgrade Node to 22 LTS via multi-stage from node:22-bookworm-slim. (@benbarclay) (#33060)
Drop build-essential from apt install. (@benbarclay) (#33028)
Propagate env through s6 to cont-init and main CMD. (#32412)
Targeted chown to preserve host file ownership in HERMES_HOME. (#33033)
mkdir HERMES_HOME as root in stage2 before chown / privilege drop. (#33078)
chown ui-tui and node_modules on UID remap so TUI esbuild works. (#33045)
Include anthropic, bedrock, azure-identity extras in image. (#30504)
Stop pushing per-commit SHA tags to Docker Hub. (#29387)
Simplify Docker tagging — push both :main and :latest on main push. (#33225)
Test slicing across GH actions jobs. (@ethernet8023) (#30575)
Discover agent-browser Chromium binary at boot. (#33184)

🌐 API Server

Session control API — /api/sessions/* (list/create/read/patch/delete/fork) + SSE-streaming chat. (salvages #29302 by @Codename-11 + multimodal followup by @Schwartz10) (#33134)
GET /v1/skills and /v1/toolsets. (#33016)
Coerce stringified booleans in stream/store/approval payloads. (salvage #26639) (#27293)
Honor key_env in auth-failure fallback resolution. (#30840)

🎟️ ACP (VS Code / Zed / JetBrains)

Session edit auto-approval modes. (salvage of #27034) (#27862)
Enrich Zed permission cards — command in title + reject_always. (#28148)
Replay session history before responding to session/load. (#26957, #26943)
Plugin-transformed final_response delivered through streaming gate. (#31433)

🔌 Plugin Surface

registerttsprovider() plugin hook. (salvage of #30420) (#31745)
registertranscriptionprovider() hook + stt.providers command-provider registry. (salvage of #30493) (#31907)
registerauxiliarytask() in PluginContext API. (salvage #29817) (#31177)
Bundled security-guidance plugin. (#33131)
Discord and Mattermost migrated to bundled plugins. (#30591, #31748)
ntfy as platform plugin. (#30867)
Surface category-namespaced plugins in hermes plugins list. (#27187)
Plugin discovery failures raised to WARNING level. (#28318)
hermes_plugins included in gateway.log component filter. (#28313)
Seed plugin extras before is_connected gate. (#31703)
Dashboard: allowlist plugin assets + denylist subprocess-influencing env vars. (#32277)

📦 Distribution & Install

Install-method stamping + Docker detection. (@alt-glitch) (#27843)
Nix #messaging and #full package variants. (@alt-glitch) (#33108)
Pre-load messaging gateway deps via --extra messaging. (salvage #26394) (#27558)
Avoid piping installer directly into iex (Windows). (#28347)
Ship bundled skills in wheel. (#28421)
Ship dashboard plugin assets in wheel. (#28406)
Make Camofox lazy-installed instead of eager. (#27055)
Wire STT lazy-install into transcription_tools.py. (#30256)

🐛 Notable Bug Fixes (highlights only)

Match bare custom provider by active base URL in hermes model. (#28908)
Route auxiliary.vision.provider=openai to api.openai.com, skip text-only main. (#31452)
Lint: skip per-file shell linter when LSP will handle the file. (#29054)
Treat empty credential pool entries as unauthenticated in /model picker. (#28312)
Reverted within window: Firecrawl integration tag, send_message @username auto-mentions, Telegram quick-command-only menus, Telegram pin-on-turn.

🧪 Testing

Disarm lazy-install probe so HASFASTER_WHISPER patches work. (#30334)
Cover default board dashboard pin. (#28361)
Cover taskdict task_age fallback. (#28365)
Allowlist tmppath for kanbannotify artifact delivery tests. (#30851, #30852)
Cover null output stream terminal events in Codex. (#33137)

📚 Documentation

30-day docs overhaul — full correctness audit, every PR in the window covered, Nous Portal weave, sidebar reorg. (#33782)
Dedicated Nous Portal integration page and setup guide. (#31296)
Providers: move Nous Portal first, Google Gemini OAuth last. (#31287)
session_search rewrite for single-shape tool. (#27840)
Kanban: document failurelimit, maxretries, inline create shortcuts, goals & kanban settings. (#28357, #28358, #28359, #28360, #28362)
Kanban Codex lane skill. (#28430)
xAI OAuth: note X Premium+ also unlocks Grok OAuth. (#29055)
Docs site: Docker audio bridge notes, "Installing more tools in the container", xurl auth HOME in Docker.
Email: clarify gateway vs Himalaya setup. (@helix4u) (#33634)
Auth docs: replace stale hermes login references with hermes auth add. (#32859)

👥 Contributors

Core

@teknium1 (lead)

Notable salvages & cherry-picks

@benbarclay — s6-overlay container supervision (29 commits salvaged), Node 22 LTS upgrade, build-essential cleanup, gateway run auto-redirect in s6, tee supervised stdout to docker logs, hermes update Docker guidance, build-time SHA stamping
@OutThisLife — mouse_tracking DEC mode presets
@jquesnelle — Windows installer hardening, --branch flag for hermes update, install.ps1 BOM strip / commit-pin
@alt-glitch — Windows dep_ensure bootstrap, Nix package variants (.#messaging, .#full), install-method stamping, ACP browser bootstrap consolidation
@austinpickett — /update slash command, dashboard checkboxes → @nous-research/ui, mobile dashboard polish, collapsible sidebar
@ethernet8023 — CI test slicing across GH Actions jobs, TUI clipboard copy fix
@kshitijk4poor — doctor section banner + fail-and-issue helpers extraction, post-tag salvage cluster (curator-fallout, kanban SQLite hardening, install world-readable uv dirs, xAI bare-code paste)
@rewbs — Nous JWT inference switch + refresh-token replay fix
@Codename-11 + @Schwartz10 — session control API (REST + SSE + multimodal followup)
@Niraven — kanban swarm topology helper
@Interstellar-code — kanban worker visibility endpoints
@adybag14-cyber — termux cold-start optimizations (multiple PRs)
@qike-ms — Telegram in-place status edits design
@sprmn24 — ntfy adapter
@Jaaneek — xAI Web Search provider plugin
@yannsunn — xAI upstream adapter for hermes proxy
@Cybourgeoisie — OpenRouter sticky routing via session_id
@memosr — Nous Portal base_url allowlist validation
@Sunil123135 — Windows Docker Desktop compose file
@Dusk1e — Docker HOME alignment for dashboard + s6 gateway services
@beardthelion — opencode-go anthropic_messages routing
@YLChen-007 — Skills Guard multi-word prompt patterns
@roadhero — env_passthrough GHSA-rhgp-j443-p4rf filter
@Zyrixtrex — Google Chat OAuth credential persistence hardening
@briandevans, @tomqiaozc — defense-in-depth read-deny on credential stores
@PratikRai0101 — control-plane file write protection
@helix4u, @Bartok9, @zccyman — auxiliary fallback ladder components
@ms-alan, @ticketclosed-wontfix, @donovan-yohan — TUI session orchestrator + follow-ups
@daimon-nous[bot] — cron per-job profile support
@bisko — re-pad reasoning_content on cross-provider fallback

All Contributors

@02356abc, @0xchainer, @0xDevNinja, @0xjackyang, @0xsir0000, @0z1-ghb, @8bit64k, @aaronlab, @AceWattGit,
@ACR27, @adam91holt, @AdamPlatin123, @Ade5954, @AdityaRajeshGadgil, @adybag14-cyber, @AhmetArif0, @ai-hana-ai,
@alaamohanad169-ship-it, @alber70g, @albert748, @alt-glitch, @aqilaziz, @argabor, @asdlem, @austinpickett,
@avifenesh, @awizemann, @B0Tch1, @Bartok9, @BaxBit, @Beandon13, @beardthelion, @benbarclay, @bensargotest-sys,
@binhnt92, @bird, @bisko, @BlackishGreen33, @booker1207, @bradhallett, @briandevans, @Brixyy, @brndnsvr,
@BROCCOLO1D, @btorresgil, @burjorjee, @carltonawong, @Carry00, @chaconne67, @chdlc, @chromalinx, @ChyuWei,
@CipherFrame, @cmullins70, @CNSeniorious000, @codeblackhole1024, @Codename-11, @colin-chang, @counterposition,
@cresslank, @CryptoByz, @cyb0rgk1tty, @Cybourgeoisie, @daizhonggeng, @darvsum, @davidcampbelldc, @deas,
@dgians, @dillweed, @DoGMaTiiC, @donovan-yohan, @draplater, @Drexuxux, @dskwe, @dsr-restyn, @Dusk1e,
@dusterbloom, @duyua9, @egilewski, @el-analista, @eliteworkstation94-ai, @eloklam, @EloquentBrush0x, @emonty,
@emozilla, @erhnysr, @erikengervall, @Erosika, @ether-btc, @ethernet8023, @EvilHumphrey, @fabiosiqueira,
@falasi, @falconexe, @fardoche6, @felix-windsor, @Fewmanism, @ffr31mr, @flamiinngo, @flanny7, @flooryyyy,
@fonhal, @francip, @fujinice, @gianfrancopiana, @glennc, @Glucksberg, @godlin-gh, @Grogger, @guillaumemeyer,
@Gutslabs, @H-Ali13381, @hanzckernel, @haran2001, @hawknewton, @hayka-pacha, @hehehe0803, @helix4u, @HenkDz,
@Hermes, @hermesagent26, @Hinotoi-agent, @hongchen1993, @honor2030, @houenyang-momo, @ht1072, @hueilau,
@iamfoz, @ilonagaja509-glitch, @InB4DevOps, @indigokarasu, @Interstellar-code, @iqdoctor, @iRonin, @Jaaneek,
@JabberELF, @jacevys, @jackey8616, @jackjin1997, @jdelmerico, @jfuenmayor, @Jiahui-Gu, @JimLiu, @joe102084,
@JohnC1009, @jonpol01, @Jpalmer95, @Julientalbot, @justemu, @justincc, @jvinals, @karthikeyann, @kasunvinod,
@kchuang1015, @kenyonxu, @khungate, @kiranvk-2011, @kjames2001, @konsisumer, @kpadilha, @kriscolab,
@krislidimo, @kronexoi, @kshitijk4poor, @kunci115, @Kylejeong2, @kylekahraman, @LaPhilosophie, @leeseoki0,
@lemassykoi, @Lempkey, @LeonJS, @LeonSGP43, @lidge-jun, @LifeJiggy, @liuhao1024, @LizerAIDev, @loicnico96,
@loongfay, @m0n3r0, @malaiwah, @matthewlai, @mavrickdeveloper, @maxmilian, @McClean-Edison, @memosr,
@Mind-Dragon, @momowind, @MoonJuhan, @MoonRay305, @moortekweb-art, @MorAlekss, @ms-alan, @Nami4D,
@nehaaprasaad, @nekwo, @nftpoetrist, @NickLarcombe, @nidhi-singh02, @Niraven, @nnnet, @noctilust, @novax635,
@nthrow, @nv-kasikritc, @nycomar, @OCWC22, @oemtalks, @OmX, @ooovenenoso, @orcool, @oseftg, @outsourc-e,
@OutThisLife, @Paperclip, @PaTTeeL, @pepelax, @phoenixshen, @Pluviobyte, @pnascimento9596, @pochi-gio, @pr7426,
@PratikRai0101, @Prithvi1994, @psionic73, @ptichalouf, @Que0x, @QuenVix, @quocanh261997, @qWaitCrypto, @Qwinty,
@r266-tech, @rak135, @rdasilva1016-ui, @rewbs, @roadhero, @rodrigoeqnit, @RonHillDev, @roycepersonalassistant,
@rudi193-cmd, @RyanRana, @sadiksaifi, @samahn0601, @samggggflynn, @SamuelZ12, @sanghyuk-seo-nexcube,
@Saurav0989, @savanne-kham, @Schrotti77, @Schwartz10, @SerenityTn, @sgtworkman, @sharziki, @shaun0927,
@shellybotmoyer, @shunsuke-hikiyama, @SimbaKingjoe, @SimoKiihamaki, @sir-ad, @Slimydog21, @slowtokki0409,
@Soju06, @someaka, @soynchux, @sprmn24, @Stark-X, @steezkelly, @stepanov1975, @stephenschoettler,
@stevehq26-bot, @steveonjava, @Strontvod, @subtract0, @Sunil123135, @superearn-fisher, @Sylw3ster, @tchanee,
@that-ambuj, @thedavidmurray, @TheOnlyMika, @therahul-yo, @thewillhuang, @ticketclosed-wontfix, @Timur00Kh,
@tomqiaozc, @Tosko4, @Tranquil-Flow, @tw2818, @uzunkuyruk, @vaddisrinivas, @vanthinh6886, @vgocoder,
@victorGPT, @vynxevainglory-ai, @waefrebeorn, @walli, @wangpuv, @wanwan2qq, @wesleysimplicio, @worlldz,
@wpengpeng168, @WuKongAI-CMU, @wuli666, @Wysie, @wysie, @xxxigm, @yannsunn, @YanzhongSu, @YarrowQiao, @ygd58,
@YLChen-007, @yoniebans, @yu-xin-c, @YuanHanzhong, @zapabob, @zccyman, @ziliangpeng, @zwolniony, @Zyrixtrex

Full Changelog: v2026.5.16...v2026.5.28