Hermes — The Cyber Toolchain

Hermes v2026.8.18

Tue, 18 Aug 2026 07:26:46 GMT

Hermes v2026.8.18 adds Browser Use mode, `hermes peer`, Meta Muse Spark provider, per-plugin durable storage, and inline message components. • Adds `hermes peer` subcommand for bot-to-bot DMs across machines and gateways. • Adds Meta Model API (Muse Spark) as a bundled provider plugin, with Meta Muse Spark 1.2 available in the OpenRouter curated picker. • Adds per-plugin durable data directory that survives plugin updates and removal. • Enables plugins to render inline components inside assistant messages via `::name{...}` directives, including `::preview` which renders pages live inside the message. • Adds NVIDIA SkillEvaluator Tier 1 advisory scanning on skill installs, covering license and security checks. • Adds project-skill quarantine with non-interactive trust inheritance. • Adds cross-connection Bot Mode — Create-on picker and multi-machine group chats — plus `disband` (delete) for group chats. • Adds Browser Use mode A/B benchmark (`feat(evals): add the Browser Use mode A/B benchmark`) to the evals suite. • Widget clicks now reach the agent as hidden user turns, making widget interaction a first-class agentic response path. • Adds an out-of-sync warning in About when the app build diverges from the runtime, with a direct link to the installer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.8.16.2

Mon, 17 Aug 2026 18:43:27 GMT

Hermes v2026.8.16.2 adds Bot Mode plugin, remote gateway headers, Cua Driver 0.20 support, and `/rollback --all` flag. • Bundles Bot Mode (`hermes-bots`) as a built-in, default-on plugin with the core teammate protocol for Bot Chat sessions. • Adds support for remote gateway headers, carried through the connections registry, test probes, and Settings UI. • Supports Cua Driver 0.20 runtime contracts for computer-use, with auto-repair of installed drivers that fail the runtime contract. • Raises Codex OAuth context window to 900K tokens for the gpt-5.6 family and gpt-5.4 (subscription 1M rollout), and to a live-verified 350K for those same models. • Adds connection-aware plugin routing in the desktop app, scoping plugin socket connections to the active profile. • Adds a status bar reconnect action for offline gateways, with self-healing for dropped SSH/HTTP registered remote connections. • Adds `context-manager` protocol support on `SessionDB` for safer session state management. • Supports UTF-16 file reads and Gemini 3 tool-call ID preservation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.8.16

Sun, 16 Aug 2026 17:33:22 GMT

Hermes v2026.8.16 adds key_cmd credential sourcing, lean compaction mode, multi-source agent fan-out, and plugin SDK exports for MCP and toolset config panels. • Adds `key_cmd` credential source to provider config, letting operators specify a shell command that prints a short-lived token instead of storing a static key — output can be a bare token or JSON with `access_token` and optional `expires_in` fields; token is cached until near expiry. • Exports `McpTab`, `ToolsetConfigPanel`, and `HermesGateway` type from `@hermes/plugin-sdk`, plus a host.getGateway() method returning the live `$gateway` instance, so desktop plugins can render full credential, OAuth, and MCP server configuration panels matching Settings → Capabilities. • Adds multi-source agent support to the desktop app — sockets, roster, SDK, and fan-out updates are now handled end-to-end. • Adds user-facing authorization flow for cua-driver browser attachment in computer-use mode. • Shows per-turn wall-clock duration in the desktop transcript. • Adds INFO log records for 'prompt accepted / turn finished' on the Desktop/TUI turn path. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.8.13

Thu, 13 Aug 2026 20:37:37 GMT

Hermes v2026.8.13 adds `profiles.list`/`profiles.create` ws RPCs, `setup_mcp` consent tool, `image.generate` RPC, and per-route webhook toolset overrides. • Adds `profiles.list` and `profiles.create` ws JSON-RPC methods (in `tui_gateway/methods_profiles.py`), giving desktop plugins the ability to enumerate profiles (name, path, model/provider, description, skill_count, optional `last_session` preview via `include_sessions`) and create new profiles without going through the dashboard REST router. • Adds `setup_mcp` tool that renders an inline MCP consent card in the desktop transcript using a clarify-style blocking bridge, with composer draft suggestions surfaced as brand pills. • Adds `image.generate` ws RPC for plugin surfaces. • Adds per-route toolset overrides for webhook agent runs. • Surfaces model drift impact in the Desktop cron view. • Adds cron and blueprint recipes to the sidebar nav rail. • Labels the agent's recommended choice on clarify surfaces across the desktop UI. • Adds skill-match, connection-repair, and recurrence-to-cron suggestion providers to the desktop composer. • Suppresses composer suggestions the user has repeatedly ignored. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.8.3

Mon, 03 Aug 2026 16:57:52 GMT

Hermes v2026.8.3 adds conversational voice with barge-in, A2A v1.0, signed outbound webhooks, grounded citations, a plugin SDK, and a wave of CLI power commands. • Adds `!command` shell escape to run a shell command instantly from the CLI without spending a model turn. • Adds `/init` CLI command to scan a project and generate or update an `AGENTS.md` file. • Adds `/diff` CLI command to show staged, all, or session changes from any surface. • Adds `/context` CLI command to break down exactly what is filling the context window. • Adds `/focus` CLI command for a reduced-output view with hidden-line recovery. • Adds `hermes import-agent` command to migrate a Claude Code or Codex CLI setup into Hermes in one command. • Adds `hermes approvals suggest` command to mine approval history into allowlist proposals. • Adds a new `hermes tools` category for STT configuration with GUI toggles and dashboard dropdowns. • Raises the default tool-calling iteration limit from 90 to 500, enabling long autonomous runs that previously hit an artificial ceiling. • Adds streaming conversational voice mode with clause-by-clause TTS, barge-in interruption, and busy-aware silence detection across the CLI, desktop, and gateway adapters. • Adds on-device open-vocabulary wake-word detection with multi-profile voice routing and a 'stop' keyword to end voice chat on any surface — no audio leaves the device while waiting. • Adds voice note support on WhatsApp, Feishu, DingTalk, LINE, QQ, Photon, and Weixin, with auto-TTS replies delivered in the platform-appropriate codec (opus with captions). • Adds OpenAI `gpt-transcribe` as a supported STT provider with unified language resolution. • Adds the `grounded-citations` skill, which matches quotes against actual page text, links citations to exact evidence, and includes a fact-checking mode for any document or claim. • Adds signed outbound webhooks that push HMAC-verified lifecycle events (session activity, turn completions, tool events) to any registered HTTP endpoint — no polling required. • Adds a bundled Agent-to-Agent (A2A v1.0) plugin so Hermes can discover, communicate with, and be driven by other A2A-compatible agents. • Adds desktop artifacts: versioned cards with sandboxed live preview in a right-rail viewer so generated HTML/apps run safely beside the chat. • Adds a plugin SDK with `ctx.download` for handing users files, floating pane placement, and multiple GUI windows; includes Kanban as the founding plugin. • Adds a global-hotkey quick-entry window to capture a thought into any session from anywhere in the OS. • Adds mid-turn redirect capability: typing a correction while the agent is working redirects the active turn, preserving work in flight and the original prompt. • Adds a compression-threshold configuration that is now settable per-model and in absolute tokens, with a guaranteed N-user-message tail so recent conversation always survives pruning. • Adds a consecutive-denial circuit breaker to stop misbehaving approval loops, plus a new approval gate for docker/podman daemon-redirect commands. • Adds an approval gate specifically for docker/podman daemon-redirect commands. • Adds proactive tool-result pruning, per-turn micro-compaction, and progress-aware timeouts to context compression for large-window models. • Adds truncated terminal output spill-to-file so the agent can read back output that exceeded the display limit. • Adds `patch` self-diagnosis for already-applied edits and whitespace mismatches, `write_file` on-disk content verification, and near-miss probing for searches that match nothing. • Adds prompt caching coverage for tool schemas on native Anthropic without history loss. • Reduces `hermes -w` cold start from ~14 s to ~1.8 s and makes `hermes update` no-ops 2–6 s faster. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.7.20

Mon, 20 Jul 2026 18:35:55 GMT

Hermes v2026.7.20 slashes first-token latency 80%, adds password-manager secret sources, live subagent transcripts, and terminal subscription management. • Cuts cold-start first-turn latency ~80% (4.3s → 0.9s) across CLI, TUI, gateway, desktop, and cron. • Streams reasoning model thinking live by default (`display.show_reasoning` on) — no more waiting at a spinner. • Adds `/subscription` and `/topup` commands to manage your Nous plan and billing directly from the terminal or TUI. • Adds `/deny ` command to tell the agent why a command was refused so it can course-correct. • Introduces user-defined deny rules that block commands even under yolo mode. • Enables smart approvals by default — an LLM reviewer independently assesses flagged commands instead of prompting the user each time. • Adds Bitwarden and 1Password (`op://` references) as pluggable `SecretSource` providers, so API keys no longer need to live in plaintext `.env` files. • Makes `delegate_task` subagent dispatches produce live tail-able transcript files per child agent. • Adds a durable delivery-obligation ledger in `state.db` so final responses are redelivered on next boot if the gateway crashed before platform delivery (covers Telegram, Discord, Slack, and others). • Supports profile-based message routing in a single multiplexed gateway — route guilds, channels, or threads to fully isolated profiles. • Adds `hermes sessions export` with Markdown, Quarto, HTML, prompt-only, and Hugging Face trace output formats, a `--redact` secret-scrubbing pass, and filters by age, workspace, and platform. • Adds Fireworks AI and DeepInfra as first-class model providers, plus Upstage Solar. • Adds new model catalog entries: GPT-5.6 (Sol/Terra/Luna + Pro variants), grok-4.5 (GA), moonshotai/kimi-k3, claude-fable-5/claude-sonnet-5, tencent/hy3 (GA), and LM Studio JIT local model loading. • Adds `max` and `ultra` reasoning-effort tiers with per-model config overrides and per-slot effort in MoA presets. • Adds a terminal execution backend picker (local/docker/ssh/modal/daytona/singularity) with per-backend health probes in the Desktop Capabilities tab. • Adds a declarative memory provider panel with full-config modal in the Desktop settings. • Adds a per-job model picker in the desktop cron create/edit dialog. • Adds per-session color override and project-inherited color/icon in the desktop session sidebar. • Delivers 14× less markdown-splitter CPU via incremental block lexing, virtualized review-pane diffs, and eliminated per-token sidebar re-renders in the desktop app. • Scopes Vertex credentials away from subprocess env, adds a shared credential-read guard for media/vision/image-gen local file reads, adds webhook body-size caps across all aiohttp servers, and redacts bot tokens in Telegram transport errors. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.7.7

Wed, 08 Jul 2026 01:15:00 GMT

Hermes v2026.7.7 adds session bulk-archive, expanded prune filters, 1Password secrets, one-shot usage reports, and ~80% faster first-token latency. • Adds `hermes sessions archive` subcommand to bulk soft-hide sessions without deleting them. • Expands `hermes sessions prune` with a full filter surface: time bounds (`--started-before`/`--started-after`), model, provider, user/chat origin, git branch, token count, cost, tool calls, and more — filters now match all ages when any attribute filter is supplied, dropping the implicit 90-day cutoff. • Prune dry-run preview now reports match count plus the oldest and newest matching session's age span. • Adds pluggable `SecretSource` interface with a multi-source orchestrator, enabling secrets to be resolved from multiple backends in priority order. • Adds 1Password (`op://`) as a native secret source, letting Hermes resolve credentials directly from 1Password vaults. • Adds `--usage-file` flag to `hermes -z` (one-shot mode) to write a JSON usage report after each run. • Cuts first-turn time-to-first-token by ~80% across CLI, gateway, TUI, desktop, and cron by moving blocking Discord capability detection off the critical path and caching it to disk. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.7.1

Wed, 01 Jul 2026 20:08:06 GMT

Hermes v2026.7.1 adds MoA as a first-class model, /learn, /journey, /prompt, background subagent fan-out, Vertex AI, and scale-to-zero gateway. • Adds Mixture-of-Agents (MoA) presets as selectable virtual models under a `moa` provider, available in every model picker across CLI, TUI, desktop, and gateway. • New `/moa` command runs a single prompt through the default MoA preset as a one-shot, then restores the previous model. • Streams each reference model's full reasoning as labelled blocks before the aggregator's live-streamed synthesis, making ensemble deliberation visible. • New `/learn ` command distills a reusable skill from a directory, URL, or recent workflow and writes it to the project's CONTRIBUTING.md automatically. • New `/journey` command in CLI and TUI displays a browsable, editable timeline of all memories and skills Hermes has accumulated, with delete support. • Adds a memory graph in the desktop app — a playable radial timeline of memories and skills that can be inspected and pruned. • New `/goal` completion contracts let users define evidence-based "done" criteria; the standing-goal loop judges completion by running actual project checks via a `pre_verify` hook. • Enables `delegate_task` to fan out multiple subagents in the background, consolidating all results into a single turn without blocking the chat. • New `/prompt` command opens `$EDITOR` for composing multi-line prompts in markdown, queuing the result as the next message. • Adds Google Vertex AI as a first-class provider, with automatic OAuth2 token minting and refresh from a service-account JSON or Application Default Credentials — no static key required. • Gateway supports scale-to-zero: goes dormant when idle, wakes on demand, and performs drain coordination before restarts or migrations to avoid dropping in-flight conversations. • Routes post-turn self-improvement (memory/skill save decisions) to a cheaper auxiliary model with digested context, reducing cost of the background learning loop. • Adds first-class coding Projects to the desktop app — a sidebar, coding rail, review pane, git worktree management, and a `project → repo → lane` model. • Security hardening: blocks cron `base_url` overrides that could exfiltrate provider credentials, locks down MCP-config persistence attack surface, adds Slack `xapp-` token redaction, enforces cloud-metadata floor on every browser backend, and strips dynamic Hermes secrets from subprocess spawn environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes

Hermes v2026.6.19

Fri, 19 Jun 2026 19:39:06 GMT

Hermes v0.17.0 adds iMessage/Raft/WhatsApp channels, background subagents, image editing, Automation Blueprints, and a major memory tool upgrade. • Adds iMessage support via Photon Spectrum — no Mac relay or BlueBubbles bridge required; authenticate with `hermes photon login` and a device code. • Adds Raft agent network integration as a new gateway channel, letting external Raft agents wake Hermes via a wake-channel bridge with metadata-only payloads. • Adds official WhatsApp Business Cloud API adapter — Meta's first-party hosted path with no QR-scanning bridge process. • Enables background/async subagents via delegate_task(background=true), returning a handle immediately so work continues in parallel. • Extends `image_generate` with image-to-image editing — pass a source image and prompt to edit, transform, or recompose it across all supported image providers. • Introduces Automation Blueprints — schedule automations by name through a guided form, slash command, or conversation instead of writing cron syntax. • Adds `grok-composer-2.5-fast` to the xAI OAuth model picker with full 200k context, accessible via an existing xAI Grok subscription. • Upgrades the `memory` tool with an `operations` array for atomic batch add/replace/remove edits evaluated against the final character budget in a single call. • Adds a full profile builder to the dashboard — configure model, skills, and MCP servers from the browser without editing `config.yaml`. • Adds a security scan on each skill in the overhauled Skills Hub browser, alongside connected hubs, a Featured section, and full skill previews before install. • Introduces Curator cost optimization: LLM consolidation now requires explicit opt-in (`curator.consolidate: true` or `hermes curator run --consolidate`); routine pruning runs token-free by default. • Adds live subagent watch-windows in the desktop app, streaming a delegated agent's activity into its own pane. • Supports installing any VS Code Marketplace theme directly into the desktop app, with per-profile theme assignment. • Adds Telegram Bot API 10.1 rich message rendering — better formatting and native markup on by default, with opt-out. • Adds a pluggable `CronScheduler` provider system (`cron.provider` config key) with an `InProcessCronScheduler` and a Chronos NAS-mediated managed-cron provider for scale-to-zero scheduling. • Adds a signed-HTTP inbound relay receiver with connector-to-gateway channel auth and an enroll CLI. • Adds an official Unreal Engine 5.8 MCP server to the MCP catalog. • Enables finding and diffing user-modified bundled skills to surface local customizations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/hermes