Hermes merged 122 PRs on October 23

The ones worth knowing:

• Browser automation now runs only on browser_exec. agent-browser and the built-in browser tools are gone, and Camofox moves to a plugin
• MCP trust prompts finally stick: Allow for this session and Always are remembered per tool, and YOLO mode stops asking about untrusted MCP writes (spend limits still ask)
• Every Nous sign-in is now the plain device login, and your free-tier guest session hands over to your account after you sign in
• Desktop plugins get a lot more room: their own folder plus folders you grant, right-click rows in the composer, Kanban card badges, and posting into their own chat
• Desktop plugins can only script the preview Browser with a declared capability and your per-site consent
• The plugin catalog now enforces requires_hermes at install and update, so incompatible plugins stop sneaking in
• /delegation settings now save for your next session, and --now rebuilds the current session's tools
• Named custom providers keep their identity through persistence, session info and resume
• browser_vault can ask you for codes and logins right inside Desktop chats
• Windows: hermes update keeps a real hermes.exe after a Python repin, and cold-cache desktop builds compile again
• Quick Setup offers to keep a model you imported from another agent
• Dozens of new catalog plugins and bumps, including Windows port and event-log tools, a Hebrew language pack, a Reka provider and a Godot game studio

Here is the full list:

DESKTOP IMPROVEMENTS (10 PRs)

• Desktop plugin cards can post into their own chat, not the active one
• feat(desktop): plugins can use their own folder and user-granted folders (ctx.files)
• fix(desktop): the sign-in result shows where you signed in and refreshes connectors
• Desktop plugins can add rows to the composer's right-click menu and teach the spell checker a word (app-owned slot)
• feat(desktop): app-owned Kanban card badge slot in the plugin SDK
• feat(desktop): sign-in result shows who signed in and what moved
• Desktop: allow opening canonical Bot Chats in new tabs
• fix(desktop): keep native audio/video overflow menus open
• Windows x64 MSIX smoke launches the app again, and says why when a launch dies
• Windows desktop builds compile cold-cache sdists again (short uv path, no MAX_PATH LNK1104)

VOICE & REAL-TIME (3 PRs)

• plugin-catalog: bump speechify to 0.1.2
• feat(plugin-catalog): add hermes-soniox
• plugin-catalog: add walkie-talkie

DEVELOPER TOOLS & PLUGINS (67 PRs)

• docs(tools): every tool's catalog line says what it does: image_generate no longer hides edit + reference images
• feat(tools): terminal backends can declare that file tools go through the sandbox
• chore(plugin-catalog): re-pin bubblewrap to da8d324 (1.2.1)
• chore(plugin-catalog): re-pin bubblewrap to 35d24e4 (1.2.0)
• plugin-catalog: re-pin langfuse to e1f1614 (reasoning tokens, served model, opt-in user attribution)
• chore(plugin-catalog): re-pin bubblewrap to 24d49a4 (1.1.0)
• catalog: land five reviewed entries from push-refused forks (sweep 1023)
• chore(plugin-catalog): update hermes-lang-ko to 0.2.4
• chore(catalog): bump git-tasks to 5b427c3
• catalog: pin hermes-subscription-meter to 0.7.0
• feat(plugins): enforce the catalog's requires_hermes at install and update
• catalog: re-pin advanced-delegation to e404b68 (manifest requires_hermes >=0.22.5)
• catalog: re-pin advanced-delegation to f78b39e (official)
• Add ChorePilot to the plugin catalog
• plugin-catalog: bump hermes-cron to 1.5.2 (Hermes 0.22.4/0.22.5: self-set pauses, headless tick skips, settled deliveries)
• feat(delegation): /delegation saves for the next session; --now rebuilds this session's tools
• plugin-catalog: bump hermes-lcm-x to 0.28.1
• feat(plugin-catalog): add adkit plugin
• fix(plugin-catalog): show Magi cover banner
• catalog: pin storm-fusion-research 0.5.0
• feat(plugin-catalog): add nord-theme plugin
• plugin-catalog: bump nachos to 0.5.4
• plugin-catalog: update hermes-seo to 0.1.2
• plugin-catalog: add profile-switcher
• feat(plugin-catalog): add traceverse-hermes-otel
• feat(catalog): add pinned Remesher image-to-GLB plugin
• catalog: pin git-review to 0.1.24 (81269b9)
• chore(catalog): bump hermes-context-overview to 1.2.5
• plugin-catalog: bump hermetic to 1.2.0
• plugin-catalog: add athletedata
• catalog: update Kinprove genealogy research recipes to 1.6.1
• feat(plugin-catalog): pin hermes-tripo to 0.4.0
• feat(plugin-catalog): add preview-text-size
• Add office-3d to the plugin catalog
• chore(catalog): re-pin hermes-guide to v0.8.9
• feat(plugin-catalog): add stacktree
• feat(plugin-catalog): add ld-workbench (Debate Workbench) plugin
• plugin-catalog: bump hermes-lang-it-full to 21f3c05
• plugin-catalog: update operations to 0.3.3
• feat(plugin-catalog): add HYPD AI (hypd-ai-ads)
• plugin-catalog: repoint wicked-memory to WickedAPI org
• plugin-catalog: bump Stack memory provider to 0.2.0
• plugin-catalog: add hermes-lang-he (Hebrew language pack)
• chore(plugin-catalog): bump Promoat to 1.1.3 and rename to promoat-ai-video-clone
• plugin-catalog: add surp-hermes-x402-llm v0.5.0 (approval-gated spend, operator + terms pages)
• feat(plugin-catalog): add jwt-ref
• chore(plugin-catalog): bump OrcaSlicer to 0.5.1
• plugin-catalog: add Hardlight UI 0.1.0
• chore(plugin-catalog): update letsfg to 1.1.2
• feat(catalog): add YouTube Dock desktop plugin
• feat(plugin-catalog): add lightkeeper
• plugin-catalog: bump hermes-dreaming to 3.3.2 (broken state set aside, http://dream.py split, negations in RU/EN/ZH, corroboration a person actually gave, an optional cloud judge, unreadable data no longer read as empty)
• plugin-catalog: bump holographic to 0.17.9 (wrong settings turn memory off, chit-chat recalls nothing, "your instructions" in 18 languages)
• plugin-catalog: repin hermes-pets-all to v0.1.1 (pagination fix)
• catalog: limbic 0.7.1, supersession, calibration, Windows support
• feat(plugin-catalog): add hermes-windows-ports (who holds this port on Windows, with PID and image name)
• feat(plugin-catalog): add hermes-windows-eventlog (Windows crash forensics: crash causes, bugchecks, event-log queries)
• fix(plugin-catalog): update jp-edinet to 06171c8
• fix(plugin-catalog): update jp-reinfolib to cfb1776
• fix(plugin-catalog): update author-feed to cf5321d
• catalog: tabella 2.0.2, Windows support
• feat(plugin-catalog): add timestamp-ref
• plugin-catalog: huddo 0.9.11
• plugin-catalog: bump memtomem to v0.6.9
• chore(plugin-catalog): crew 0.10.0, re-pin to 9205333
• feat(plugin-catalog): add viajante
• feat(catalog): add godot-studio: headless Godot 4 workflows for the agent game studio

SECURITY & SECRETS (11 PRs)

• YOLO and approvals.mode off no longer prompt for untrusted MCP write calls; spend limits still ask
• MCP trust prompts: Allow for this session / Always now stick per tool; one-shot prompts offer only Once / Deny
• Desktop plugins can script the preview Browser only with a declared capability and per-origin consent
• fix(auth): a token refresh no longer replaces a guest in the shared Nous store
• One profile's website blocklist is no longer skipped after another profile's disabled policy
• catalog: add Agent Vault retrieval plugin
• chore(catalog): pin scamgate to v0.3.1
• fix(gateway): let browser_vault ask for codes and logins in Desktop chats
• fix(catalog): bump greyridge-token-safety to the workers.dev-fixed revision
• catalog: add telesec
• Add hermes-vpn to the plugin catalog (community)

INTEGRATIONS & CHAT (19 PRs)

• Catalog: Claude subscription provider shows reasoning again and streams; Memory Wiki gets its Desktop page (re-pin to official 54afaf5)
• fix(gateway): keep a named custom provider's identity through persistence, session info and resume
• chore(catalog): re-pin claude-subscription-directsdk to the stall fix
• refactor(auth): trim the guest handoff to the paths sign-in uses
• catalog: bump antigravity-subscription-directsdk pin to v1.0.21
• Camofox browser backend listed in the plugin catalog (official plugin)
• feat(plugin-catalog): add reka-provider
• chore(catalog): update Model Router to v0.4.6
• catalog: update MrScraper to three direct API tools
• feat(connectors): no guest on page open, connector sign-in offer
• feat(auth): every Nous sign-in is the plain device login
• feat(auth): hand the free-tier guest to the account after sign-in
• Browser automation runs on browser_exec only; agent-browser and the built-in browser tools are gone (Camofox moves to a plugin)
• chore(plugin-catalog): bump cursor-provider to v0.4.1
• plugin-catalog: add chat-length (long-chat notice with session_search opener)
• plugin-catalog: update provider-usage to v0.3.1
• feat(plugin-catalog): bump provider-status to 1.6.4
• Add hermes-model-switcher (community, v0.3.0): cross-profile model switcher Dashboard tab
• feat(plugin-catalog): add ai-subscriptions plugin

STABILITY & FIXES (12 PRs)

• fix(image_gen): local source paths work for FAL edits on the local backend
• fix(plugins): a refused install names the missing app instead of printing missing_app
• Unmapped-gateway readiness tests no longer flake on a just-spawned child's empty argv
• fix(tui): inputs queued in the same millisecond on two sessions keep their order after a resume
• chore(deps): bump Python dependencies to latest minor/patch releases
• fix(plugins): say restart for plugin deps a running gateway can't import; keep the tool store out of PM generations
• Windows: hermes update keeps a real hermes.exe after a Python repin
• fix(nix): self-contained dev-shell python, one pm-pinned tool list, darwin shell builds
• PM survival test stops failing on a rebuilt fixture wheel's hash
• nix flake check evaluates again after the uv revision-5 relock
• fix(setup): Quick Setup offers to keep a model imported from another agent
• Desktop reconnect E2E: the intermittent Stop-flash red now records its own timeline

122 new features and fixes

https://x.com/iamlukethedev/status/2113578058162803014?s=46