Hermes Agent v0.23.0

Release Date: November 5, 2026
Since v0.22.0: ~10,080 commits · ~1,950 merged PRs · ~8,720 files changed · ~725,200 insertions · ~201,400 deletions · ~850 issues closed · 666 contributors

The Hearth Release. In the old hymns Hermes kept the threshold and Hestia kept the hearth, and the two were honored side by side. v0.22.0 got newcomers through the door; v0.23.0 builds the fire they gather around. The headline: your whole Desktop workspace now opens in a browser tab, served by your own gateway. Underneath it, every conversation lives in one place: a single gateway owns each session, and the CLI, TUI, Desktop, editors, bots and cron all sit down at the same table instead of each running its own agent. From that one hearth, Desktop keeps every machine you run Hermes on connected at once, Group Chats route their own conversations, and the terminal finally draws your images inline and lets you rewind a conversation. Around it: plugins that keep themselves updated, price tags and spend limits on paid MCP tools, pluggable delegation, a plugin catalog that grew from about 600 to over 1,050 entries, a leaner built-in skill set, and a long run of memory and latency work for long-lived gateways. This release rolls up and fully documents the v0.22.1–v0.22.7 patch releases.

✨ Highlights

• Your Desktop workspace in a browser tab — The new Webapp serves the full Desktop workspace from your own gateway: the same chats, Group Chats, plugins and settings, in any browser on your network or behind a public URL with sign-in. The Docker image and Nix package ship it. It is off by default; turn it on with webapp.enabled or Web Access in Settings. (#141864, #145598, #145536, #145072, #145153 — @jquesnelle, @BearHuddleston, @IAvecilla, @Adolanium)

• One gateway owns every conversation — Before, the CLI, TUI, Desktop, editors (ACP), messaging bots and cron could each run their own copy of the agent against the same chat, which is how messages got written twice or went missing between surfaces. Now each machine runs one gateway that owns every session, and every surface attaches to it as a client: a chat you open anywhere is the same chat, with one queue and one history. You can even steer or edit a queued prompt from Desktop without it running twice. (#106742, #140334 — @unsupportedpastels, @kshitijk4poor)

• Pictures in the terminal — When you paste an image, or a tool takes a screenshot, the CLI and TUI now draw it right in the chat instead of printing a file path: real pixels in kitty and Ghostty (CLI and TUI) and in iTerm2, WezTerm and Konsole (CLI), coloured blocks everywhere else, and full resolution in VS Code's terminal when its image support is on. (#147293, #148874 — @Adolanium)

• Rewind a conversation — Press Esc twice or type /rewind in the TUI or classic CLI, pick an earlier message, then edit and resend it or fork a new session from that point. The original session stays exactly as it was. The TUI can also start /new while a turn is still running; the old one keeps working in the background. (#144937, #148880 — @SaguaroDev)

• Every machine in one Desktop window — Desktop now keeps all your gateways connected at once, so switching between this computer and an SSH or remote gateway is instant. Terminal tabs run on the host they were opened on, and a Group Chat can mix bots from different machines. (#147681, #147708, #148418 — @dskwe, @janviernine)

• Group Chats that run themselves — Bot Mode rooms can let a lead bot, or an automatic router, pick who answers a message that names nobody. Scheduled jobs can post into a room, rooms keep a purpose and shared notes, and bots no longer ping each other in endless loops. Rooms also look like a normal Hermes chat now, and each bot shows what it is doing live ("scout · terminal · 7s"). (#144833, #148417, #148888, #148903, #148422 — @KoNit-K)

• Plugins that keep themselves current — hermes plugins update updates everything at once, and an opt-in Auto-update switch (CLI, chat, Desktop and dashboard) keeps catalog and git plugins up to date. Updates that would break your setup are held back instead of applied. The catalog itself grew from about 600 to over 1,050 entries, and a new Verified tier marks plugins built by the vendor itself. (#141513, #85794, #143468, #144257 — @charan-rathore, @YS-OH-CORE)

• Price tags and spend limits for paid tools — Paid MCP tools, such as 3D or media generation, can declare what a call costs. The approval prompt shows each call's price and the chat's running total, and Hermes asks before a chat goes over its limit, even in YOLO mode. (#142470, #143780, #143795, #143787 — @liuhao1024, @fangliquanflq)

• New official plugins, and a smaller core — Meshy (text and image to 3D), ElevenLabs Music and Sound Effects, X Chat, REA (reverse engineering) and a bubblewrap sandbox are now one-command installs. Camofox, mcp-serve, the agent importers and Singularity moved out of core into plugins that install themselves for anyone who used them. (#142619, #146294, #139725, #143484, #139983)

• Choose how subagents are run — Delegation is now pluggable: keep the default, or install the official advanced-delegation plugin to send each subagent task to a named model or into a separate profile. Switch with /delegation. (#142563, #142564, #143423)

• Lighter and faster, especially when Hermes runs all day — Recurring cron jobs share a prompt cache, one-shot runs send about 1,570 fewer prompt tokens per call, and patch/write_file return in milliseconds with LSP on. Long-lived gateways now let go of closed sessions' memory, and the Desktop sidebar no longer slows down as sessions pile up (one store with ~35k cron runs went from a 121 s refresh to instant). (#139876, #144177, #140387, #147863, #137087, #147819, #144940 — @kshitijk4poor)

• A leaner skill set you can lock — The built-in skills went from 58 to 44, with Word, PowerPoint and Excel merged into one microsoft-office skill. hermes curator lock stops the agent from rewriting a skill you curated by hand, through any tool, even in YOLO mode. (#147557 — @daviseford)

• Password managers and a keychain vault key — Verified password-manager plugins can hand the browser your logins without seeing anyone else's, and the browser vault's key can now live in your OS keychain. (#143964, #144246 — @Jesssullivan)

• Stop a running cron job — Cancel a running job from the CLI, Desktop, the API or the agent itself, and set per job what happens to runs missed while Hermes was off. (#144801 — @kokhlo, @fangliquanflq, @LeonSGP43)

⚠️ Upgrade notes

• The old built-in browser tools are gone. Browser automation runs on browser_exec only; agent-browser and the ten browser_* tools (browser_navigate, browser_click, ...) were removed. Homes that used Camofox get the camofox plugin installed automatically. If your own prompts, skills or toolset lists name the old tools, switch them to browser_exec. (#143146)
• Desktop needs macOS 13+ and 64-bit Windows. The app moved to Electron 44, which...

Hermes Agent v0.22.7

Release Date: November 3, 2026

Patch release. This tag rolls up the ~174 PRs merged since v0.22.6 into a stable release for the GitHub release (CLI and installers), the Microsoft Store app, Docker and Hermes Cloud. Full curated notes for this window ship with v0.23.0.

About this release

Measured at commit b200f5bc60e, the window since v0.22.6 contains 581 non-merge commits across 554 changed files (+24,012 / −3,144), 174 merged PRs and 29 closed issues.

Also in the window, undocumented here on purpose: opt-in lead routing for Desktop Group Chats (with a Lead badge on the room header), cron jobs that post into Group Chats, room purpose and shared notes, group rooms laid out in one chat column with each member's live state, pinned Kanban boards as quick-switch tabs, $$TeX$$ diagram labels and mermaid diagrams rendered through Pele, a Desktop update error box that shows the failed update's output with a report link, Web Access naming the step Start is on with a running clock, Telegram on Team Gateway set up by linking an account to the shared bot, an opt-in Slack thread_followup_silence for unaddressed thread replies, a Daybreak switch for catalog-listed ChatGPT subscription models, and a batch of new plugin-catalog entries.

Full curated release notes for this window ship with v0.23.0, which will document everything from v0.22.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Microsoft Store app: updates through the Store.
• Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.6...v0.22.7

Hermes Agent v0.22.6

Release Date: November 2, 2026

Patch release. This tag rolls up the ~776 PRs merged since v0.22.5 into a stable release for the GitHub release (CLI and installers), the Microsoft Store app, Docker and Hermes Cloud. Full curated notes for this window ship with v0.23.0.

About this release

Measured at commit f0d94882e89, the window since v0.22.5 contains 3,448 non-merge commits across 4,316 changed files (+248,579 / −94,077), 776 merged PRs and 385 closed issues.

Also in the window, undocumented here on purpose: the Webapp served from the gateway's own listener (hermes webapp, a Desktop Web Access pane to open it on your network or your own URL behind Nous sign-in, and Desktop plugins loading in a browser tab), /model reset to clear a session's model pin without losing history, per-skill locks against autonomous writes (lockable from the Desktop Capabilities pane), opt-in prepared compaction (compression.prepare_ahead), hermes cron cancel plus a per-job missed-run policy and a Stop button in the Desktop cron editor, /delegation choices saved for the next session, hermes migrate and setup moving Grok Bot and OpenBot users over, opt-in OS-keychain storage for the vault key, the catalog's requires_hermes enforced at plugin install and update, agent-picked ElevenLabs voices in text_to_speech, a pre_llm_call hook that can block a turn before inference, Desktop group chat rename, disband, mentions and attachment paste, every profile shown as a Desktop sidebar section, Telegram video notes, Slack emoji reactions in thread context, and resumable downloads in the package manager.

Full curated release notes for this window ship with v0.23.0, which will document everything from v0.22.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Microsoft Store app: updates through the Store.
• Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.5...v0.22.6

Hermes Agent v0.22.5

Release Date: October 22, 2026

Patch release. This tag rolls up the ~81 PRs merged since v0.22.4 into a stable release for the GitHub release (CLI and installers), the Microsoft Store app, Docker and Hermes Cloud. Full curated notes for this window ship with v0.23.0.

About this release

Measured at commit bf0203a794a, the window since v0.22.4 contains 231 non-merge commits across 804 changed files (+35,212 / −17,885), 81 merged PRs and 30 closed issues.

Also in the window, undocumented here on purpose: Nous sign-in reworked (every sign-in is the plain device login, the free-tier guest hands over to your account, the result shows who signed in, connectors offer sign-in instead of opening a guest), hermes update holding back a stable release it refuses instead of offering it, Windows hermes update no longer stuck on the old launcher after a Python repin, usage-window plan support (plan gauges, limit cards and model-switch recovery for window-based plans), pluggable delegation backends (route subagents by model map or profile, switchable per session), plugin slash commands that can ask you to pick an option, hermes import-agent, OpenClaw migration, hermes mcp serve and the Singularity backend moving out of core into plugins (setup offers the importer when it finds another agent), Desktop drag-to-pin in the sidebar and one-click plugin installs with tier badges, the Electron 44 upgrade, Pillow 13 and a batch of dependency security bumps, a clear message when a chat's working folder is gone, hermes update recovering paused gateways after a damaged .git, long Claude DirectSDK answers no longer cut off by the stall timer, Desktop group chats showing which bot is working again, and the experimental webhook-mode MCP events client.

Full curated release notes for this window ship with v0.23.0, which will document everything from v0.22.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Microsoft Store app: updates through the Store.
• Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.4...v0.22.5

Hermes Agent v0.22.4

Release Date: October 21, 2026

Patch release. Desktop stops showing suggestion pills above the composer, plus small plugin and dashboard fixes, for the CLI and installer, the Microsoft Store app, Docker and Hermes Cloud.

Fixes

• Desktop no longer shows suggestion pills above the composer. The pills appeared for no clear reason, mostly nudging you to set up MCP servers. They and the helpers that only they used are gone. (#142559)
• Plugins that install nothing skip the dependency consent step. A plugin that declares no dependencies, or whose pyproject.toml installs nothing, now enables without an empty consent prompt. (#142569)
• Dashboard: WhatsApp can be safely re-paired after logging out. (#142439)
• Desktop plugin review: the surface lint no longer flags prototype writes; reviewers check them by hand. (#142586)
• Desktop: the approval-mode chip follows the active profile's mode. (#142565)
• Release builds: the desktop bundle's pre-build check gets enough time to verify archived build inputs when storage is slow. (#142623)

Also new in the plugin catalog: bubblewrap (bwrap terminal backend on Linux), Singularity/Apptainer, mcp-serve (Hermes as an MCP server), agent-importers (hermes import-agent, now with Cursor), inbox and workflow-record from Hermes Labs. Telegram Business moves to the Hermes Labs community tier.

About this release

Measured at commit 4d04303818b, the window since v0.22.3 contains 14 non-merge commits across 82 changed files (+1,475 / −3,022) and 13 merged PRs.

Updating

• Microsoft Store app: updates through the Store.
• Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.3...v0.22.4

Hermes Agent v0.22.3

Release Date: October 21, 2026

Patch release. This tag rolls up the ~620 PRs merged since v0.22.2 into a stable release for the CLI and installer, the Microsoft Store app, Docker and Hermes Cloud. Full curated notes for this window ship with v0.23.0.

About this release

Measured at commit 5b147ab036d, the window since v0.22.2 contains 2,911 non-merge commits across 4,206 changed files (+360,278 / −64,308), about 620 merged PRs and 326 closed issues.

Also in the window, undocumented here on purpose: MCP progress notifications streamed as live tool progress, a refreshed classic CLI layout (glyph transcript, status line under the composer, two-line header), OAuth clients that plugins declare and Hermes signs in and refreshes, hermes plugins update offering every available plugin update plus an Update button for git-installed plugins in Desktop, steering and editing a queued prompt from Desktop, a guided subagent model and provider picker in Desktop, a live /loop countdown row in the CLI and TUI, opt-in Telegram DM topic transfer, a post_compaction plugin hook, a capabilities catalog, the Microsoft Store build going live automatically when a release publishes, session auto-prune back to opt-in with a one-time prompt when disk runs low, Nemotron 3.5 Bolt and one-slot DFlash drafts in the local runtime, and dozens of new plugin catalog entries.

Full curated release notes for this window ship with v0.23.0, which will document everything from v0.22.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Microsoft Store app: updates through the Store.
• Desktop app installed from the installer (.exe / .dmg): no change in this release; it updates with the next bundled release.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.22.2...v0.22.3

Hermes Agent v0.22.2

Release Date: October 15, 2026

v0.22.1 was built from the wrong commit. It shipped unreleased gateway work, and the Microsoft Store app could stick on "Connecting." 0.22.2 is the release 0.22.1 was meant to be.

Known issue: Sessions that ran under the 0.22.1 gateway can't be deleted in 0.22.2.

Highlights

• The gateway starts after a reboot again. After a restart, Linux can hand an early PID to an unrelated process, and the gateway could mistake it for a running gateway, so a supervised gateway (systemd, launchd, Docker) refused to start. Hermes now records the boot it started in, and when it can't tell, it asks the host lock, which only a live gateway holds. (#138594, fixes #133744)
• Long local-model turns survive on laptops. Local requests always stream with prompt-reading progress (shown in the status line), stall timers skip time the machine was asleep, a recovered local server gets another try instead of a breaker that failed every later message, and compression no longer times out while the server is still reading a long conversation. On Windows unified-memory machines, model launch and the prompt cache are sized to free memory. (#138560)

Below is everything in the 0.22 release line since v0.22.0: the fixes 0.22.1 was meant to ship, plus the two above. Work that is only on main ships with v0.23.0.

✨ Features

• Release: split the Microsoft Store bundle into its own windows-store lane (f9d8a740) — @ethernet8023
• Agent: add nemotron super 3.5 default parameters (c59d2994) — @elisam0
• Cli: add nemotron to NVIDIA NIM default model list (cc55270e) — @elisam0
• Cli: add curated model list at the top in the model picker list (e6835fd3) — @elisam0
• Release: choose what a stable release builds and tests with lanes (36a8ee18) — @ethernet8023
• Plugin-catalog: add hermes-lang-ko — Korean Desktop language pack (e5f49b6a) — @dandacompany
• Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) — @StudioCodeAI
• Contributors: add 2867297362mjb-sketch email mapping (9ab40641) — @2867297362mjb-sketch
• Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) — @2867297362mjb-sketch
• Plugin-catalog: add author-feed (5f6d6836) — @TakeshiTGAL
• Plugin-catalog: bump aux-ledger to 1.4.0 (6048066e) — @olric3015
• Plugin-catalog: add the wait-ledger catalog card (77cb58e5) — @olric3015
• Plugin-catalog: add wait-ledger (97e65322) — @olric3015
• Community plugin: lightningai + lightningai-rate-limit (07515466) — @dinosauria123
• Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) — @TREE-Ind
• Plugin-catalog: add openinvest (b6e86101) — @longsizhuo
• Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) — @Sahil-SS9
• Plugins: move Kumiho Memory to memory catalog shelf (46f95e08) — @kaveone
• Release: dispatch Stable Release from the default branch (667e6639) — @ethernet8023

🔧 Improvements

• Agent: keep the Mistral tool-id rule beside its only consumer (c5fc0958) — @kshitijk4poor
• Profiles: build the seed routing view once; expand enabled too (311155fa) — @kshitijk4poor
• Profiles: simplify the model seed and trim its tests (d9dfb124) — @kshitijk4poor
• Update nemotron super 3.5 name (3224993a) — @elisam0
• Hermes_cli: update nemotron 3.5 name (108ae4e7) — @elisam0
• Catalog: re-pin showly to the build without the upstream self-update check (6462f64a) — @slchris
• Catalog: update Model Router to v0.4.3 native preferences (6a097ee9) — @metamindedu

🐛 Bug Fixes

• Gateway: a recorded boot epoch that cannot be compared is unprovable (79b3b724) — @ethernet8023
• Local: keep long local-model turns alive on laptops (518ce272) — @emozilla
• Gateway: a read-only host-record check never creates the lock file (91e63f84) — @kshitijk4poor
• Gateway: let the host lock decide a legacy record that looks older than this boot (4d984677) — @ethernet8023
• Gateway: anchor the legacy host-record check on boot time, not a live create_time (5b416e42) — @ethernet8023
• Gateway: drop argv identity from host rendezvous liveness (c7fa3cbf) — @sin5ddd
• Gateway: reject a recycled PID that only matches start ticks (7934442e) — @sin5ddd
• Tui: keep a ${VAR} bare-custom endpoint as a ref in the new profile (dd2db134) — @kshitijk4poor
• Tui: a new profile inherits a bare custom launch model with its endpoint (463d4019) — @kshitijk4poor
• Release: a Store-only Windows build gets no signing vars; Store-plus-macOS smokes record only macOS (a8cc19eb) — @ethernet8023
• Agent: keep composite tool ids paired on Mistral routes (0c1bfb7d) — @kshitijk4poor
• Agent: rewrite split tool ids before Mistral sees them (b33ed359) — @xxxigm
• Release: macOS smoke runs when no receipt was staged (f546ea2f) — @ethernet8023
• Install-e2e: preserve bundled Windows process arrays (6db1934d) — @Oceanswave
• Profiles: match env-referenced endpoint names when seeding a profile (7b755ed5) — @kshitijk4poor
• Profiles: drop every same-identity destination entry when merging (9a9a6e43) — @kshitijk4poor
• Profiles: match endpoint identity the way runtime does when merging (ef57cbd9) — @kshitijk4poor
• Profiles: keep URL-less destination entries when merging the endpoint seed (2aa469f7) — @kshitijk4poor
• Profiles: inherited endpoint is not shadowed by the profile's...

Hermes Agent v0.22.1 (rc.5-v0.22.1)

Release Date: October 14, 2026

This is a patch release, with a handful of fixes for the Windows Store, plugin updates, and more.

✨ Features

• Agent): add nemotron super 3.5 default parameters (c59d2994) — @elisam0
• Cli): add curated model list at the top in the model picker list (e6835fd3) — @elisam0
• Plugin-catalog): add hermes-lang-ko — Korean Desktop language pack (e5f49b6a) — @dandacompany
• Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) — @StudioCodeAI
• Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) — @2867297362mjb-sketch
• Plugin-catalog): add author-feed (5f6d6836) — @TakeshiTGAL
• Plugin-catalog): bump aux-ledger to 1.4.0 (6048066e) — @olric3015
• Plugin-catalog): add the wait-ledger catalog card (77cb58e5) — @olric3015
• Plugin-catalog): add wait-ledger (97e65322) — @olric3015
• Community plugin: lightningai + lightningai-rate-limit (07515466) — @dinosauria123
• Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) — @TREE-Ind
• Plugin-catalog): add openinvest (b6e86101) — @longsizhuo
• Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) — @Sahil-SS9
• Plugins): move Kumiho Memory to memory catalog shelf (46f95e08) — @kaveone
• Add canonical group attachment controls (4673f17c)
• Consume event-bound hosted files through canonical admissions (e87bd098)
• Connect Desktop groups to canonical driver controls (3c2c9d47)
• Transport hosted producers through authenticated owner sockets (51189b05)
• Retain hosted room work evidence across authority changes (0af2c714)
• Route hosted room workers through session authority (bd22e0f9)
• Wire canonical hosted group controls (fa2179bb)
• Gateway): resolve --resume <title> and -c <title> [--create-if-missing] in the authority (11a83ad4)
• Retain terminal identity tombstones during history retirement (ba435291)
• Route native CLI and ACP actions through prepared controls (27b0f7f2)
• Publish real prepared compression in the mutation receipt transaction (b6540276)
• Prepare and atomically publish local model changes (7e7fa7c6)
• Commit independent local branch policy and route atomically (f98eaec1)
• Project managed tool progress without private arguments or results (61ccd894)
• Bridge managed worker approvals clarification and stop (a0b5118f)
• Launch admission-owned tool workers from the ordinary daemon (510e32be)
• Enforce safe defaults at bare agent construction (1eeac867)
• Suppress rules skills and memory readers in private safe workers (25cda66a)
• Bypass plugin providers and hook execution in safe workers (33921e6f)
• Bind immutable private worker config before runtime imports (4cc3f420)
• Expose verified canonical ACP editor MCP attachment (1bda56a1)
• Rebind exact editor MCP credentials on canonical ACP resume (5bfa2f2c)
• Borrow editor MCP configurations with frozen session manifests (394f00f6)
• Isolate execution-owned MCP registry overlays (96e4d296)
• Commit local reset targets with runtime mutation receipts (821137c3)
• Expose profile-scoped Bot relay mailbox RPCs on the authority (792aa35a)
• Migrate queued Bot mailbox identities without replaying claims (af49e2fc)
• Send local Bot DMs to the discovered canonical authority (47ba694e)
• Admit identified Bot Chat relay deliveries through session authority (998df8cc)
• Reserve exact owner-started admission worker claims (fbdfd46d)
• Expose authenticated owner mutation snapshots (d6331c48)
• Freeze ACP tool policy and bind execution-owned edit consent (e2f5cfc6)
• Reserve hosted API identities through the authority (6b278ca4)
• Admit API runs before acknowledging execution (f2d9cea3)
• Run bound API turns on the shared cached agent (dea4f0c5)
• Restore server-bound API session identities (76532ae1)
• Retain claim-fenced structured admission results (262e0ebf)
• Compose worker compression lifecycle and delegation persistence (6c57ad37)
• Publish committed worker completions through authenticated owner bridge (d94ccc2d)
• Fence delegation receipts with shared worker sequence and epoch (be85ca24)
• Route registered worker delegation writes through durable outbox (1ee6545f)
• Add execution-bound delegation ledger operations (8128e88f)
• Persist worker titles activity and route sidecars with receipts (235e4f12)
• Add assignment-fenced worker constructor and finalization handlers ([`b7de5a8...

Hermes Agent v0.22.0

Release Date: October 13, 2026
Since v0.21.0: ~24,200 commits · ~6,080 merged PRs · ~15,600 files changed · ~2,045,000 insertions · ~1,140,000 deletions · ~7,180 issues closed · ~2,520 contributors

The Threshold Release. Hermes was the god of thresholds: the doorway, the crossing, the boundary stone. v0.21.0 assembled the pantheon; v0.22.0 is about getting through the door. A fresh desktop install now opens on a guided setup chat that runs on a free trial model, so a newcomer is talking to Hermes before they own an API key. Connectors carry the agent across into the apps you already use, with no account needed to start. Local models bring it home to your own hardware with a one-click llama.cpp runtime. And the threshold itself got sturdier: tested SemVer stable releases that installs follow by default, signed desktop packages (including the Microsoft Store), and one package manager underneath everything. Around that spine: a 600-plugin catalog, the Claude 5.5 / GPT-6 model wave, password-manager sign-in for the browser, a bot screen you can take over, one backend and one gateway for every profile, and a codebase a third smaller. This is the largest window Hermes has shipped, about 2.5x the v0.21.0 cycle, and it rolls up and fully documents the v0.21.1–v0.21.7 patch releases.

✨ Highlights

• A first launch that sets itself up — Open the desktop app on a computer where you have never used Hermes and it starts a short setup chat instead of a settings screen. One card at a time it asks your name, an accent color and a layout, which apps to connect, which plugins to install, then gives a quick tour and offers up to four first tasks picked for you. It runs on a free trial model (nous/welcome, once per OS user), so it needs no key; Skip setup ends it and Settings → Run onboarding again brings it back. The agent also gained set_theme, so "make it violet, dark mode" works in any desktop chat. (#137429, #137522, #137807, #134209, #105258 — @alt-glitch, @OutThisLife, @ethernet8023, @rewbs)

• Connectors: Hermes works inside your apps — The agent can now act in hosted apps such as Linear and Notion through the Nous tool gateway: ask for an app, sign in once in your browser, and the tools are usable in the same turn. You do not need a Nous account to start; the first time you use an app, Hermes creates a free connectors-only identity. The desktop has a new Connectors page that puts hosted apps and your MCP servers in one list (it replaces the MCP tab), the same setup card appears in the TUI and CLI, and you can connect several named accounts of one app (a work and a home account) and manage them with /connectors or hermes connectors. (#106842, #111008, #119074, #135143, #135072, #135097, #135151, #135173, #137426 — @alt-glitch, @rewbs)

• Local models in one click — Hermes can now run open models entirely on your machine with nothing leaving it: no account, no API key. It installs and maintains llama.cpp with the right engine for your hardware (CPU, CUDA, Metal, Vulkan or ROCm), rates every catalog model against your GPU and RAM, and picks the highest-quality build that fits. Downloads pause and resume, the server starts and stops with Hermes, and engine updates are one click. Start from Settings → Providers → Local Models on Windows, macOS and Linux, or hermes model → Local models in a terminal. The catalog includes Qwen3.8 27B, Qwen3.8 Flash Next (with its MTP speculative head), Qwen3.6 35B-A3B and DeepSeek V4 Flash, plus any GGUF from Hugging Face. (#100667, #101823, #128768, #111423, #133111, #134116 — @jquesnelle, @ethernet8023)

• Stable release channels — Hermes now ships tested SemVer releases. Every release passes source CI, Docker, Nix, signed desktop builds and install/upgrade runs on every OS before it is published, and source installs now move from release to release by default instead of tracking every commit on main. Prefer the bleeding edge? hermes update --set-channel main, or the new channel switch in Desktop Settings → About. Moving to an older release is labelled a rollback and never happens without asking, and installer reruns keep you on the channel you chose. (#102765, #135847, #135949, #136313, #137780 — @ethernet8023, @KoNit-K)

• Signed desktop packages, the Microsoft Store, and one package manager — The desktop app is now a sealed, signed package that carries its own Python and Node and updates itself, so first launch builds nothing. Windows gets a signed MSIX (x64 and ARM64) through App Installer or the Microsoft Store; macOS gets a signed, notarized build for Apple Silicon. Underneath, a new unified package manager (hermes pm) owns every pinned, hash-checked tool and Python environment: updates build a new environment and switch only once it passes its check, so a failed or killed update can no longer leave you half-applied. (#102765, #132361, #132386, #120339, #122221 — @ethernet8023)

• The Plugin Catalog: 600 reviewed plugins — The plugin catalog launched this cycle and grew to 600 entries, each pinned to a reviewed commit and installable from Hermes Desktop or the CLI. Browse by category and star ranking with a page per plugin and per author; catalog rules keep listed plugins from patching Hermes internals or shipping unscannable binaries. Memory providers now live with their makers (Honcho, Supermemory, Hindsight, Mem0, OpenViking, Holographic), as do Home Assistant, Spotify and Langfuse: existing users are migrated automatically, and the default install got leaner. (#69446, #111415, #117808, #113381, #114732, #131267, #132476, #136436 — @itpartypattaya, @happy5318, and 400+ plugin authors)

• The Claude 5.5 and GPT-6 model wave — Claude Fable 5.1, Opus 5.5, Sonnet 5.5 and Haiku 5.5, GPT-6 Astra, Sol and Luna plus GPT-6.1 Sol, and Gemini 4 Argon are pickable on Nous Portal, OpenRouter and native routes where offered. Prior reasoning is now replayed by default on every provider that can read it, across resume, branches and compaction, so long multi-step work keeps its train of thought. And when a provider has a bad hour, Hermes waits out transient 503/529/timeouts in visible, bounded cycles instead of ending your turn. (#100577, #119304, #126842, #134759, #128248, #137955, #136358, #116353 — @kshitijk4poor, @unsupportedpastels, @100yenadmin, @mssteuer, @xxxigm)

• Sign in to websites with your password manager — The browser agent can log into sites with logins from 1Password, Bitwarden or Hermes's own encrypted vault, and the model never sees the password. If nothing is saved, you get a masked prompt in the CLI, TUI or Desktop to save it, one-time codes are filled without entering the conversation, and card and address fills at checkout need your confirmation. (#106480, #107585, #137084)

• Bot Screen: watch your bot work, take over when it needs you — A bot running on a Linux gateway can have its own desktop that Hermes Desktop streams live. Wh...

Hermes Agent v0.21.7

Release Date: October 11, 2026

Patch release. This tag rolls up the ~204 PRs merged since v0.21.6 into a stable release for the desktop app (macOS Apple silicon, Windows), the Microsoft Store and MSIX, the installer, Docker and Hermes Cloud. Full curated notes for this window ship with v0.22.0.

What this patch ships for source installs (hermes update and the desktop app's updater on a git checkout):

• Updates now follow tagged releases. A source install of the official repository updates to the latest published vX.Y.Z release instead of every commit on main. An install already newer than the latest release stays where it is and waits for the next one; nothing is moved back. To keep following every commit: hermes update --set-channel main. Forks and mirrors keep following main. Store, MSIX and bundled desktop installs are unchanged.
• Choose the channel in the desktop app. Settings ▸ About ▸ Updates has an Update channel switch (Stable releases / Every commit) for source installs, and the update dialog now shows which channel you are on.
• Reasoning survives resume. Signed thinking replays after hermes chat --resume and on the next gateway turn, and Bedrock Converse reasoning models no longer get rejected on resumed sessions.
• Updates no longer fail behind some firewalls. Installs on main no longer fetch a release record that regional firewalls could answer with 403. The stable check uses your GitHub token when one is set (GITHUB_TOKEN or gh auth login) and reports a GitHub rate limit as a rate limit.

About this release

Measured at commit 1fd18277267152893a8a24792b79213e7ca3f899, the window since v0.21.6 contains 740 non-merge commits across 4,156 changed files (+86,775 / −26,980), 204 merged PRs and 69 closed issues.

Also in the window, undocumented here on purpose: plugins running built-in Desktop app actions (ctx.runAction) and a plugin SDK pet bubble (ctx.pet.say); core-made Codex requests so plugins never hold the token; skills installed mid-session reaching the model without a prompt rebuild; Krea 2 Medium Turbo as the default image lane for new paid subscribers, with a FAL fallback when managed Krea refuses a request; faster desktop updates (the React Compiler pass cached by content, the compiled renderer reused when only the install stamp changed, unchanged native inputs left in place); pinned installs that check out only the pin; compaction marks emitted to Relay; and new community plugins including memory-shield, command-ledger, Memoria, Model Router, wyoming-voice-bridge, codex-account-switch and redline.

Full curated release notes for this window ship with v0.22.0, which will document everything from v0.21.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped.

Updating

• Desktop app: updates itself. Microsoft Store installs update through the Store.
• CLI: hermes update, or re-run the installer one-liner.
• Docker / Hermes Cloud: nousresearch/hermes-agent:stable (or :latest).

Full Changelog: v0.21.6...v0.21.7