Hermes merged 160 PRs on October 20 The ones worth knowing: • Krea 3 now runs through the managed gateway and is the default image model for paid subscribers • MCP tools stream live progress: a Desktop row, a CLI spinner and a plugin event as they work • The Desktop Capabilities catalog is redesigned around Skills, Plugins, Connectors and Tools • Plugin updates can override a caution security scan on purpose, with --force in the CLI or a Desktop dialog • Gateway lifecycle commands never touch another home's service and refuse to stop while sessions are live • A big classic CLI sweep: /new, /resume, /branch, /save, /compress, /stop, /diff, /cron and /snapshot all behave correctly on a gateway-backed chat • Resuming a compressed conversation shows each message once, and /resume brings back your todo list • Kanban workers get session_search and delegate_task back, and timed-out runs are recorded as timed_out, not crashed • Telegram DM topics: a new topic's first message lands in that topic, not the previous one • Bedrock replays reasoning across Claude and GPT switches only where the target model can take it • hermes serve frees a closed session's memory, and YAML parsing uses ruamel's faster C parser on Python 3.14 • 80+ plugin catalog adds and bumps, including Requesty, cursor-acp, Yandex Calendar, Tidal and Windows Credential Manager secrets Here is the full list: DESKTOP IMPROVEMENTS (15 PRs) • feat(terminal): let plugin backends set their start dir and host Bot Desktop • Plugin disclosures sit at the bottom of plugin pages; cards show what the plugin does • fix(desktop): plugin directives whose attributes hold a URL now render as cards • fix(desktop): secondary profiles and Bots work on a multiplexed local gateway (completions, tickets, group picker, worker status) • feat(desktop): redesign Capabilities catalog (Skills, Plugins, Connectors, Tools) • perf(desktop): reuse Developer ID signatures for loose macOS payload binaries • fix(desktop): keep themed backing when clearing Windows glass • fix(desktop): Windows prepare reuses its restored wheel, vcpkg and npm caches • Microsoft Store installs now report their own install_method in shared metrics • feat(release): Store certifies before the gate; publication switches it live • perf(release): stage candidates from metadata; verify package bytes at publish • perf(release): blobless history for release checkouts • test(release): https_origin resets urllib's cached default opener • perf(release): give Windows bundle assembly caches that actually restore • perf(release): submit the Store package beside verify-published VOICE & REAL-TIME (4 PRs) • feat(mcp): live tool progress from MCP notifications/progress (Desktop row, CLI spinner, plugin event) • fix(tui_gateway): keep detached sessions alive while a background process will notify them • fix(gateway): keep @ file content in the stored row of a classic CLI voice or post-/model turn • plugin-catalog: fish-audio v1.8.0 DEVELOPER TOOLS & PLUGINS (87 PRs) • plugin-catalog: bump xmemo to 1.2.1 • catalog: rename codex-account-switch to account-switcher, 1.3.2 • chore(plugin-catalog): bump yandex to 0.1.6 • feat(plugin-catalog): add yandex_calendar entry • fix(plugin-catalog): update jp-subsidies to 471ed8e • fix(plugin-catalog): update jp-address to 3183844 • fix(plugin-catalog): update jp-egov-law to 2e96dd2 • Catalog: re-pin claude-subscription-directsdk (cancel error fix) • feat(plugin-catalog): add web-local (keyless httpx + trafilatura extract) • catalog: add office-desk (community) • feat(plugin-catalog): add aave-mcp • plugin-catalog: tinyfish 0.2.3 adds a banner and a clearer description • plugin-catalog: bump browserless to 0.1.2 • feat(plugin-catalog): add llmslim plugin • feat(plugin-catalog): add draft-cards plugin • Catalog: Cua Spaces banner • Catalog: re-pin Home Assistant, Spotify and Claude subscription plugins • fix(catalog): update RSS to 0.0.4 • chore(plugin-catalog): update enchanted-composer to 0.2.7 • Catalog: Cua Spaces terminal backend (verified) • Add burnclock to the plugin catalog • feat(plugin-catalog): post-cortex 0.2.0 • feat(plugin-catalog): bump hermes-adaptive-effort to 0.4.0 • feat(plugin-catalog): add hermetic • feat(plugin-catalog): bump intelligent-tool-break to 1.3.5 • catalog: update Kinprove genealogy research recipes to 1.5.0 • plugin-catalog: bump hermes-dreaming to 2.9.8 (config.yaml read past a comment) • feat(plugin-catalog): add aistupidlevel provider • fix(plugin-catalog): bump web-search-plus to 5.1.4 • feat(catalog): add Context Overview desktop plugin • chore(plugin-catalog): add background-review-watch v0.5.0 entry (75c6f45) • Add community plugin: kanban-stream • feat(catalog): add Requesty model-provider plugin • feat(plugin-catalog): add safeailabs-provider • plugin-catalog: hermes-teammates 1.1.0 • feat(catalog): add mcp-plugin-creator • plugin-catalog: bump heartbeat2 to 0.2.1 • catalog: hydradb banner and clearer description • feat(plugin-catalog): add yandex-search-api entry • catalog: add world-clock • feat(plugin-catalog): add unicode-ref • feat(plugin-catalog): add reaction-ledger • Docs: verified catalog entries may be offered at onboarding too • Catalog: NVIDIA App, NVIDIA Broadcast and TinyFish are Verified • catalog: pin usage-guard to v0.3.9 • plugin-catalog: advisor 1.2.0 • feat(plugin-catalog): add empiriolabs-media plugin • feat(plugin-catalog): add empiriolabs plugin • plugin-catalog: add hermes-asgard (twelve Desktop themes) • plugin-catalog: add hermes-kemet (twelve Desktop themes) • plugin-catalog: bump hermes-lang-pt-br to dd9ec89 (core + TUI complete against main) • catalog(offpeak-bekci): pin 0.1.7, install plan was scheduling inside the peak window • feat(plugin-catalog): add day-panel plugin • catalog: add bharatcode-provider • chore(plugins): update node-search to reviewed 0.3.1 • Plugin-catalog: deepseek-search-fetch 1.0.8 • fix(plugin-catalog): re-pin hermes-project-stewardship to 687bb03 (v0.5.3) • feat(catalog): bump pushary to 0.8.1 • Add pending-queue-monitor to the plugin catalog • plugin-catalog: re-pin agentwalletapi to v1.31.0 • catalog: bilinc title, banner, screenshots and disclosure line • feat(plugin-catalog): add sunshine-moonlight entry • feat(plugin-catalog): add tidal entry • feat(plugin-catalog): add wireguard entry • plugin-catalog: diaktoros 0.4.0 • chore(plugin-catalog): bump cognee entry sha to v1.3.2 • feat(catalog): add game-dev tools and workflows • plugin-catalog: update hermes-seo to 0.1.1 • feat(plugin-catalog): add hermes-memory-pane plugin • fix(catalog): update hermes-resetwatch to 0.2.24 • feat(plugin-catalog): add hermes-tripo plugin • feat(plugin-catalog): add abstract-provider • fix(plugin-catalog): update jp-estat to 2cf442a • fix(plugin-catalog): update jp-kokkai to 7047db9 • plugin-catalog: bump loreconvo to 0.10.18 • feat(plugin-catalog): add degeneracy-guard • Add git-review to the plugin catalog • catalog: add web-deepseek (DeepSeek Search + Fetch provider, id deepseek-web) • plugin-catalog: bump hyatlas to 5.0.0 • plugin-catalog: Alan's Way plugins v0.21.7 • feat(plugin-catalog): add hermes-board, the agent's whiteboard, edited in a Desktop pane • Add the Promoat plugin to the catalog • feat(plugin-catalog): add cursor-acp model provider plugin • plugin-catalog: add photofresco • Add hermes-bot-hq to the plugin catalog • feat(plugin-catalog): add model-picker plugin • feat(plugin-catalog): add orquehelx SECURITY & SECRETS (5 PRs) • fix(plugins): update can override a caution security scan (CLI --force, Desktop dialog) • feat(plugin-catalog): add hermes-wincred (Windows Credential Manager secret source) • feat(plugin-catalog): add greyridge-token-safety (Base token pre-trade safety skill) • feat(plugin-catalog): add provenance-gate • catalog: bharatcode-provider, accurate disclosure (privacy/terms), brand fix, SHA bump INTEGRATIONS & CHAT (7 PRs) • feat(krea): Krea 3 through the managed gateway, and the default image model for paid subscribers • fix(bedrock): replay reasoning across Claude/GPT switches only where the target can take it • fix(telegram): a new DM topic's first message lands in that topic, not the previous one • fix: busy corrections that reach no agent are re-queued, and Desktop picks apply to messaging chats (Desktop, TUI, gateway) • fix: background deliveries the unified gateway refuses settle instead of looping (watch, async, cron, Bot Chat, DM) • fix(gateway): edits, path messages, busy media, CJK hosted prompts and Buzz bursts reach the agent once (ingress regressions) • A2A binds A2A_HOST=:: and serves IPv6 and IPv4 peers on one socket STABILITY & FIXES (42 PRs) • Resuming a compressed conversation shows each message once • Classic CLI shows one-sentence reasoning once, not again as its summary title • Kanban: a timed-out managed run is recorded timed_out, not crashed • Gateway stop/restart guard also covers sudo --system and -p profiles • hermes profile delete/rename from a scratch home no longer stops or deletes the real profile's gateway service • fix(gateway): lifecycle verbs never act on another home's service and refuse while sessions are live • fix(cli): bring the manage_connections card back to the classic CLI • fix(gateway): the dock keeps background subagents across a parent rebuild • fix(cli): /resume and -c restore the session's todo list from the gateway's resume snapshot • fix(gateway): list sessions compressed before created_source stamping • Kanban workers: delegate_task works again through owner-reserved children • fix(plugins): stamp a saved update check with the installs read before it ran • Kanban workers: session_search works, dead attempts free their slot, missing delegate_task is explained • fix(gateway,cli,tui): live session listings off the loop, profile stop parks instead of killing the host, plus four lifecycle fixes • CLI: frame user messages, reasoning and answers with bars and blank lines • fix(pm): refuse a registry gap in the caller, never through a PM worker (main red) • fix(terminal): remote backends no longer inherit the TUI process launch directory as their working directory • fix: /worktree new and Move to project actually move the session's terminal • fix(cli): every /cron form runs on the gateway, the cron store's only writer • fix(cli): /stop typed mid-turn shows its interrupt and stop results • fix(gateway): /diff session caps its reply by bytes on the wire and names the cut • fix(cli): /clear and /toolsets show the gateway session's tools • fix(cli): /save writes the gateway's canonical export on this machine • fix(cli): /compress reports a failed summary instead of claiming success • fix(cli): /new, /resume and /branch show the new session's usage and keep todo updates • fix(update): a tags-only release-history refresh gives up after 30s, not 15 minutes • fix(sessions): CLI sessions created through the gateway are listed and resumed by surface • fix(cli): /snapshot restore works in a gateway-backed chat • fix(cli): a /resume or /sessions switch subscribes the session it lands on • perf(deps): parse YAML with ruamel's C parser on Python 3.14 where its wheel ships • perf: hermes serve releases a closed session's memory (token memo, replay ring, gc on macOS) • ci: timing reports download as HTML instead of ZIP • Update-lock E2E test no longer loses its race on fast CI runners • Use remote tags when using blacksmith checkout • Classic CLI resize E2E checks the glyph layout it now ships with • Codex self-heal opt-out test no longer calls the real token endpoint • ci: temporarily revert to gh checkout in install-e2e workflow • Desktop core E2E: the mid-turn teardown interrupts the turn it left running • test: Windows marker-lock kill cell awaits the update child's exit instead of a fixed 3 s • test(gateway): restart burst test runs queued rows through the next owner's recovery (deflake) • test(gateway): stop fake-/proc scan tests reading the real PID owner (deflake test_detects_gateway_pid_via_proc) • ci: pull requests restore main's PM caches instead of saving their own 160 new features and fixes