Hermes — The AI Toolchain

Hermes v2026.8.27

Thu, 27 Aug 2026 12:06:53 GMT

Hermes v2026.8.27 adds fleet profile rail, consent-gated real Chromium profile browsing, TTL result caching, OS-keychain encryption, MCP catalog expansion, and more. • Adds fleet profile rail showing every registered gateway's agents on a single strip in the desktop UI. • Supports consent-gated real-profile browsing using the user's default Chromium profile for local browsing, with a Windows close-with-approval flow. • Adds TTL result caching for `web_search` and `web_extract` tool calls. • Adds opt-in OS-keychain encryption for stored secrets, eliminating per-launch macOS Keychain prompts. • Expands the remote MCP catalog to 50+ live-verified vendor-hosted servers, including Cloudflare, Grafana Cloud, Better Stack, and Railway. • Gives the desktop Browser its own OS window. • Enables updaters to pause gateways over the control socket instead of tree-killing them. • Adds multi-query support and stemming to `tool_search`. • Makes lean-tail compression the default. • Adds pluggable terminal environment backends. • Adds shared Docker container identities. • Adds Slack link-unfurl controls. • Adds new models to pickers: GLM-5.3-Flash (via `z-ai/glm-5.3-flash` on OpenRouter and Nous Portal), MiniMax M3 free, and MiniMax H3 Max video. • Adds cron durable-incident acknowledgements and clearer code-skew failure messages. • Network-bound `serve` backends now survive `hermes update` on their recorded endpoints. • Folds an agent-as-provider's own tool work back into the turn. • Carries the review handoff summary into the kanban wake turn. Breaking changes: • Image and package-managed installs now refuse unsafe in-place updates (phase 3 of #91277) — upgrade paths that previously performed in-place updates will be rejected.

Hermes v2026.8.19

Fri, 21 Aug 2026 12:16:39 GMT

Hermes v2026.8.19 adds a 5-vendor keyless web ring with failover, keyed-backend rescue, agent-driven browser preview, and desktop theme/glass updates. • Expands the keyless web tier to a 5-vendor round-robin ring (Exa, Parallel, Tavily, Firecrawl, Keenable) with automatic ring failover on rate-limit-shaped errors; `served_by` field marks the actual vendor on rescued results. • Adds Tavily keyed/keyless dual auth via `X-Tavily-Access-Mode: keyless` and `X-Client-Name: hermes-agent` headers in `plugins/web/keyless_mcp.py`. • New `drive_preview` and `annotate_preview` agent tools let the agent interact with and annotate a browser preview page it has opened. • Desktop preview overlay now shows a real-time display of what the agent is doing on the page, driven by real input rather than synthetic events. • Desktop: durable element handles and delta-only page updates replace full-page snapshots in the act engine. • Consolidates `hermes version` into `hermes --version`, removing the subcommand. • Desktop update flow now updates every target — remote backends, other gateways, and the app itself — in a single operation. • Desktop ships GitHub themes with Nous blue as default, an accent picker plugin (off by default), and glass effects tuned per appearance and platform. • Identical agent tool re-calls are now deduplicated into reference stubs in context rather than duplicate payloads, reducing token consumption. • Keyed web rescue annotates results with `rescued_from` and `backend_error` fields naming the original failure and retry semantics. Breaking changes: • The `hermes version` subcommand is removed; use `hermes --version` instead.

Hermes v2026.8.18

Tue, 18 Aug 2026 07:26:46 GMT

Hermes v2026.8.18 adds tabbed SESSIONS|BOTS sidebar, NVIDIA SkillEvaluator advisory scanning, glass UI surfaces, and cron media-send hardening. • Adds `hermes update` parked-branch honesty, now accurately reporting when the local branch is parked rather than silently misreporting state. • Adds NVIDIA SkillEvaluator Tier 1 advisory scanning on skill installs, running license and security checks before a skill is installed. • Adds configurable timeout for cron media-send jobs, with support for manual-run attachments and surfacing of missed-fire events. • Adds a tabbed SESSIONS|BOTS sidebar with per-bot hide/unhide controls. • Adds desktop glass/translucency UI surface work including matte glass, a frost picker, and macOS pre-select behavior. • Adds native OS notifications for kanban board events. • Extends Bot Mode group-chat support with fixes for long-running member turns, Markdown rendering, and cross-machine routing.

Hermes v2026.8.18

Tue, 18 Aug 2026 07:26:46 GMT

Hermes v2026.8.18 adds Browser Use CLI 3.0 mode, `hermes peer` bot-to-bot DMs, Meta Muse Spark provider, inline plugin components, and per-plugin durable storage. • Adds `hermes peer` CLI subcommand for bot-to-bot DMs across machines and gateways. • Bundles the Meta Model API (Muse Spark) provider plugin and adds Meta Muse Spark 1.2 to the OpenRouter curated picker. • Enables plugins to render inline components inside assistant messages via `::name{...}` directives, including `::preview` for live in-message page previews. • Adds per-plugin durable data directories that survive plugin updates and removal. • Adds cross-connection Bot Mode — Create-on picker and multi-machine group chats, plus a disband (delete) action for group chats. • Adds NVIDIA SkillEvaluator Tier 1 advisory scanning (license and security checks) on skill installs, plus project-skill quarantine and non-interactive trust inheritance. • Widget clicks now reach the agent as hidden user turns, making widget interaction a first-class agentic response path. • Surfaces an in-app warning (with installer link) in About when the app build is out of sync with the runtime. • Adds the Browser Use mode A/B benchmark to the evals suite (from PR #81958).

Hermes v2026.8.16.2

Mon, 17 Aug 2026 18:43:27 GMT

Hermes v2026.8.16.2 adds Bot Mode plugin, Cua Driver 0.20, remote gateway headers, `/rollback --all`, and raised Codex OAuth context limits. • Bundles Bot Mode (`hermes-bots`) as a built-in, default-on desktop plugin implementing the core teammate protocol for Bot Chat sessions. • Supports Cua Driver 0.20 runtime contracts for computer-use, including auto-repair of installed drivers that fail the runtime contract at update or runtime. • Adds `remote gateway headers` support in the desktop app, carried through the connections registry, test probes, and Settings UI. • Adds status bar reconnect for offline gateways and self-healing for dropped SSH/HTTP registered remote connections in the desktop. • Adds connection-aware plugin routing in the desktop, scoping plugin socket connections and session/pin lists per connection. • Raises Codex OAuth context to 900K tokens for the `gpt-5.6` family and `gpt-5.4` (subscription 1M rollout), up from a previous raise to 350K for live-verified sessions. • Adds `context-manager` protocol support on `SessionDB` for safer session database lifecycle management. • Adds capability-refresh and timeless prompts for eternal Bot Chat sessions, plus a one-time protocol upgrade path for legacy Bot Chat sessions. • Syncs bundled Bot Mode with a multi-source roster.

Hermes v2026.8.16.2

Mon, 17 Aug 2026 18:43:27 GMT

Hermes v2026.8.16

Sun, 16 Aug 2026 17:33:22 GMT

Hermes v2026.8.16 adds key_cmd credential source, lean compaction mode, SDK plugin exports, and per-turn wall-clock timing. • Adds `key_cmd` credential source in the `providers` config block, letting Hermes run an arbitrary command to mint short-lived bearer tokens instead of storing static keys — output can be a bare token or JSON with `access_token` / `expires_in` fields; tokens are cached until near expiry. • Exports `McpTab`, `ToolsetConfigPanel`, and `HermesGateway` type from `@hermes/plugin-sdk`, plus host.getGateway() returning the live `$gateway` instance, so desktop plugins can render full credential/OAuth/MCP configuration panels identical to Settings → Capabilities. • Adds per-turn wall-clock duration display in the desktop transcript. • Adds user-facing authorization flow for cua-driver browser attachment in computer-use mode. • Adds multi-source agent support in the desktop app (sockets, roster, SDK, fan-out updates). • Adds `INFO` log records for 'prompt accepted / turn finished' on the Desktop/TUI turn path.

Hermes v2026.8.16

Sun, 16 Aug 2026 17:33:22 GMT

Hermes v2026.8.13

Thu, 13 Aug 2026 20:37:37 GMT

Hermes v2026.8.13 adds `setup_mcp` consent cards, `profiles.list`/`profiles.create` ws RPCs, per-route webhook toolset overrides, and an `image.generate` ws RPC for plugins. • Adds `profiles.list` and `profiles.create` ws JSON-RPC methods (in `tui_gateway/methods_profiles.py`), letting desktop plugins enumerate profiles (name, path, model/provider, description, skill_count, optional `last_session` preview via `include_sessions`) and create new profiles without going through the dashboard REST router. • Adds `image.generate` ws RPC for plugin surfaces, enabling plugins to trigger image generation through the agent backend. • Adds per-route toolset overrides for webhook agent runs, allowing different tool sets to be configured per webhook route. • Adds `setup_mcp` tool with an inline MCP consent card rendered as an interactive clarify-style blocking bridge in the desktop transcript, letting users approve MCP server connections without leaving the conversation. • Suggests MCP servers from the composer draft as brand pills in the desktop UI. • Adds cron and blueprint recipe shortcuts to the sidebar nav rail in the desktop app. • Surfaces model drift impact in the desktop cron view. • Adds skill-match, connection-repair, and recurrence-to-cron suggestion providers in the desktop composer. • Labels the agent's recommended choice on every clarify surface, rendered in tertiary text in the desktop UI. • Quietly suppresses composer suggestions the user has repeatedly ignored. • Adds marquee animation for clipped inline row titles on hover in the desktop app.

Hermes v2026.8.13

Thu, 13 Aug 2026 20:37:37 GMT

Hermes v2026.8.3

Mon, 03 Aug 2026 16:57:52 GMT

Hermes v2026.8.3 adds conversational voice with barge-in, A2A v1.0, signed webhooks, grounded citations, a plugin SDK, and a CLI power-user wave. • Adds `!command` shell-escape mode to run a shell command from the CLI instantly without spending a model turn. • Adds `/init` CLI command to scan a project and generate or update an `AGENTS.md` file. • Adds `/diff` CLI command to show staged, all, or session-level changes from any surface. • Adds `/context` CLI command to break down exactly what is filling the current context window. • Adds `/focus` CLI command for a reduced-output view with hidden-line recovery. • Adds `hermes import-agent` command to migrate a Claude Code or Codex CLI setup into Hermes in one command. • Adds `hermes approvals suggest` command to mine approval history and produce allowlist proposals. • Raises the default tool-calling iteration limit from 90 to 500, removing an artificial ceiling on long autonomous runs. • Introduces the `grounded-citations` skill, which matches quotes against actual page text, links citations to exact evidence, and includes a fact-checking mode for any document or claim. • Adds signed outbound webhooks that push HMAC-signed lifecycle events (session activity, turn completions, tool events) to any registered HTTP endpoint — no polling required. • Adds a bundled Agent-to-Agent (A2A v1.0) plugin so Hermes can discover, talk to, and be driven by other A2A-compatible agents. • Adds streaming conversational voice with clause-by-clause TTS, barge-in interruption, and busy-aware silence detection across the CLI, desktop, and gateway adapters. • Adds on-device open-vocabulary wake-word detection with multi-profile voice routing and a 'stop' keyword to end voice chat hands-free. • Extends voice support to WhatsApp, Feishu, DingTalk, LINE, QQ, Photon, and Weixin — incoming voice notes are transcribed and auto-TTS replies are delivered platform-aware (opus, captions). • Adds `hermes tools` category for STT configuration, GUI toggles, dashboard dropdowns, unified language resolution, and OpenAI `gpt-transcribe` support. • Adds a unified spoken-text preprocessor that strips markdown, code, and URLs from speech across all TTS providers. • Adds desktop artifacts: versioned cards with sandboxed live-preview in a right-rail viewer so generated HTML/apps run safely next to chat. • Ships a plugin SDK with `ctx.download` for file delivery, floating pane placement, and multiple GUI windows; Kanban ships as the founding plugin. • Adds a global-hotkey quick-entry window to capture input into any session from anywhere in the OS. • Adds mid-turn redirect capability — type a correction while the agent is working and the active turn course-corrects while preserving work in flight and the original prompt. • Makes compression thresholds configurable per-model and in absolute tokens, and adds a guaranteed N-user-message tail so recent conversation always survives pruning. • Adds a consecutive-denial circuit breaker in smart approvals to stop a misbehaving approval loop. • Adds a new approval gate for docker/podman daemon-redirect commands. • Reduces `hermes -w` cold-start time from ~14 s to ~1.8 s and makes `hermes update` no-ops 2–6 s faster through lazy SDK loading and config-read optimizations.

Hermes v2026.8.3

Mon, 03 Aug 2026 16:57:52 GMT

Hermes v2026.8.3 adds streaming voice with barge-in, A2A v1.0, signed outbound webhooks, grounded citations, a plugin SDK, and a wave of new CLI commands. • Adds `!command` shell-escape syntax to run a shell command instantly from the CLI without consuming a model turn. • Adds `/init` CLI command to scan a project and generate or update an `AGENTS.md` file. • Adds `/diff` CLI command to show staged, all, or session file changes from any surface. • Adds `/context` CLI command to break down exactly what is filling the current context window. • Adds `/focus` CLI command for a reduced-output view with hidden-line recovery. • Adds `hermes import-agent` command to migrate a Claude Code or Codex CLI setup into Hermes in one command. • Adds `hermes approvals suggest` command to mine approval history into allowlist proposals. • Adds the `grounded-citations` skill, making Hermes produce research where every claim is backed by a verifiable source — quotes are matched against actual page text and citations link to exact evidence. • Adds a fact-checking mode (via the `grounded-citations` skill) that evaluates any document or claim and reports what checks out, what does not, and what could not be verified. • Adds signed outbound webhooks that push HMAC-signed lifecycle events (session activity, turn completions, tool events) to any registered HTTP endpoint, enabling integration without polling. • Adds Agent-to-Agent (A2A v1.0) protocol support as a bundled plugin, allowing Hermes to discover, communicate with, and be driven by other A2A-compatible agents. • Adds STT as its own `hermes tools` category with GUI toggles, dashboard dropdowns, unified language resolution, and support for OpenAI's gpt-transcribe. • Adds streaming, clause-by-clause conversational voice with barge-in (interrupt mid-sentence by speaking), busy-aware silence detection, and hands-free control across the CLI, desktop, and gateway adapters. • Adds on-device open-vocabulary wake word detection and multi-profile voice routing, so different wake phrases can reach different profiles without audio leaving the device. • Adds voice note transcription and auto-TTS replies on WhatsApp, Feishu, DingTalk, LINE, QQ, Photon, and Weixin, with platform-aware codec selection (opus where required, correct caption attachment). • Adds artifact rendering in the desktop app: versioned cards with sandboxed live preview in a right-rail viewer so generated HTML/apps run safely alongside the chat. • Adds a plugin SDK to the desktop app, with Kanban as the founding plugin, `ctx.download` for delivering files to users, floating pane placement, and multiple GUI windows. • Adds a global-hotkey quick-entry window that captures a thought into any session from anywhere in the OS. • Adds mid-turn redirect capability: type a correction while the agent is working and the active turn course-corrects with the new guidance, preserving work in flight and the original prompt. • Adds a consecutive-denial circuit breaker to smart approvals that stops misbehaving approval-request loops, plus a new approval gate for docker/podman daemon-redirect commands. • Raises the default tool-calling iteration limit from 90 to 500, removing an artificial wall for long autonomous runs. • Adds proactive tool-result pruning, per-turn micro-compaction, a guaranteed N-user-message tail, and configurable compression thresholds per-model and in absolute tokens to keep long sessions coherent. • Reduces `hermes -w` cold-start time from ~14 s to ~1.8 s and makes `hermes update` no-ops 2–6 s faster; adds prompt caching for tool schemas on native Anthropic.

Hermes v2026.7.20

Mon, 20 Jul 2026 18:35:55 GMT

Hermes v2026.7.20 adds `/subscription`, `/topup`, Bitwarden/1Password secret sources, live subagent transcripts, session export, smart approvals, and new AI providers. • Adds `/subscription` and `/topup` commands to manage Nous billing plans — including upgrade previews, scheduled-change banners, and undo — directly from the TUI or CLI without visiting the billing website. • Adds `/deny ` command so the agent receives an explicit refusal rationale and can course-correct, alongside user-defined deny rules that block commands even under yolo mode. • Adds a pluggable `SecretSource` interface with Bitwarden and 1Password (`op://` references) providers, supporting multiple simultaneous vaults, deterministic precedence, conflict warnings, and per-variable provenance — so API keys no longer have to live in a plaintext `.env`. • Adds `hermes sessions export` with output formats Markdown, Quarto, HTML, prompt-only, and Hugging Face-ready traces; supports full filter surface (age, workspace, platform), an opt-in `--redact` secret-scrubbing pass, and compacted-session lineage stitching. • Adds a durable delivery-obligation ledger in `state.db` that records final responses around the platform send and redelivers them on next boot, closing a silent-loss window for Telegram, Discord, Slack, and other channels. • Adds live transcript files for `delegate_task` dispatches — each subagent writes one human-readable log per child, `tail -f`-able from the moment agents launch — plus durable background-delegation completion via an ownership-checked ledger. • Enables `display.show_reasoning` ON by default so reasoning models stream their thinking live instead of showing a spinner. • Adds profile-based message routing to the gateway: a single multiplexed bot token can route specific guilds, channels, or threads to different profiles, each with isolated config, skills, memory, and secrets. • Adds reasoning effort tiers `max` and `ultra`, per-model reasoning-effort overrides in config, per-slot effort in MoA presets, and per-task effort for auxiliary models. • Adds Fireworks AI and DeepInfra as first-class providers (Fireworks includes cost estimation and a #2 slot in the provider picker), plus Upstage Solar; adds model catalog entries for GPT-5.6 (Sol/Terra/Luna + Pro variants), grok-4.5 (GA), moonshotai/kimi-k3, claude-fable-5/claude-sonnet-5, GA tencent/hy3, and LM Studio JIT model loading. • Smart approvals are now the default: an LLM reviewer independently assesses flagged commands per-invocation instead of prompting for manual approval every time. • Desktop app gains a billing settings tab matching the terminal `/subscription` flow. • Cold-start first-turn latency cut ~80% (approximately 4.3 s to 0.9 s) across CLI, gateway, TUI, desktop, and cron, with per-token response-box painting and prompt-build caching.

Hermes v2026.7.20

Mon, 20 Jul 2026 18:35:55 GMT

Hermes v2026.7.20 adds password-manager secret sources, live subagent transcripts, `/subscription`, smart approvals, and session export with redaction. • Adds `/subscription` and `/topup` commands to the TUI and CLI for managing Nous plans — view allowance, preview upgrade cost, apply changes, and undo — without leaving the terminal; desktop gets a matching billing settings tab. • Adds `/deny ` command so the agent receives an explanation when a command is refused and can course-correct. • Adds a pluggable `SecretSource` interface supporting Bitwarden and 1Password (`op://` references) as secret backends, with multiple vaults enabled simultaneously, deterministic precedence, conflict warnings, and per-variable provenance. • Adds `GET /api/tools/terminal/backends` and `PUT /api/tools/terminal/backend` REST endpoints to enumerate and set the terminal execution backend (local / docker / ssh / modal / daytona / singularity) with per-backend health probes. • Adds a terminal execution backend picker to the Desktop Capabilities tab with per-backend health probes (docker CLI+daemon, ssh config keys, modal/daytona credentials, singularity/apptainer binary) and setup guidance. • Adds `GET /api/tools/toolsets/{name}/config` per-provider `status` field (`ready` / `needs_keys` / `needs_auth` / `needs_setup`) so the Desktop Capabilities tab shows truthful provider readiness instead of a guessed 'Ready' pill. • Adds `hermes sessions export` with output formats Markdown, Quarto, HTML, prompt-only, and Hugging Face-ready traces; filter flags for age, workspace, and platform; an `--redact` secret-scrubbing pass; and compacted-session lineage stitching. • Adds live-viewable subagent transcripts: `delegate_task` dispatches return tail-able transcript files with every tool call, result, and streamed reply per child agent. • Adds a durable delivery-obligation ledger in `state.db` that records final responses around the platform send and redelivers them on next boot, closing a silent-loss window for Telegram, Discord, Slack, and other channels. • Adds profile-based message routing to the multiplexed gateway, letting a single bot token route specific guilds, channels, or threads to isolated profiles each with their own config, skills, memory, and secrets. • Adds user-defined deny rules that block commands even under yolo mode, and enables smart approvals (LLM-based per-command review) as the new default instead of prompting the user for every flagged command. • Adds `display.show_reasoning` defaulting ON so reasoning models stream their thinking live instead of showing a spinner. • Adds `max` and `ultra` reasoning effort tiers for GPT-5.6 and Codex, per-model reasoning-effort overrides in config, per-slot effort in MoA presets, and per-task effort for auxiliary models. • Adds Fireworks AI and DeepInfra as first-class providers (Fireworks with cost estimation and a #2 slot in the provider picker); adds Upstage Solar provider. • Adds support for GPT-5.6 (Sol/Terra/Luna + Pro variants), grok-4.5 (GA), moonshotai/kimi-k3, claude-fable-5, claude-sonnet-5, tencent/hy3 (GA), and LM Studio JIT model loading for local setups. • Adds a declarative memory provider panel with full-config modal in Desktop settings, with provider config schemas in `plugins/memory/*/config_schema.py`. • Adds a per-job model picker to the cron create/edit dialog in the desktop app. • Adds per-session color override and project-inherited color and icon to desktop sessions, shared across the sidebar and tabs. • Adds custom endpoint settings panel to the desktop app. • Adds incremental markdown rendering to the TUI so output paints per token instead of waiting for complete lines. • Achieves ~80% reduction in cold-start first-turn latency (approximately 4.3s to 0.9s) across CLI, gateway, TUI, desktop, and cron by moving Discord capability detection off the critical path with a token-keyed 24-hour disk cache and background refresh. • Reduces desktop streaming markdown CPU cost by 14× via incremental block lexing and virtualizes review-pane diffs to eliminate Shiki freeze on large outputs. • Adds surface for all xAI TTS parameters in the desktop GUI config and lists config-defined command TTS/STT providers in desktop settings.

Hermes v2026.7.1

Wed, 01 Jul 2026 20:08:06 GMT

Hermes v2026.7.1 adds MoA as a selectable model, /learn, /journey, /prompt, Vertex AI OAuth2, background subagent fan-out, and completion contracts for /goal. • Adds Mixture-of-Agents (MoA) presets as selectable virtual models under a `moa` provider, available in CLI, TUI, desktop, and gateway model pickers. • Adds `/moa` as a one-shot command that runs a single prompt through the default MoA preset, then restores the previous model. • Streams each reference model's reasoning as labelled blocks before the aggregator's live-streamed final answer. • Adds `/learn ` to distill a reusable skill from a directory, URL, or recent workflow and write it automatically per CONTRIBUTING.md standards. • Adds `/journey` to the CLI and TUI: a browsable, editable timeline of all memories and skills the agent has accumulated. • Adds a desktop memory graph — a playable radial timeline of memories and skills that can be pruned from the UI. • Adds completion contracts to `/goal`: define what 'done' looks like and the standing-goal loop judges completion against evidence, not model assertion. • Adds a `pre_verify` hook for wiring custom checks into the goal-completion verification loop. • Enables `delegate_task` to fan out multiple subagents in the background, returning a single consolidated result when all finish. • Adds first-class coding Projects to the desktop app, including a sidebar, coding rail, review pane, git worktree management, and a `project → repo → lane` model. • Adds scale-to-zero support and drain coordination to the gateway, allowing idle instances to go dormant and resume without dropping in-flight conversations. • Adds Google Vertex AI as a first-class provider, with automatic OAuth2 token minting and refresh from a service-account JSON or Application Default Credentials. • Adds `/prompt` command that opens `$EDITOR` for composing multi-line prompts in markdown before queuing them as the next message. • Routes the post-turn self-improvement fork to an auxiliary model with digested context, reducing cost of background memory/skill saving. • Hardens MCP-config persistence attack surface, blocks cron `base_url` credential-exfiltration overrides, adds non-reusable sentinel for prefix secrets in file reads, redacts Slack `xapp-` tokens, enforces a browser cloud-metadata floor on every backend, and applies an `aiohttp` CVE floor across lazy messaging paths.

Hermes v2026.6.19

Fri, 19 Jun 2026 19:39:06 GMT

Hermes v0.17.0 adds iMessage via Photon, Raft agent network, background subagents, image editing, WhatsApp Business API, and atomic memory operations. • Adds iMessage platform plugin via Photon Spectrum — authenticate with `hermes photon login` and send/receive iMessages with no Mac relay or BlueBubbles bridge required. • Adds Raft agent network adapter — connect Hermes as an external gateway agent on Raft via a wake-channel bridge, with privacy-by-contract wake payloads carrying only metadata. • Adds background/async subagents via delegate_task(background=true) — dispatches a subagent that runs independently and re-enters the conversation as a new turn when complete. • Adds image-to-image editing to `image_generate` — pass a source image and prompt to edit, transform, or recompose existing images across all supported image providers. • Adds Automation Blueprints — schedule recurring tasks by answering guided questions instead of writing cron expressions, rendered as forms, slash commands, or agent conversations. • Adds `grok-composer-2.5-fast` (Cursor's Composer model) to the xAI OAuth model picker with a full 200k context window, usable via an existing xAI Grok subscription. • Adds full profile builder to the dashboard — configure model, skills, and MCP servers from the browser without editing `config.yaml`, with a global multi-profile switcher. • Adds official WhatsApp Business Cloud API adapter — connect via Meta's first-party hosted API without a QR-scanning bridge process. • Adds Telegram Bot API 10.1 rich message support — proper formatting, native markup, and cleaner long-message handling, enabled by default with an opt-out. • Upgrades the `memory` tool with an `operations` array for atomic batch add/replace/remove edits evaluated against the final character budget in a single call. • Adds Skills Hub browser rehaul — connected hubs, Featured section, full skill previews, and a security scan on each skill before installation. • Adds curator cost optimization — LLM-powered consolidation now requires explicit opt-in (`curator.consolidate: true` or `hermes curator run --consolidate`), making routine background curation zero-token by default. • Hardens dashboard authentication — all token-required endpoints return 401 behind the OAuth gate, websocket auth uses the served dashboard token, and a warning fires when a `public_url` override is silently rejected. • Adds desktop app rebindable keyboard shortcuts, native OS notifications with per-type toggles, live subagent watch-windows, VS Code Marketplace theme installation, resizable terminal pane, RTL/bidi auto-detection, and per-thread composer drafts.

Hermes v2026.6.5

Sat, 06 Jun 2026 00:55:58 GMT

Hermes v2026.6.5 ships a native desktop app, browser admin panel, /undo, fuzzy model picker, and NVIDIA skills tap. • Adds Hermes Desktop — a native Electron app for macOS, Linux, and Windows with streaming chat, drag-and-drop files, clipboard image paste, Cmd+K command palette, in-app self-update, and an inline model picker. • Enables connecting the desktop app to a remote Hermes gateway via OAuth or username/password, with per-profile remote host targeting and concurrent multi-profile sessions. • Adds a full browser-based administration panel: Channels page (Telegram, Discord, Slack, etc.), MCP catalog with enable/disable toggles, credential management, webhook creation, memory configuration, and one-click Debug Share. • Ships a complete Simplified Chinese (简体中文) translation across all desktop UI surfaces, switchable via Appearance settings (`display.language`). • Adds `/undo [N]` command to retract the last N user turns across CLI, TUI, and messaging platforms (Telegram, Discord, etc.), with the last message prefilled for editing. • Adds `--cli` flag to `hermes chat` and a configurable default interface (`cli` or `tui`), plus a unified `/model` command and Sessions overlay in the TUI. • Adds `hermes portal` as a human-readable alias for the Quick Setup flow via Nous Portal, getting new users from install to first message without docs. • Adds NVIDIA/skills as a built-in trusted Skills Hub tap alongside OpenAI, Anthropic, and HuggingFace — CUDA-X, AIQ, cuOpt and other NVIDIA skills are one install away. • Adds fuzzy search to the model picker across desktop, web dashboard, TUI, and CLI; model catalog now refreshes hourly; multi-endpoint providers grouped to reduce duplicates. • Adds new models to the picker: `deepseek-v4-flash`, `MiniMax-M3` (1M context), `qwen3.7-plus`. • Adds `environments:` relevance gate for skills, keeping context-specific skills (kanban, docker/s6) out of the index unless explicitly requested. • Enables pruning of unused built-in skills (not just agent-created ones) via the curator, with per-skill usage tracking. Breaking changes: • The bundled skill set removes `spotify`, `linear`, `kanban-codex-lane`, `debugging-hermes-tui-commands`, and several empty category markers by default; setups relying on these skills being auto-loaded must install them explicitly via `hermes skills install`. • Heavier/niche skills (`dspy`, `subagent-driven-development`, `minecraft-modpack-server`, `pokemon-player`, `hermes-s6-container-supervision`, and the Baoyu creative set) are no longer loaded by default and must be installed explicitly. • Building the desktop app now requires Node ≥20.19 or ≥22.12.

Hermes v2026.5.29

Fri, 29 May 2026 01:12:15 GMT

Hermes v2026.5.29 adds explicit Docker insecure opt-in, full 19,932-entry skills catalog, and memory providers now receive completed-turn context. • Adds `HERMES_DASHBOARD_INSECURE=1` env var as an explicit opt-in to disable the dashboard's loopback auth guard in Docker, replacing silent bind-host inference. • Expands the skills.sh catalog from 858 to 19,932 entries by walking the full sitemap instead of a single paginated page. • Memory providers now receive completed-turn message context, enabling richer recall across sessions. • Narrows hindsight `recall_types` default to observation-only, giving more targeted hindsight behavior out of the box. Breaking changes: • Docker setups that previously relied on bind-host inference to enable `--insecure` must now explicitly set `HERMES_DASHBOARD_INSECURE=1` or the dashboard's same-origin guard will remain active.

Hermes v2026.5.28

Thu, 28 May 2026 17:46:09 GMT

Hermes v2026.5.28 adds multi-agent Kanban swarms, promptware defense, Bitwarden secret management, 4500× faster session search, and a curated MCP catalog. • Adds `hermes kanban swarm` command to auto-decompose a task into a full Swarm v1 graph (root, parallel workers, gated verifier, gated synthesizer, shared blackboard) with per-task model overrides, scheduled start times, and retry fingerprinting. • Adds promptware/Brainworm-class injection defense: ~15 new threat patterns in `tools/threat_patterns.py`, memory scanning at load time, and delimiter markers on tool results to prevent impersonation of system content. • Rebuilds `session_search` into a no-LLM, three-mode tool (discovery ~20ms, scroll ~1ms, browse) — eliminating ~$0.30/call and ~90s latency. • Adds Bitwarden Secrets Manager integration: set `BWS_ACCESS_TOKEN` and Hermes pulls all provider credentials from Bitwarden at startup, with `secrets.bitwarden.override_existing` toggle and EU/self-hosted server support. • Adds ntfy as the 23rd messaging platform plugin — no signup or API key required, just a topic URL, enabling push notifications from cron jobs, kanban completions, or `send_message`. • Adds skill bundles: a single `/` slash command loads a named group of skills simultaneously; ships three new optional skills: `code-wiki`, `openhands`, and `web-pentest`. • Adds TUI session orchestrator: list, switch, refresh, and close multiple live sessions within one Ink TUI window, with a session-scoped model picker. • Adds two new image generation providers: `Krea 2 Medium` ($0.03) and `Krea 2 Large` ($0.06), auto-discovered via `hermes tools` → Image Generation → Krea. • Adds `hermes mcp` interactive picker backed by a Nous-vetted MCP server catalog; installs servers with one keystroke and writes credentials to `~/.hermes/.env`. • Adds OpenHands orchestration skill under `optional-skills/autonomous-ai-agents/openhands/` for delegating coding sub-tasks to any LiteLLM-supported provider, usable in kanban swarms and `/delegate` flows. • Adds xAI Web Search as a `plugins/web/xai/` provider alongside Brave/Tavily/Exa/SearXNG/DDGS/Firecrawl, reusing existing Grok OAuth or `XAI_API_KEY` credentials. • Cold-start improvements cut `hermes --version` latency 63% (701ms → 258ms), Termux cold start from 2.9s to 0.8s, and per-conversation function calls by 47% (399k → 213k for a 31-turn chat). • Adds worker status endpoints `/workers/active`, `/runs/{id}`, and `/inspect` for observing kanban swarm worker state. • Adds `security-guidance` plugin that pattern-matches dangerous code writes.

Hermes v2026.5.16

Sat, 16 May 2026 09:59:15 GMT

Hermes v2026.5.16 adds SuperGrok OAuth, an OpenAI-compatible local proxy, X search, Teams integration, LINE/SimpleX platforms, and dozens of new capabilities. • Adds xAI Grok as a SuperGrok OAuth provider with grok-4.3 bumped to a 1M-token context window — no API key required. • New `hermes proxy` command exposes an OpenAI-compatible local endpoint backed by Claude Pro, ChatGPT Pro, or SuperGrok OAuth, letting tools like Codex, Aider, Cline, and Continue consume any subscription without an API key. • Adds `x_search` as a first-class built-in tool for searching X (Twitter) via OAuth or API key — no skill install or custom integration needed. • Adds full Microsoft Teams integration: Microsoft Graph auth, webhook listener, pipeline plugin runtime, and outbound delivery. • Hermes is now installable via `pip install hermes-agent` from PyPI — no repo clone or shell installer required. • Adds cross-session 1-hour Claude prompt caching (system prompt, skills, memory) for Anthropic, OpenRouter, and Nous Portal backends. • Browser CDP calls are 180× faster via a persistent Chrome DevTools connection shared across `browser_console` evaluations. • Cold-start launch time reduced by ~19 seconds through deferred adapter loading, disk-cached model catalogs, parallel doctor checks, and a `chat -q` banner-skip flag. • Adds LINE and SimpleX Chat as first-class messaging platforms, bringing the total to 22. • `/handoff` now transfers the full active session — messages, tool calls, and context — live to a new model, persona, or profile. • Native platform button UI for `clarify` multiple-choice prompts on Telegram and Discord. • Discord channel history is now backfilled by default when the agent joins a channel or thread for the first time. • `vision_analyze` now passes raw pixels directly to vision-capable models (GPT-5, Claude, Gemini, Grok-vision) instead of converting to a text description. • Adds a per-turn file-mutation verifier footer summarizing paths, line counts, and deltas after every turn that writes or edits files. • Adds unified `video_generate` tool with pluggable provider backends, supporting new video models via a one-file plugin. • `computer_use` cua-driver backend now works with non-Anthropic models. • Heavy backends (Slack, Matrix, Feishu, DingTalk, image-gen SDKs, voice/TTS providers) now lazy-install on first use, with a supply-chain advisory checker scanning every install. • Adds Zed ACP Registry integration via `uvx`. • Adds native Windows beta support. • Adds 9 new optional skills. • Adds OpenRouter Pareto Code router. • Adds `huggingface/skills` as a trusted default skill tap. • Clickable URLs now render in any terminal. Breaking changes: • The `[all]` extras no longer include dependencies now covered by lazy-installation — packages previously pulled in by `pip install hermes-agent[all]` may no longer be present at install time and will instead be fetched on first use.

Hermes v2026.5.7

Thu, 07 May 2026 16:23:08 GMT

Hermes v2026.5.7 ships durable multi-agent Kanban, /goal persistence, video analysis, 8 P0 security closures, and Google Chat as platform #20. • Adds durable multi-agent Kanban board with heartbeats, zombie detection, per-task retries, hallucination gate, and multi-project support across profiles. • New `/goal` command locks the agent onto a target across turns (Ralph loop as a first-class primitive). • New `video_analyze` tool enables native video understanding on Gemini and compatible multimodal models. • Adds xAI Custom Voices as a TTS provider with voice cloning support. • Adds Google Chat as the 20th supported messaging platform; introduces generic platform-plugin hooks so third-party adapters drop in without touching core. • Gateway now auto-resumes interrupted sessions after restart, `/update` restarts, or source-file reloads. • Security hardening: redaction is ON by default, Discord role-allowlists are now guild-scoped (closes CVSS 8.1 cross-guild DM bypass), WhatsApp rejects strangers by default, TOCTOU windows closed across `auth.json` and MCP OAuth, browser enforces cloud-metadata SSRF floor, cron scans assembled skill content for prompt injection, and `hermes debug share` redacts at upload. • Checkpoints v2 rewrites state persistence with real pruning, disk guardrails, and no orphan shadow repos. • New `no_agent` cron mode runs a script-only watchdog, skipping the agent entirely. • Adds `allowed_channels` / `allowed_chats` / `allowed_rooms` platform allowlist config across Slack, Telegram, Mattermost, Matrix, and DingTalk. • Providers are now pluggable via `ProviderProfile` ABC and `plugins/model-providers/` directory. • API server gains `X-Hermes-Session-Key` header for stable per-session long-term memory. • MCP gains SSE transport with OAuth forwarding, stale-pipe retries, image results surfaced as MEDIA tags, and keepalive on long-lived lifecycle waits. • Curator grows `hermes curator archive`, `prune`, and `list-archived` subcommands; manual `hermes curator run` is now synchronous. • ACP gains `/steer` and `/queue` endpoints to direct the in-flight agent or queue follow-ups from Zed, VS Code, or JetBrains. • TUI adds `/model` picker with inline auth, collapsible startup banner sections, and a context-compression counter in the status bar. • Dashboard adds a Plugins management page, Profiles management page, sortable analytics tables, reverse-proxy support via `X-Forwarded-Prefix`, and a new `default-large` 18px theme. • SearXNG ships as a native search-only backend; web tools now support different backends per capability (search vs extract vs browse). • OpenRouter response caching adds explicit cache control for models that expose it. • New `[[as_document]]` skill directive forces gateway to deliver output as a document on supported platforms. • New `transform_llm_output` plugin lifecycle hook lets plugins reshape or filter LLM output before it enters the conversation. • Nous OAuth tokens now persist across profiles via a shared token store. • QQBot gains native approval keyboards with feature parity to Telegram/Discord, plus chunked upload and quoted attachments. • Adds 6 new optional skills: Shopify (Admin + Storefront GraphQL), here.now, shop-app personal shopping assistant, Anthropic financial-services bundle, kanban-video-orchestrator, and searxng-search. • Adds new models: `deepseek/deepseek-v4-pro`, `x-ai/grok-4.3`, `openrouter/owl-alpha` (free), and `tencent/hy3-preview`. • Static gateway and CLI messages now translated to 7 locales: Chinese, Japanese, German, Spanish, French, Ukrainian, and Turkish. • Adds 100 new CLI startup tips covering cron, kanban, curator, plugins, and lesser-known flags. Breaking changes: • Redaction is now ON by default — setups that relied on unredacted output in `hermes debug share` or logs will now receive redacted content without explicit opt-out. • WhatsApp now rejects messages from unknown senders by default — existing deployments open to strangers will need to explicitly configure acceptance. • Discord role-allowlists are now guild-scoped — cross-guild role grants that previously allowed DM access will no longer work.

Hermes v2026.4.30

Thu, 30 Apr 2026 18:31:21 GMT

Hermes v2026.4.30 adds autonomous skill curation, 5 new inference providers, 2 new messaging platforms, Spotify/Google Meet integrations, one-shot mode, and ~57% faster TUI cold start. • Adds `hermes curator` autonomous background agent that grades, prunes, and consolidates your skill library on a 7-day cron cycle, writing per-run reports to `logs/curator/run.json` and `REPORT.md`. • Adds `hermes curator status` to rank skills by usage, showing most-used and least-used entries. • Upgrades the self-improvement review fork to class-first (rubric-based) grading with active-update bias, proper provider/model/credential inheritance, and clean memory-provider shutdown. • Promotes ComfyUI v5 (official CLI + REST + hardware-gated local install) from optional to built-in by default. • Promotes TouchDesigner-MCP from optional to built-in by default, expanded with GLSL, post-FX, audio, geometry, and 9 new reference docs. • Adds new Humanizer skill that strips AI-isms from text output. • Adds `/reload-skills` slash command and direct-URL skill install support. • Upgrades LM Studio from a custom-endpoint alias to a full native inference provider with dedicated auth, `hermes doctor` checks, reasoning transport, and live `/models` listing. • Adds four new inference providers: GMI Cloud, Azure AI Foundry (with auto-detection), MiniMax (OAuth with PKCE browser flow), and Tencent Tokenhub. • Makes the gateway a plugin host with drop-in messaging adapters; ships Microsoft Teams as the first plugin-delivered platform. • Adds Tencent 元宝 (Yuanbao) as the 18th native gateway messaging platform with text and media delivery. • Adds native Spotify integration: 7 tools (play, search, queue, playlists, devices) behind PKCE OAuth, interactive setup wizard, bundled skill, and cron usage. • Adds Google Meet plugin for joining calls, transcribing, speaking, and following up via realtime OpenAI transport and a bundled Node bot server. • Adds `hermes -z ` non-interactive one-shot mode with `--model`, `--provider`, and `HERMES_INFERENCE_MODEL` support. • Adds `hermes update --check` preflight check and opt-in pre-update HERMES_HOME backup. • Adds a Models dashboard tab with per-model analytics and in-browser switching of main and auxiliary models. • Adds remote model catalog manifest so new OpenRouter and Nous Portal models appear without a release. • Adds native multimodal image routing based on each model's actual vision capability rather than provider defaults. • Adds native multi-image sending across Telegram, Discord, Slack, Mattermost, Email, and Signal; adds centralized audio routing with FLAC support and Telegram document fallback. • Adds LaTeX rendering, `/reload` .env hot-reload, pluggable busy-indicator styles, opt-in auto-resume of last session, session delete from `/resume` picker with `d`, modified mouse-wheel line scroll, and a `/mouse` toggle to suppress ConPTY phantom mouse injection in the TUI. • Bundles Langfuse observability plugin and hermes-achievements plugin that scans full session history. • Adds a pluggable `tts.providers.` registry and ships Piper as a native local TTS provider. • Adds Vercel Sandbox as an `execute_code`/terminal backend. • Adds configurable `prompt_caching.cache_ttl` (5-minute default, 1-hour opt-in) for cost savings on bursty sessions. • Cuts visible TUI cold start by ~57% via lazy agent init, lazy imports, mtime-cached load_config(), memoized get_tool_definitions() with TTL-cached `check_fn` results, and precompiled dangerous-command patterns. Breaking changes: • Secret redaction is now off by default; working setups that relied on automatic secret redaction must explicitly opt in via `redaction.enabled: true`.

Hermes v2026.4.23

Thu, 23 Apr 2026 22:32:13 GMT

Hermes v2026.4.23 adds a full Ink TUI, native AWS Bedrock, 5 new inference providers, QQBot, and a vastly expanded plugin surface. • Adds `hermes --tui`: a full React/Ink rewrite of the interactive CLI with sticky composer, live streaming, OSC-52 clipboard support, per-turn stopwatch, git branch status bar, `/clear` confirm, light-theme preset, and subagent spawn observability overlay. • Adds pluggable `agent/transports/` layer with `AnthropicTransport`, `ChatCompletionsTransport`, `ResponsesApiTransport`, and `BedrockTransport` — each owning its own format conversion and API shape. • Adds native AWS Bedrock provider support via the Converse API. • Adds five new inference providers: NVIDIA NIM, Arcee AI, Step Plan, Google Gemini CLI OAuth, and Vercel ai-gateway (with pricing and dynamic discovery). • Adds GPT-5.5 access via ChatGPT Codex OAuth, with live model discovery wired into the model picker so new OpenAI releases appear without catalog updates. • Adds QQBot as the 17th supported messaging platform via QQ Official API v2, with QR scan-to-configure setup wizard, streaming cursor, emoji reactions, and DM/group policy gating. • Expands plugin surface: plugins can now register slash commands (`register_command`), dispatch tools directly (`dispatch_tool`), veto tool execution from `pre_tool_call` hooks, rewrite tool results (`transform_tool_result`), transform terminal output (`transform_terminal_output`), ship image_gen backends, and add custom dashboard tabs. • Adds `/steer ` command to inject mid-run nudges to a running agent after its next tool call without interrupting the turn or breaking prompt cache. • Adds shell hook support so any shell script can be wired as a Hermes lifecycle hook (`pre_tool_call`, `post_tool_call`, `on_session_start`, etc.) without writing a Python plugin. • Adds webhook direct-delivery mode to forward payloads straight to a platform chat without invoking the agent — enabling zero-LLM push notifications for alerting and uptime checks. • Adds explicit `orchestrator` role for subagents with configurable `max_spawn_depth`, plus a file-coordination layer so concurrent sibling subagents share filesystem state without clobbering each other. • Adds a dedicated 'Configure auxiliary models' screen in `hermes model` for per-task model overrides (compression, vision, session_search, title_generation). • Adds extensible web dashboard plugin system: third-party plugins can add custom tabs, widgets, and views; paired with live-switching themes controlling colors, fonts, layout, and density without a reload. • Adds dashboard i18n (English + Chinese), mobile-responsive layout, real per-session API call tracking, and one-click update and gateway restart buttons. • Adds per-provider and per-model `request_timeout_seconds` configuration. • Adds configurable API retry count via `agent.api_max_retries`. • Adds Kimi K2.6 across OpenRouter, Nous Portal, native Kimi, and HuggingFace. • Adds Xiaomi MiMo v2.5-pro and v2.5 on OpenRouter, Nous Portal, and native providers. • Adds Claude Opus 4.7 to the Nous Portal catalog. • Adds `/model` merging of models.dev entries for additional providers. • Adds Gemini routing through the native AI Studio API for improved performance. • Adds xAI Grok upgraded to the Responses API. • Adds Ollama cloud provider support, GLM continuation, `think=false` control, surrogate sanitization, and `/v1` hint. Breaking changes: • `auto` auxiliary model routing now defaults to the main model for side tasks for all users — previously, aggregator users were silently routed to a cheap provider-side default.

Hermes v2026.4.16

Thu, 16 Apr 2026 19:53:25 GMT

Hermes v2026.4.16 adds Nous Tool Gateway: web search, image gen, TTS, and browser automation for Portal subscribers. • New Nous Tool Gateway gives paid Nous Portal subscribers automatic access to web search (Firecrawl), image generation (FAL / FLUX 2 Pro), text-to-speech (OpenAI TTS), and browser automation (Browser Use) — no extra API keys required. • Per-tool opt-in via `use_gateway` config key, with full visibility through `hermes tools` and `hermes status`. • Runtime now prefers the gateway over direct API keys when both are present. Breaking changes: • The `HERMES_ENABLE_NOUS_MANAGED_TOOLS` environment variable is replaced by subscription-based detection via the Nous Tool Gateway; setups relying on that env var will no longer activate managed tools.

Hermes v2026.4.13

Mon, 13 Apr 2026 18:52:41 GMT

Hermes v2026.4.13 adds iMessage/WeChat, Fast Mode, local web dashboard, background process monitoring, backup/restore, and 16-platform coverage. • Adds local browser-based web dashboard for managing agent settings, sessions, skills, and gateway configuration without editing config files. • Adds `/fast` toggle for priority-queue routing on OpenAI (GPT-5.4, Codex) and Anthropic (Claude) models for significantly lower latency. • Adds iMessage integration via BlueBubbles with auto-webhook registration and setup wizard. • Adds native WeChat (Weixin) support via iLink Bot API with streaming, media uploads, and markdown link handling. • Adds WeCom callback-mode adapter for self-built enterprise apps with atomic state persistence. • Adds Termux/Android support — run Hermes natively on Android with TUI optimizations, voice backend, and `/image` command. • Adds `watch_patterns` for background process monitoring, delivering real-time alerts when output matches defined patterns without polling. • Adds native xAI (Grok) provider with direct API access, model catalog, and setup wizard integration. • Adds Xiaomi MiMo as a first-class provider with setup wizard, model catalog, and empty response recovery. • Adds Qwen OAuth provider with portal request support. • Adds pluggable context engine slot via `hermes plugins` for swapping in custom context engines (filtering, summarization, domain injection). • Adds unified SOCKS proxy, `DISCORD_PROXY`, and system proxy auto-detection across all gateway platforms. • Adds `hermes backup` and `hermes import` commands for full backup and restore of configuration, sessions, skills, and memory. • Adds `/debug` slash command across all platforms and `hermes debug share` to upload a full debug report to a pastebin. • Adds `/compress ` for guided context compression scoped to a specific topic. • Adds allowed-channels whitelist config for Discord. • Adds `DISCORD_REPLY_TO_MODE` setting for Discord. • Adds rate limit header capture displayed in `/usage`. • Adds custom providers to `/model` listings and resolution. • Adds fallback provider activation on repeated empty responses with user-visible status. • Adds comprehensive security hardening: path traversal protection in checkpoint manager, shell injection neutralization in sandbox writes, SSRF redirect guards in Slack image uploads, Twilio webhook signature validation, API server auth enforcement, git argument injection prevention, and approval button authorization. • Expands platform support to 16 messaging platforms including BlueBubbles (iMessage) and WeChat alongside existing Telegram, Discord, Slack, WhatsApp, Signal, Matrix, Email, SMS, DingTalk, Feishu, WeCom, Mattermost, Home Assistant, and Webhooks.

Hermes v2026.4.8

Wed, 08 Apr 2026 11:56:44 GMT

Hermes v2026.4.8 adds MCP OAuth 2.1, live model switching, background task notifications, Google AI Studio, and OSV malware scanning. • Adds `notify_on_complete` for background tasks — agent is automatically notified when long-running processes (builds, tests, deployments) finish, eliminating polling. • New `/model` command enables live model and provider switching mid-session across CLI, Telegram, Discord, Slack, and other gateway platforms. • Adds native Google AI Studio (Gemini) provider with automatic context length detection via models.dev registry. • Adds MCP OAuth 2.1 PKCE support for standards-compliant MCP server authentication. • Adds automatic OSV malware scanning of MCP extension packages on install. • Adds approval buttons on Slack and Telegram for dangerous command approvals — replaces typing `/approve` with native inline buttons. • Adds inactivity-based agent timeouts — agents are only timed out when truly idle, not when actively running tools. • Adds `hermes logs` command for tailing and filtering structured agent logs written to `~/.hermes/logs/` (agent.log + errors.log). • Adds config structure validation at startup to catch malformed YAML before it causes cryptic failures. • Expands plugin system: plugins can now register CLI subcommands, receive request-scoped API hooks with correlation IDs, prompt for required env vars during install, and hook into session lifecycle events. • Adds MiniMax TTS provider (speech-2.8) for text-to-speech. • Adds interactive model picker with inline buttons for Telegram and Discord. • Adds xAI (Grok) prompt caching via `x-grok-conv-id` header. • Adds model pricing display for OpenRouter and Nous Portal providers. • Adds free-tier Xiaomi MiMo v2 Pro model on Nous Portal for auxiliary tasks (compression, vision, summarization). • Adds Matrix Tier 1 support: reactions, read receipts, rich formatting, and room management. • Adds Discord channel controls and ignored-channels configuration. • Adds Signal MEDIA: tag delivery and Mattermost file attachments. • Self-optimized GPT/Codex tool-use guidance via automated behavioral benchmarking, patching 5 failure modes for improved reliability on OpenAI models. • Adds thinking-only prefill continuation for structured reasoning on supported models. • Oversized tool results are now saved to file instead of being destructively truncated. • Adds `HERMES_PORTAL_BASE_URL` env var to override the Nous portal base URL during login. • Adds Z.AI endpoint auto-detection via probe and cache. • Adds non-agentic model warning when loading Hermes LLM models not designed for tool use. • Security hardening: consolidated SSRF protections, timing attack mitigations, tar traversal prevention, credential leakage guards, cron path traversal hardening, and cross-session isolation.

Hermes v2026.4.3

Fri, 03 Apr 2026 18:15:29 GMT

Hermes v2026.4.3 adds pluggable memory backends, credential pool rotation, Camoufox stealth browser, secret exfiltration blocking, and ACP/MCP editor integration. • Adds pluggable memory provider interface — third-party backends (Honcho, vector stores, custom DBs) implement a provider ABC and register via the plugin system. • Adds same-provider credential pools with automatic `least_used` rotation and 401-triggered failover across multiple API keys via `credential_pool` config. • Adds Camoufox anti-detection browser backend for stealth browsing with persistent sessions, VNC URL discovery, and configurable SSRF bypass; auto-install via `hermes tools`. • Adds inline diff previews for file write and patch operations in the tool activity feed. • Adds API server session continuity via `X-Hermes-Session-Id` headers and real-time tool progress streaming for Open WebUI integration. • Adds ACP support for client-provided MCP servers — VS Code, Zed, and JetBrains editor MCP servers are picked up as additional agent tools. • Adds secret exfiltration blocking: browser URLs and LLM responses are scanned for secret patterns, blocking URL-encoded, base64, and prompt-injection exfiltration attempts. • Expands credential directory protection to `.docker`, `.azure`, and `.config/gh`; redacts `execute_code` sandbox output. • Adds `developer` role support for GPT-5 and Codex models. • Adds Anthropic long-context tier 429 handling — automatically reduces context to 200k on tier limit hits. • Adds auto-detection of models from server probe during custom endpoint setup. • Adds skill-aware slash commands — gateway dynamically registers installed skills as slash commands with paginated `/commands` list. • Makes `config.yaml` the single source of truth for endpoint URLs, eliminating conflicts with environment variables. • Adds Honcho full integration parity as the reference memory provider plugin with profile-scoped host/peer resolution. • Adds token usage persistence for non-CLI sessions. • Adds DM thread sessions seeded with parent transcript to preserve context.

Hermes v2026.3.30

Mon, 30 Mar 2026 15:30:14 GMT

Hermes v2026.3.30 adds multi-instance profiles, MCP server mode, Feishu/WeCom/Slack multi-workspace support, fallback provider chains, and Exa search. • New `hermes profile create/list/switch/delete/export/import/rename` commands enable fully isolated multi-instance deployments, each with its own config, memory, sessions, skills, and gateway service with token-lock credential isolation. • New `hermes mcp serve` exposes conversations, sessions, messages, and attachments to any MCP-compatible client (Claude Desktop, Cursor, VS Code) via stdio or Streamable HTTP transports. • Official Dockerfile enables running Hermes Agent in a container in both CLI and gateway modes with volume-mounted config. • New `fallback_providers` config key enables an ordered failover chain across multiple inference providers. • Adds full gateway adapter for Feishu/Lark with event subscriptions, message cards, group chat, image/file attachments, and interactive card callbacks. • Adds new gateway adapter for WeCom (Enterprise WeChat) supporting text, image, and voice messages, group chats, and callback verification. • Slack gateway now supports multi-workspace OAuth, connecting a single gateway to multiple workspaces via an OAuth token file with per-workspace bot token resolution. • Telegram adapter gains webhook mode as a production alternative to polling, plus configurable group mention gating (always, @mention-only, or regex-triggered). • Adds Exa as an alternative web search and content extraction backend alongside Firecrawl and DuckDuckGo, configured via `EXA_API_KEY`. • Skills and credential files can now be mounted into Modal and Docker remote backends so remote terminal sessions share the same skills and secrets as local execution. • Discord gateway adds a `DISCORD_IGNORE_NO_MENTION` env variable to skip messages that @mention other users or bots but not Hermes. • Discord gateway adds a processing reaction emoji that appears while a request is in flight and is removed on completion. • Matrix adapter sends voice messages as native Matrix voice events via MSC3245 instead of file attachments. • Mattermost adapter gains configurable mention behavior to respond without requiring an @mention. • Gemini 3.1 preview models added to OpenRouter and Nous Portal catalogs. • Rate limit (429) responses now display a user-friendly message with a Retry-After countdown. • Curated model lists are now preferred over live API probes when the probe returns fewer models. Breaking changes: • When no provider is configured, Hermes now raises a clear error instead of silently routing to OpenRouter.

Hermes v2026.3.28

Sat, 28 Mar 2026 20:12:05 GMT

Hermes v2026.3.28 adds Hugging Face inference, Telegram topic isolation, plugin lifecycle hooks, native Modal SDK, and a Nix flake. • Adds Hugging Face Inference API as a first-class provider with auth, setup wizard, curated agentic model picker, and live `/models` endpoint probe. • Enables Telegram Private Chat Topics for project-based conversations with per-topic skill binding and isolated workflows within a single chat. • Activates plugin lifecycle hooks — `pre_llm_call`, `post_llm_call`, `on_session_start`, and `on_session_end` — now firing in the agent loop and CLI/gateway. • Replaces swe-rex dependency with native Modal SDK (`Sandbox.create.aio` + `exec.aio`), eliminating tunnel requirements for the Modal terminal backend. • Adds `GPT_TOOL_USE_GUIDANCE` to enforce tool calls in GPT models instead of prose descriptions, and strips stale budget warnings from conversation history. • Introduces Nix flake with full uv2nix build, NixOS module with persistent container mode, and auto-generated config keys from Python source. • Expands Nous Portal to 400+ available models via a single provider endpoint. • Adds `/resume` CLI handler and `reopen_session` API for returning to previous sessions. • Adds `--source` flag for third-party session isolation by origin. • Introduces session search recent-sessions mode — omit query to browse recent sessions with titles, previews, and timestamps. • Exposes `compression.target_ratio`, `protect_last_n`, and `threshold` in `DEFAULT_CONFIG` for ratio-based context compression tuning. • Persists reasoning across gateway session turns with new schema v6 columns (`reasoning`, `reasoning_details`, `codex_reasoning_items`). • Adds supply chain hardening: CI workflow scanning PRs for supply chain attack patterns, pinned dependency ranges, and regenerated `uv.lock` with hashes. • Adds per-model native output limits for Anthropic models (128K for Opus 4.6, 64K for Sonnet 4.6) replacing hardcoded 16K `max_tokens`. • Adds thinking-budget exhaustion detection to skip useless continuation retries when a model uses all output tokens on reasoning. • Gives subagents independent iteration budgets. • Surfaces all retry, fallback, and compression events to the user as formatted messages. • Adds auto-discovery of fallback IPs via DNS-over-HTTPS when `api.telegram.org` is unreachable. • Removes `/model` slash command from CLI and gateway in favor of `hermes model` subcommand. • Increases API timeout default from 900s to 1800s to support slow-thinking models. Breaking changes: • The `/model` slash command is removed from CLI and gateway; use the `hermes model` subcommand instead. • The `summary_target_tokens` config key is replaced with ratio-based scaling; existing configurations referencing it will have no effect. • The `litellm` dependency is removed; any external code or plugins that relied on it will break.

Hermes v2026.3.23

Tue, 24 Mar 2026 05:34:23 GMT

Hermes v2026.3.23 adds an OpenAI-compatible API server, 6 messaging adapters, 4 inference providers, and MCP OAuth 2.1 management. • Adds OpenAI-compatible `/v1/chat/completions` API server with `/api/jobs` REST API for cron job management, SQLite-backed response persistence, input limits, field whitelists, and CORS origin protection. • Adds 6 new messaging platform adapters: Signal, DingTalk, SMS (Twilio), Mattermost, Matrix, and Webhook — joining existing Telegram, Discord, and WhatsApp support, with exponential-backoff auto-reconnect. • Adds `@file` and `@url` context injection with tab completions in the CLI for Claude Code-style context references. • Adds 4 new inference providers: GitHub Copilot (OAuth + token validation, 400k context), Alibaba Cloud / DashScope, Kilo Code, and OpenCode Zen/Go. • Adds `hermes mcp` command suite for installing, configuring, and authenticating MCP servers with full OAuth 2.1 PKCE flow. • Adds gateway prompt caching — caches AIAgent instances per session to preserve Anthropic prompt cache across turns, reducing cost on long conversations. • Adds NeuTTS local TTS provider backend with built-in setup flow. • Enables CLI streaming by default with spinner and tool progress display during streaming mode. • Adds `/statusbar` command to toggle a persistent config bar showing model and provider info in the prompt. • Adds `/queue` command to queue prompts for the agent without interrupting the current run. • Adds `/permission` command to switch approval mode dynamically during a session. • Adds `/browser` command for interactive browser sessions from the CLI. • Adds `/cost` command for live pricing and usage tracking in gateway mode. • Adds `/approve` and `/deny` commands replacing bare text approval in gateway mode. • Adds `show_reasoning` config option to display reasoning/thinking blocks during inference. • Adds context pressure warnings for CLI and gateway modes. • Adds `${ENV_VAR}` substitution support in config.yaml. • Adds real-time config reload — config.yaml changes apply without restarting the agent. • Adds `custom_models.yaml` for user-managed model additions. • Adds priority-based context file selection with CLAUDE.md support. • Adds merging of nested YAML sections instead of full replacement on config update. • Adds overhaul of context compression with structured summaries, iterative updates, token-budget tail protection, configurable summary endpoint, and fallback model support. • Adds context length detection overhaul with models.dev integration, provider-aware resolution, fuzzy matching for custom endpoints, and `/v1/props` support for llama.cpp. • Adds eager fallback to a backup model on rate-limit errors. • Adds endpoint metadata support for querying local servers for actual context window size and pricing. Breaking changes: • The `ANTHROPIC_BASE_URL` environment variable is removed to avoid collisions — configurations relying on it will no longer apply.

Hermes v2026.3.17

Tue, 17 Mar 2026 07:56:07 GMT

Hermes v2026.3.17 adds streaming, a plugin architecture, native Anthropic provider, voice mode, PII redaction, persistent shell, and CDP browser attach. • Adds unified streaming infrastructure delivering real-time token-by-token output in the CLI and all gateway platforms. • Introduces a first-class plugin architecture: drop Python files into `~/.hermes/plugins/` to add custom tools, commands, and hooks without forking. • Adds native Anthropic provider with Claude Code credential auto-discovery, OAuth PKCE flows, and native prompt caching — no OpenRouter required. • New smart approvals system learns which commands are safe and remembers preferences; `/stop` command immediately kills the current agent run. • Adds Honcho memory integration with async writes, configurable recall modes, session title support, and multi-user isolation in gateway mode. • Adds voice mode: push-to-talk in CLI, voice notes in Telegram/Discord, Discord voice channel support, and local Whisper transcription via faster-whisper. • Concurrent tool execution via ThreadPoolExecutor runs multiple independent tool calls in parallel, reducing multi-tool turn latency. • New `privacy.redact_pii` setting automatically scrubs personally identifiable information before sending context to LLM providers. • New `/browser connect` command attaches browser tools to a live Chrome instance via Chrome DevTools Protocol. • Adds Vercel AI Gateway as a provider, routing Hermes through Vercel's model catalog and infrastructure. • Rebuilt centralized provider router with `call_llm` API, unified `/model` command, auto-detect provider on model switch, and direct endpoint overrides. • New ACP server enables VS Code, Zed, and JetBrains to connect to Hermes as an agent backend with full slash command support. • Persistent shell mode lets local and SSH terminal backends maintain shell state (working directory, env vars, aliases) across tool calls. • Adds `--pass-session-id` flag to include the session ID in the system prompt. • Adds Anthropic Context Editing API support. • New system gateway service mode allows running Hermes as a system-level systemd service. • Reasoning hot reload allows changing reasoning settings in gateway mode without a restart. • Adds Agentic On-Policy Distillation (OPD) RL training environment for distilling agent policies. • Native Anthropic auxiliary vision support uses Claude's native vision API for image processing instead of OpenAI-compatible endpoints. • Accepts unlisted models with a warning instead of rejecting them outright. • CLI token counts are now persisted to the session DB for use with `/insights`. Breaking changes: • Default group gateway sessions now use per-user isolation instead of shared state across users in group chats.

Hermes v2026.3.12

Thu, 12 Mar 2026 10:07:34 GMT

Hermes Agent v2026.3.12 adds MCP client support, multi-platform messaging gateways, git worktree isolation, filesystem rollback, and 70+ bundled skills. • Adds MCP (Model Context Protocol) client with stdio and HTTP transports, reconnection, resource/prompt discovery, and server-initiated LLM sampling requests. • Adds multi-platform messaging gateway supporting Telegram, Discord, Slack, WhatsApp, Signal, Email (IMAP/SMTP), and Home Assistant with unified session management and media attachments. • Adds `hermes -w` flag to launch isolated agent sessions in git worktrees for safe parallel work on the same repository. • Adds filesystem checkpoints with automatic snapshots before destructive operations and `/rollback` command to restore prior state. • Adds Skills Ecosystem with 70+ bundled and optional skills across 15+ categories, a Skills Hub for community discovery, per-platform enable/disable, and prerequisite validation. • Adds ACP Server for VS Code, Zed, and JetBrains editor integration via the Agent Communication Protocol standard. • Adds data-driven CLI skin/theme engine with 7 built-in skins (default, ares, mono, slate, poseidon, sisyphus, charizard) and support for custom YAML skins. • Adds centralized provider router with unified call_llm() / async_call_llm() API and resolve_provider_client() for automatic credential resolution across all LLM consumers. • Adds support for OpenAI Codex (Responses API) with ChatGPT subscription and OAuth vision/multimodal content. • Adds Kimi Code API, z.ai/GLM, Kimi/Moonshot, MiniMax, and Azure OpenAI as first-class providers. • Adds self-hosted Firecrawl support. • Adds OpenRouter provider routing via `provider_preferences` configuration. • Adds `/reasoning` command for configuring reasoning effort level and display toggle. • Adds `/personality` command for setting and disabling custom agent personalities. • Adds `/verbose` slash command to toggle debug output at runtime. • Adds `/insights` command for usage analytics, cost estimation, and activity patterns. • Adds `/background` command for managing background processes. • Adds `/compress`, `/usage`, and `/update` slash commands to the gateway. • Adds `/resume` command for switching to named sessions in the gateway. • Adds session naming with unique titles, auto-lineage, rich listing, and resume-by-name. • Adds interactive session browser with search filtering. • Adds Honcho AI-native cross-session user modeling. • Adds `--quiet` / `-Q` flag for programmatic single-query mode. • Adds `--fuck-it-ship-it` flag to bypass all approval prompts. • Adds `hermes tools` subcommand with a curses UI for per-platform tool enable/disable. • Adds `hermes doctor` subcommand for health checks across all configured providers. • Adds `hermes update` subcommand with auto-restart for the gateway service. • Adds user-defined quick commands that bypass the agent loop. • Adds simple fallback model configuration for provider resilience. • Adds configurable subagent provider/model with full credential resolution. • Adds tool call repair middleware with auto-lowercase and invalid-tool handling. • Adds smart context length probing with persistent caching and banner display. • Adds Nous Portal as a first-class provider in the setup wizard. • Adds config migration system (currently v7) and modular setup wizard with section subcommands. • Adds terminal bell notification when the agent finishes a task. • Adds clipboard image paste via Alt+V / Ctrl+V. • Adds up/down arrow history navigation in the interactive CLI. • Adds Signal messenger gateway via signal-cli-rest-api with media URL support. • Adds full email gateway platform via IMAP/SMTP. • Adds Home Assistant REST tools and WebSocket gateway with service discovery. • Adds DISCORD_ALLOW_BOTS config option for bot message filtering. • Adds WhatsApp native media sending (images, videos, documents) and multi-user session isolation. • Adds Telegram forum topic session isolation and browser screenshot sharing via MEDIA: protocol. • Adds configurable background process watcher notifications. • Adds edit_message() for Telegram, Discord, and Slack with fallback. • Adds `/model` validation against the live API instead of hardcoded lists. • Adds `/model` and `/provider` unified single view. • Adds reasoning effort configuration via `/reasoning` command. • Adds iteration budget pressure via tool result injection and shared budget across parent and subagent delegation. • Adds atomic write for `.env` to prevent API key loss on crash. • Adds multiple named custom provider support. • Adds loading indicators for slow slash commands. • Adds tools summary flag.