v0.22.1

# Hermes Agent v0.22.1 (rc.5-v0.22.1)

**Release Date:** October 14, 2026

This is a patch release, with a handful of fixes for the Windows Store, plugin updates, and more.

## ✨ Features

- Agent): add nemotron super 3.5 default parameters ([`c59d2994`](https://github.com/NousResearch/hermes-agent/commit/c59d299408e924c3682619e7d9d368891d4b709e)) — @elisam0
- Cli): add curated model list at the top in the model picker list ([`e6835fd3`](https://github.com/NousResearch/hermes-agent/commit/e6835fd3cb3bb399ce06cac5356c36226483b889)) — @elisam0
- Plugin-catalog): add hermes-lang-ko — Korean Desktop language pack ([`e5f49b6a`](https://github.com/NousResearch/hermes-agent/commit/e5f49b6a17a9bd623da961d86b779d523a09227c)) — @dandacompany
- Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) ([`0169e80c`](https://github.com/NousResearch/hermes-agent/commit/0169e80c7dbb6d2d2a33126310f5c5c075e1952a)) — @StudioCodeAI
- Plugin-catalog: add teamorouter (TeamoRouter model providers) ([`ef223406`](https://github.com/NousResearch/hermes-agent/commit/ef223406225638a73e8f9c1536a734bb7addfe18)) — @2867297362mjb-sketch
- Plugin-catalog): add author-feed ([`5f6d6836`](https://github.com/NousResearch/hermes-agent/commit/5f6d6836cc80051e297936b4467a91d7c4925039)) — @TakeshiTGAL
- Plugin-catalog): bump aux-ledger to 1.4.0 ([`6048066e`](https://github.com/NousResearch/hermes-agent/commit/6048066e22f3019505d04caeab29577c803f4d71)) — @olric3015
- Plugin-catalog): add the wait-ledger catalog card ([`77cb58e5`](https://github.com/NousResearch/hermes-agent/commit/77cb58e56ac47d5e3aa1ee720d4bcd7a8c6a8513)) — @olric3015
- Plugin-catalog): add wait-ledger ([`97e65322`](https://github.com/NousResearch/hermes-agent/commit/97e65322efebd1b8dc07d33634b685df078d5858)) — @olric3015
- Community plugin: lightningai + lightningai-rate-limit ([`07515466`](https://github.com/NousResearch/hermes-agent/commit/075154660043fe5656ec3ca48c93d6a6f9755494)) — @dinosauria123
- Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin ([`7c9adda8`](https://github.com/NousResearch/hermes-agent/commit/7c9adda81a2d152ba4f63fe6aecf59385dfc3284)) — @TREE-Ind
- Plugin-catalog): add openinvest ([`b6e86101`](https://github.com/NousResearch/hermes-agent/commit/b6e86101c29593785c81eb8d380e2faef2530d5f)) — @longsizhuo
- Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) ([`2e7e3859`](https://github.com/NousResearch/hermes-agent/commit/2e7e385959dc65ceb3053724724d8a5f526c675d)) — @Sahil-SS9
- Plugins): move Kumiho Memory to memory catalog shelf ([`46f95e08`](https://github.com/NousResearch/hermes-agent/commit/46f95e086379a2d701595b981cb94733fd060384)) — @kaveone
- Add canonical group attachment controls ([`4673f17c`](https://github.com/NousResearch/hermes-agent/commit/4673f17c9aa5e5cfe48a68830e3ed352af11e0a6))
- Consume event-bound hosted files through canonical admissions ([`e87bd098`](https://github.com/NousResearch/hermes-agent/commit/e87bd098eab1a24f97802fe783596bd91f81fc5b))
- Connect Desktop groups to canonical driver controls ([`3c2c9d47`](https://github.com/NousResearch/hermes-agent/commit/3c2c9d470a7ade1a5f47d202a2d1d24abc608f95))
- Transport hosted producers through authenticated owner sockets ([`51189b05`](https://github.com/NousResearch/hermes-agent/commit/51189b05330b2eee1de148f4f83d3a5f34baa54a))
- Retain hosted room work evidence across authority changes ([`0af2c714`](https://github.com/NousResearch/hermes-agent/commit/0af2c714542d055047aa7529d896ee528e80ccdf))
- Route hosted room workers through session authority ([`bd22e0f9`](https://github.com/NousResearch/hermes-agent/commit/bd22e0f9c467f8a68ee24656c49c7c28c7967954))
- Wire canonical hosted group controls ([`fa2179bb`](https://github.com/NousResearch/hermes-agent/commit/fa2179bb8c3bc263559bbfdfe32ac0d3ffe9a6ec))
- Gateway): resolve --resume <title> and -c <title> [--create-if-missing] in the authority ([`11a83ad4`](https://github.com/NousResearch/hermes-agent/commit/11a83ad4d19fab4bd8889c9d04759af168c55b2b))
- Retain terminal identity tombstones during history retirement ([`ba435291`](https://github.com/NousResearch/hermes-agent/commit/ba435291aab7d782e70f1102bd6174d9b6278675))
- Route native CLI and ACP actions through prepared controls ([`27b0f7f2`](https://github.com/NousResearch/hermes-agent/commit/27b0f7f20a7ba0fdc793fafe732d56adf2dfa54f))
- Publish real prepared compression in the mutation receipt transaction ([`b6540276`](https://github.com/NousResearch/hermes-agent/commit/b654027693d6c8f92b185e8a3bd2728c5f3e81c5))
- Prepare and atomically publish local model changes ([`7e7fa7c6`](https://github.com/NousResearch/hermes-agent/commit/7e7fa7c61611a858cc0be51f790584b91f1d149c))
- Commit independent local branch policy and route atomically ([`f98eaec1`](https://github.com/NousResearch/hermes-agent/commit/f98eaec108f365da07090495a82d6ca95c2de66a))
- Project managed tool progress without private arguments or results ([`61ccd894`](https://github.com/NousResearch/hermes-agent/commit/61ccd894c3674d01a2fb95528217816bc4888d52))
- Bridge managed worker approvals clarification and stop ([`a0b5118f`](https://github.com/NousResearch/hermes-agent/commit/a0b5118f46196190bc244a8f1ecf17d5754fc72c))
- Launch admission-owned tool workers from the ordinary daemon ([`510e32be`](https://github.com/NousResearch/hermes-agent/commit/510e32be9a31a2caae358fc6c95673ffb24c0466))
- Enforce safe defaults at bare agent construction ([`1eeac867`](https://github.com/NousResearch/hermes-agent/commit/1eeac867b187f331b61e1b607d35b1af7f00b2bc))
- Suppress rules skills and memory readers in private safe workers ([`25cda66a`](https://github.com/NousResearch/hermes-agent/commit/25cda66a8bfff26da5c92bf3170cc724bd7fc5ec))
- Bypass plugin providers and hook execution in safe workers ([`33921e6f`](https://github.com/NousResearch/hermes-agent/commit/33921e6f97a950b4b74ffa11cdb3004676f1c920))
- Bind immutable private worker config before runtime imports ([`4cc3f420`](https://github.com/NousResearch/hermes-agent/commit/4cc3f42087e61e84a3b6054903e88f3c7e943a56))
- Expose verified canonical ACP editor MCP attachment ([`1bda56a1`](https://github.com/NousResearch/hermes-agent/commit/1bda56a104e55ebbd21fdefaed860f6488009b57))
- Rebind exact editor MCP credentials on canonical ACP resume ([`5bfa2f2c`](https://github.com/NousResearch/hermes-agent/commit/5bfa2f2c2df10d26f24c103079fd9044e69b4df8))
- Borrow editor MCP configurations with frozen session manifests ([`394f00f6`](https://github.com/NousResearch/hermes-agent/commit/394f00f694cb90c2ea6f502eda0959bc37ab2830))
- Isolate execution-owned MCP registry overlays ([`96e4d296`](https://github.com/NousResearch/hermes-agent/commit/96e4d2962bfeb56323063f64bad8cca3fd4479ee))
- Commit local reset targets with runtime mutation receipts ([`821137c3`](https://github.com/NousResearch/hermes-agent/commit/821137c301ebc5419f86a7069b66036b42100aab))
- Expose profile-scoped Bot relay mailbox RPCs on the authority ([`792aa35a`](https://github.com/NousResearch/hermes-agent/commit/792aa35adc57874c62a6d03a40d512d0bab1cebe))
- Migrate queued Bot mailbox identities without replaying claims ([`af49e2fc`](https://github.com/NousResearch/hermes-agent/commit/af49e2fc05950473e4ee6f9dd431233540f62923))
- Send local Bot DMs to the discovered canonical authority ([`47ba694e`](https://github.com/NousResearch/hermes-agent/commit/47ba694e291d0d3233041720d04317f5cd82285f))
- Admit identified Bot Chat relay deliveries through session authority ([`998df8cc`](https://github.com/NousResearch/hermes-agent/commit/998df8cc0b8028634a6fca15677ab2fc20900b2a))
- Reserve exact owner-started admission worker claims ([`fbdfd46d`](https://github.com/NousResearch/hermes-agent/commit/fbdfd46de8303673c908207206a818d98f8d68f4))
- Expose authenticated owner mutation snapshots ([`d6331c48`](https://github.com/NousResearch/hermes-agent/commit/d6331c4813bab5d0d920286b4af5a6b58fd13ced))
- Freeze ACP tool policy and bind execution-owned edit consent ([`e2f5cfc6`](https://github.com/NousResearch/hermes-agent/commit/e2f5cfc65ea6c38580d3ac38469e71bf31912354))
- Reserve hosted API identities through the authority ([`6b278ca4`](https://github.com/NousResearch/hermes-agent/commit/6b278ca4f015e2a5a5b0a30c5ac1b11825c15384))
- Admit API runs before acknowledging execution ([`f2d9cea3`](https://github.com/NousResearch/hermes-agent/commit/f2d9cea38e97e0356b9b24c07ea5deddfe9de914))
- Run bound API turns on the shared cached agent ([`dea4f0c5`](https://github.com/NousResearch/hermes-agent/commit/dea4f0c568e6d0e13fd9ea8be73cd4ea81a96f25))
- Restore server-bound API session identities ([`76532ae1`](https://github.com/NousResearch/hermes-agent/commit/76532ae1338cc193f6bdef92c0aa4d616a319150))
- Retain claim-fenced structured admission results ([`262e0ebf`](https://github.com/NousResearch/hermes-agent/commit/262e0ebf5ff0123d675098aaa5c8e03f5e4c5d1b))
- Compose worker compression lifecycle and delegation persistence ([`6c57ad37`](https://github.com/NousResearch/hermes-agent/commit/6c57ad37c31e643f5692ea5d31ab759b425cf113))
- Publish committed worker completions through authenticated owner bridge ([`d94ccc2d`](https://github.com/NousResearch/hermes-agent/commit/d94ccc2d8182ed1a5da6a11b9d79a1d4b97a96c7))
- Fence delegation receipts with shared worker sequence and epoch ([`be85ca24`](https://github.com/NousResearch/hermes-agent/commit/be85ca249e51ae9975c049604e1ae2ed4194261b))
- Route registered worker delegation writes through durable outbox ([`1ee6545f`](https://github.com/NousResearch/hermes-agent/commit/1ee6545f7a34d4424d7dcae44b7e40c217cb4a0c))
- Add execution-bound delegation ledger operations ([`8128e88f`](https://github.com/NousResearch/hermes-agent/commit/8128e88fd2b7f86b16534c0f62b605265aee80af))
- Persist worker titles activity and route sidecars with receipts ([`235e4f12`](https://github.com/NousResearch/hermes-agent/commit/235e4f12d7d9212c205cf1f98876ea0e6fa0e12c))
- Add assignment-fenced worker constructor and finalization handlers ([`b7de5a8e`](https://github.com/NousResearch/hermes-agent/commit/b7de5a8eba9ab7c4851c823f8fd196f2c4ca5da8))
- Atomically compact and advance worker transcript assignments ([`c2e77eba`](https://github.com/NousResearch/hermes-agent/commit/c2e77ebaeb77b0f70dce83c105606335a64cd988))
- Preserve worker history and cache lineage identities ([`e63e1101`](https://github.com/NousResearch/hermes-agent/commit/e63e1101c02a80e6f3b9f0ca619fae5b6be73e6e))
- Add receipted worker compression guards and leases ([`d51afe4c`](https://github.com/NousResearch/hermes-agent/commit/d51afe4cb92e66e499c6e3f385dfbe18b8d9b88d))
- Route REST imports and deletion through mutation receipts ([`2cdd103d`](https://github.com/NousResearch/hermes-agent/commit/2cdd103df9f7b1668292c36e791fc5fd084860ff))
- Route REST sidebar edits through the shared authority ([`eb329d21`](https://github.com/NousResearch/hermes-agent/commit/eb329d21ba95077eff9764e7531e3364ed3d8362))
- Coordinate shared mutations and publish committed revisions ([`eb42a002`](https://github.com/NousResearch/hermes-agent/commit/eb42a0021f05befde4159c43e097b652fc9d1cf3))
- Reuse transactional rewind with generation and receipt fences ([`6777ffa4`](https://github.com/NousResearch/hermes-agent/commit/6777ffa4bb67310bc5a7044892cc7cf48bdb685e))
- Import session histories atomically with retry receipts ([`b9194595`](https://github.com/NousResearch/hermes-agent/commit/b919459524e609dd60cf04c5710941db8cce1903))
- Fence destructive deletion without erasing runtime obligations ([`e5249c9a`](https://github.com/NousResearch/hermes-agent/commit/e5249c9af4efbcfd9aca39f276c71d938249c3e4))
- Commit sidebar edits with canonical mutation receipts ([`0b1b8e0f`](https://github.com/NousResearch/hermes-agent/commit/0b1b8e0f1d845060c84791f9bc45f581b9ed8858))
- Project execution-owned approvals to ACP viewers ([`97a24c10`](https://github.com/NousResearch/hermes-agent/commit/97a24c10b3b81a8ea1f142d0125b05ffc62098aa))
- Attach ACP transport to canonical session execution ([`8dd92a30`](https://github.com/NousResearch/hermes-agent/commit/8dd92a30b6b53c9b5ae3a27eebcb90f36c9919a3))
- Persist assigned worker prompt context and usage anchors ([`c6540cb9`](https://github.com/NousResearch/hermes-agent/commit/c6540cb9dd86a08eef0bf597bcb9dae68a955ac3))
- Admit local automation through owner durable FIFO ([`1642b339`](https://github.com/NousResearch/hermes-agent/commit/1642b339918cb74f87b4d03e17593d547e674329))
- Queue due gateway heartbeat ticks through canonical admission ([`ab44af2c`](https://github.com/NousResearch/hermes-agent/commit/ab44af2c0732485fb33c7e53bad0a5daa29f8d28))
- Admit trusted gateway completions to the durable session FIFO ([`7cd1b000`](https://github.com/NousResearch/hermes-agent/commit/7cd1b000daa3526e72a817df70190dd5569e0aec))
- Fence worker terminal receipt after sequenced durable writes ([`21a48aea`](https://github.com/NousResearch/hermes-agent/commit/21a48aea09d719b3f2a1f2ebae8053791b6b13d2))
- Authenticate live worker persistence and explicit restart adoption ([`9d7d7e2a`](https://github.com/NousResearch/hermes-agent/commit/9d7d7e2abdab2a59f7e7e0ff517b85b73de45681))
- Receipt worker main and auxiliary usage in canonical transactions ([`9d896c49`](https://github.com/NousResearch/hermes-agent/commit/9d896c499b034fcb4e16e58a1865a26feb778ec0))
- Atomically receipt structured worker transcripts and turn leases ([`2abe47de`](https://github.com/NousResearch/hermes-agent/commit/2abe47de8bd8f2b9f76c024b339244e05e7918b0))
- Dispatch bound local slash commands through gateway handlers ([`b0377e92`](https://github.com/NousResearch/hermes-agent/commit/b0377e929b48bed68fb13799ad1878d747e128e3))
- Share authenticated canonical slash discovery with legacy catalogs ([`fcf50e03`](https://github.com/NousResearch/hermes-agent/commit/fcf50e03c3b2cdae9c160ee01f23ba576c198965))
- Authenticate native HTTP through private daemon grants ([`75764b2a`](https://github.com/NousResearch/hermes-agent/commit/75764b2ad0c8767069da717f68a81977d1165409))
- Commit local creation policy and restore cold authority routes ([`aa2624ba`](https://github.com/NousResearch/hermes-agent/commit/aa2624ba5c200d2e540e538e6bae73754f9f8f15))
- Attach Desktop local launches to canonical gateway ([`9c40ddcf`](https://github.com/NousResearch/hermes-agent/commit/9c40ddcfc2a04fdb3278e8173a85a4b03c24099f))
- Bind Ink sessions and controls to canonical authority envelopes ([`a2d9e258`](https://github.com/NousResearch/hermes-agent/commit/a2d9e258daa97b43836821a97f79c5de06d21df5))
- Attach Ink local transport through canonical gateway bootstrap ([`08f628f9`](https://github.com/NousResearch/hermes-agent/commit/08f628f9f5b0f5a2ebcaf7ece45e76e3ff71f457))
- Route normal classic and one-shot launch through the gateway ([`35510459`](https://github.com/NousResearch/hermes-agent/commit/3551045907580e25a766d01bc56eb0ee41115d0d))
- Add transport-only classic gateway client and option validation ([`6ed03be9`](https://github.com/NousResearch/hermes-agent/commit/6ed03be97446425fbf47c64ea4c71a318f4f6ba5))
- Apply local launch policy through real gateway turns ([`080c5da6`](https://github.com/NousResearch/hermes-agent/commit/080c5da6f201058cf7dfda6bc0343910dc1f6625))
- Define frozen local session launch policy ([`81ed9712`](https://github.com/NousResearch/hermes-agent/commit/81ed9712f29cacb8727e2c0cc12960a64201abf0))
- Route revision-checked session metadata through gateway ([`17ddbe44`](https://github.com/NousResearch/hermes-agent/commit/17ddbe4407a60230c2bfb0b743fc44b8a027f1c4))
- Expose scoped local session metadata and document compatibility ([`52c354ff`](https://github.com/NousResearch/hermes-agent/commit/52c354ff183ae96e2cbba651acda7e679b795db6))
- Create gateway-owned local sessions through authenticated controls ([`42967cdd`](https://github.com/NousResearch/hermes-agent/commit/42967cddd73f56da1f62ab91f945c36347bd932c))
- Recheck native Discord membership before durable admission and claim ([`cc0cd5c9`](https://github.com/NousResearch/hermes-agent/commit/cc0cd5c993e51feaf6be61077e2a2566673847fc))
- Boot authenticated session authority in ordinary gateway ([`c3bf62eb`](https://github.com/NousResearch/hermes-agent/commit/c3bf62ebd392e9d2f843b0f5b2f1020561c7baee))
- Share live clarification controls across attached viewers ([`9c474378`](https://github.com/NousResearch/hermes-agent/commit/9c474378a1f608cb388d50fdd5e3d5b173cbac89))
- Stream canonical gateway execution events to shared observers ([`40d9b4c7`](https://github.com/NousResearch/hermes-agent/commit/40d9b4c7ea8e755c886588523fa3b659137fe54a))
- Reauthorize multiplex native connector provenance ([`244bff73`](https://github.com/NousResearch/hermes-agent/commit/244bff73c8cb4430b8041de6b14c87e5861f3c17))
- Share generation-fenced approvals across gateway viewers ([`5e2afdae`](https://github.com/NousResearch/hermes-agent/commit/5e2afdaec356a2999de82d67b556f02189516ede))
- Retain native media and context before durable admission ([`ef447482`](https://github.com/NousResearch/hermes-agent/commit/ef447482f23ec3c46c3e0f7dafd52e6693c14117))
- Replay authority events from atomic subscription watermarks ([`d24dc3fa`](https://github.com/NousResearch/hermes-agent/commit/d24dc3fa6f55afc29eb8e56907c225cbc0288c01))
- Recover committed native text without replaying unknown turns ([`78646003`](https://github.com/NousResearch/hermes-agent/commit/78646003aeab0a086b81a580b3fd0eff80808e2a))
- Execute attached websocket turns on the messaging live agent ([`47fbfd4c`](https://github.com/NousResearch/hermes-agent/commit/47fbfd4ca545b84f7413c263cb1aa799d7e34bd3))
- Add revision-fenced runtime rename and archive receipts ([`5878e565`](https://github.com/NousResearch/hermes-agent/commit/5878e5656ca6907168d957cc08eec8e7862f13b4))
- Fence typed worker persistence with atomic replay receipts ([`7cc69d29`](https://github.com/NousResearch/hermes-agent/commit/7cc69d293faa91c24d674886ed7bfbe7ddf71923))
- Import drained legacy admissions atomically with unknown recovery ([`124dfa7c`](https://github.com/NousResearch/hermes-agent/commit/124dfa7c5791435d3227efe76c378f10e88b0396))
- Centralize durable session admissions in canonical storage ([`0695b12b`](https://github.com/NousResearch/hermes-agent/commit/0695b12b4c4b2c672d96229eba464e20617d73a8))
- Keep declined gateway wizard starts unmanaged ([`7500930d`](https://github.com/NousResearch/hermes-agent/commit/7500930d9f626ab45ec2a209448ef909a0fc6a1e))
- Require explicit consent for gateway service setup ([`16d6b7da`](https://github.com/NousResearch/hermes-agent/commit/16d6b7daa13b51344fdcecc66958f3f876cf017f))
- Restrict runtime bootstrap peers and bound native pipe I/O ([`d3ccac14`](https://github.com/NousResearch/hermes-agent/commit/d3ccac14e84c5861ab6105b952b370c6a8b0e135))
- Compose the existing API into the gateway event loop ([`bac47874`](https://github.com/NousResearch/hermes-agent/commit/bac47874ec723c1436748061c221a9c06fcdf642))
- Distinguish unavailable gateway owners from absent runtimes ([`e903841c`](https://github.com/NousResearch/hermes-agent/commit/e903841cb861228bcde86f9840379876eb097b45))

## 🔧 Improvements

- Profiles): build the seed routing view once; expand `enabled` too ([`311155fa`](https://github.com/NousResearch/hermes-agent/commit/311155fade43d1993ea968909a2ad36762345bbc)) — @kshitijk4poor
- Update nemotron super 3.5 name ([`3224993a`](https://github.com/NousResearch/hermes-agent/commit/3224993af1860ffdb587e491560f32bf845c82ad)) — @elisam0
- Hermes_cli): update nemotron 3.5 name ([`108ae4e7`](https://github.com/NousResearch/hermes-agent/commit/108ae4e7cd4c89a95545b1cdab3e1b72ce220755)) — @elisam0
- Catalog: re-pin showly to the build without the upstream self-update check ([`6462f64a`](https://github.com/NousResearch/hermes-agent/commit/6462f64aefba9271f9977edcd430d61141d4d760)) — @slchris
- Catalog: update Model Router to v0.4.3 native preferences ([`6a097ee9`](https://github.com/NousResearch/hermes-agent/commit/6a097ee98d4c96eafa9ef76c98c3c39d6d65a0da)) — @metamindedu
- Keep native MCP revision scoped to frozen tool settings ([`53d17f1c`](https://github.com/NousResearch/hermes-agent/commit/53d17f1c5b15059d4a44ea30839726371ff3df2e))
- Cron bot-chat delivery has no local CLI fallback lane ([`5d87060e`](https://github.com/NousResearch/hermes-agent/commit/5d87060eb8c1445bc53e135fdb79be64fd6179e5))
- Retire bot execution discovery from viewer notification pollers ([`c8ae25cd`](https://github.com/NousResearch/hermes-agent/commit/c8ae25cd1122550a13ba22f84e325adab0d8c91a))
- Make default ACP construction authority-only ([`c423a431`](https://github.com/NousResearch/hermes-agent/commit/c423a431b330c6f9ef110b0eb8c691e37ec400e5))
- Remove obsolete updater sidecar deletion path ([`58895653`](https://github.com/NousResearch/hermes-agent/commit/5889565343c9daa08ac64e774d4dda1f8b0ec459))
- Remove retired local serve launch imports ([`5702f9df`](https://github.com/NousResearch/hermes-agent/commit/5702f9dfccd1981a722700fb7ce319c3daa58a6a))
- Extract ordinary gateway bootstrap lifecycle ([`3c0f1e01`](https://github.com/NousResearch/hermes-agent/commit/3c0f1e01e73ae5f05b3a44153c60b29daf2ff877))
- Freeze shared session authority interface contract ([`1af74c27`](https://github.com/NousResearch/hermes-agent/commit/1af74c27301edc1ce0f48b866d3b645c4d949048))
- Extract TUI session registry and agent factory seams ([`a38ca908`](https://github.com/NousResearch/hermes-agent/commit/a38ca908e0c33cc96b289e720a09d904072a4af6))
- Separate gateway agent acquisition from native progress ([`0f3a4fb2`](https://github.com/NousResearch/hermes-agent/commit/0f3a4fb2e7aaa9b2676747bab3ca2656160b259a))
- Extract gateway turn preparation and persistence phases ([`6e8de80a`](https://github.com/NousResearch/hermes-agent/commit/6e8de80a7af35b47fc79ae18f725f3588d8a278a))
- Move gateway service wizard into setup sibling ([`f0b35a98`](https://github.com/NousResearch/hermes-agent/commit/f0b35a982eceb2a177da7d6545800b80607f233a))
- Extract gateway setup service orchestration ([`02d0307c`](https://github.com/NousResearch/hermes-agent/commit/02d0307c24d2fa3541316484693f97a8e3e8723c))
- Remove extracted runner initialization bodies ([`4b1379fb`](https://github.com/NousResearch/hermes-agent/commit/4b1379fb1620e29f8e6c36c2f3660a08fb9f8bdc))
- Extract gateway bootstrap and writable initialization phases ([`0c287340`](https://github.com/NousResearch/hermes-agent/commit/0c2873402d67ed43b59d51c83d83c1f6bf5dbbc4))
- Extract standalone web application lifespan ([`f38f2444`](https://github.com/NousResearch/hermes-agent/commit/f38f2444fdd5be92b340a3f39f5a226efd4db798))

## 🐛 Bug Fixes

- Compression): fallback summaries, multiline setup notes and parallel loads keep skill markers right ([`297552a9`](https://github.com/NousResearch/hermes-agent/commit/297552a9d646119871391d202509822cd86330df))
- Compression): a slash-skill body's example paths stay out of the anchor index ([`d6020828`](https://github.com/NousResearch/hermes-agent/commit/d602082868bcca0efcfc0dd86723bbfce29fb9e5))
- Compression): small and slash-invoked skills keep their reload marker across compaction ([`71e815de`](https://github.com/NousResearch/hermes-agent/commit/71e815def843ab4885ba14a9170b546a6df077f9))
- Desktop): update notes keep full text, re-read merged PRs per check, respect custom branches ([`f2a93db9`](https://github.com/NousResearch/hermes-agent/commit/f2a93db97c1c8ab7b97ce640764349c1f6a804a3))
- Mcp): preserve server deadlines through outer tool execution ([`f30020ed`](https://github.com/NousResearch/hermes-agent/commit/f30020ed5e1fc35551ce0d259ed5086dd6bf9885))
- Plugins): honor portable per-server call deadlines ([`fcc170b7`](https://github.com/NousResearch/hermes-agent/commit/fcc170b7983e3891e02f96d977ecdf219d11be1e))
- Agent): rewrite split tool ids before Mistral sees them ([`b33ed359`](https://github.com/NousResearch/hermes-agent/commit/b33ed35968f00896e093fa41735af7c108e6bead)) — @xxxigm
- Profiles): align model seed with provider resolution ([`5fee8d77`](https://github.com/NousResearch/hermes-agent/commit/5fee8d77bf91ea2e34817817334f98fe93a5b8f6)) — @helix4u
- Profiles): inherit canonical and legacy custom endpoints ([`2d3e75aa`](https://github.com/NousResearch/hermes-agent/commit/2d3e75aab02f044000110137a0503b5fa2114367)) — @helix4u
- Drop the VPN/proxy advice from the CDN-block message ([`300228d2`](https://github.com/NousResearch/hermes-agent/commit/300228d24c593f779055204753921fbe9a2163c5))
- Catalog): re-pin Agent Mixer after maintainer review ([`4297a692`](https://github.com/NousResearch/hermes-agent/commit/4297a692d9570e039aa8c7bfde900ffca420eaff)) — @Sahil-SS9
- Pin Activity v0.2.1 public credential routes ([`3dac1f07`](https://github.com/NousResearch/hermes-agent/commit/3dac1f07d59f7f300f6f3433cef1bf8966b763c4)) — @hassan-kamel
- Plugin-catalog): update switchbot-control to d0e6f77 ([`c4bf61b1`](https://github.com/NousResearch/hermes-agent/commit/c4bf61b126a60172d2598b923fd08b1d60b1e84f)) — @TakeshiTGAL
- Doctor): clarify Docker npm audit remediation ([`e21caa27`](https://github.com/NousResearch/hermes-agent/commit/e21caa27b75a880536ac3429f70c356ece19a330)) — @KoNit-K
- Deps): bump the WhatsApp bridge lock past its npm-audit findings ([`231cb757`](https://github.com/NousResearch/hermes-agent/commit/231cb757a4607e6b44e13c154696e869fd959102)) — @ethernet8023
- Tui): retain native legacy history in canonical session picker ([`2171365a`](https://github.com/NousResearch/hermes-agent/commit/2171365a3fcbe646bcb21dc26e8391f5588023fe)) — @unsupportedpastels
- Tui): the banner shows main's 8-character session label for a canonical id ([`2c979900`](https://github.com/NousResearch/hermes-agent/commit/2c97990051a6a415ce4baadf4bb6e90262cca482))
- Gateway): a local process completion persists as a process_complete card ([`ff770cb7`](https://github.com/NousResearch/hermes-agent/commit/ff770cb769852a776c8788ddaae2f121234eb942))
- Runtime): persist diagnostic automation category through replay ([`bdac7911`](https://github.com/NousResearch/hermes-agent/commit/bdac7911d99e5b18793e3fc414ce67d839d1f3f0)) — David Dudok de Wit
- Gateway): retire bot receipt tasks with authority ([`d50b2eda`](https://github.com/NousResearch/hermes-agent/commit/d50b2eda3d453eeedf720337f06e743eeb6d7655)) — @Lokee86
- Gateway): persist operator provenance for native recovery ([`c51049aa`](https://github.com/NousResearch/hermes-agent/commit/c51049aa8f6099b79569d339de895ca0a9301ba5)) — @Lokee86
- Cli): preserve blocking controls in finite output ([`954638ed`](https://github.com/NousResearch/hermes-agent/commit/954638ede23e1e3ddeca27412992cfa2d636ea31)) — @Lokee86
- Gateway): isolate malformed bot receipt schemas ([`4be62f9c`](https://github.com/NousResearch/hermes-agent/commit/4be62f9ca68d626760a54742c6308cf38f804f88)) — @Lokee86
- Acp): clean up deferred cancellation lifetime ([`89dac620`](https://github.com/NousResearch/hermes-agent/commit/89dac62078c964f5aa8f1a5ff40f3914baecc481)) — @Lokee86
- Gateway): close remaining unified-runtime review gaps ([`83cdc63a`](https://github.com/NousResearch/hermes-agent/commit/83cdc63a19925827ba0aa78339fb5acea02b06cc)) — @Lokee86
- Gateway): isolate bot receipts and keep headless cron no-spawn ([`cdf36315`](https://github.com/NousResearch/hermes-agent/commit/cdf36315e95e922970b91401bd1156c00a2d1817)) — @Lokee86
- Gateway): recover mixed local queues and retire failed hot serves ([`f4fd982b`](https://github.com/NousResearch/hermes-agent/commit/f4fd982b56920ccf5311943e7d1a8c19f986e87f)) — @Lokee86
- Gateway): terminate replay gaps and retain ACP cancels ([`37662b16`](https://github.com/NousResearch/hermes-agent/commit/37662b16ec967452d3fd600db1dab1bc12e68e46)) — @Lokee86
- Gateway): route local ticket bootstrap through control owner ([`996d9beb`](https://github.com/NousResearch/hermes-agent/commit/996d9bebd1190fa4e45f9f8106de99ff558dd819)) — @Lokee86
- Desktop): a transcript reconcile skips a runtime mid-switch to another session ([`09aafcea`](https://github.com/NousResearch/hermes-agent/commit/09aafceab4d325ccbed402caf928f7b9ead4371c))
- Gateway/stream): a failed overflow head send no longer spins the event loop ([`f0d9bd2f`](https://github.com/NousResearch/hermes-agent/commit/f0d9bd2fc4971534f636bbda16c56004116b3d52))
- Gateway): `profile` on our own home is stripped only for the closed session verbs ([`2c5b0af5`](https://github.com/NousResearch/hermes-agent/commit/2c5b0af5e19bf607ffd6f9bbb6cb34a1d4a5c9df))
- Gateway): `gateway ensure` starts on a systemd host whose user bus is unreachable ([`82db702f`](https://github.com/NousResearch/hermes-agent/commit/82db702f3fbf5a04db3880df02d6517b27bf3163))
- Desktop): a session routed onto a new socket re-attaches before it submits ([`307dac20`](https://github.com/NousResearch/hermes-agent/commit/307dac202f0f847632f05de1e91ffae3d3a125a6))
- Desktop): a registry-connection hover prewarms that connection's gateway (main #89756 port) ([#89756](https://github.com/NousResearch/hermes-agent/pull/89756))
- Bot-relay): a relayed dm targets only live profiles (#99392 on the authority door) ([#99392](https://github.com/NousResearch/hermes-agent/pull/99392))
- Gateway_chat): one-shot refuses an unknown-blocked session; stream-json always closes with a result ([`08b6ebd0`](https://github.com/NousResearch/hermes-agent/commit/08b6ebd05155adabf8a7162e9755df424f083b6f))
- Tui_gateway): projects RPCs answer from the scan cache when a profile's state.db was never initialized ([`372ec7fc`](https://github.com/NousResearch/hermes-agent/commit/372ec7fc1303e4cdc9c74ebf3bc7e2dd2a786914))
- Cron): Bot Chat delivery creates the missing Bot Chat instead of failing the run ([`364a0e22`](https://github.com/NousResearch/hermes-agent/commit/364a0e22b9106d94356a962089f1674ebe78c48a))
- Seed-copy compensation discards the row without the retirement fence ([`44212c5a`](https://github.com/NousResearch/hermes-agent/commit/44212c5a559f11ea9285161ca4372590f09dde73))
- Gateway): exact mutation retries repair the runtime projection (X11, reported by @Xipong) ([`c1ee9286`](https://github.com/NousResearch/hermes-agent/commit/c1ee92860012bffec6128aead77ba1b7fa1fed8d))
- Desktop): preserve accepted input and clarify persistent-work Quit ([`f8e234ed`](https://github.com/NousResearch/hermes-agent/commit/f8e234ed89dd1b00149699d806783f89e2f5164e)) — @dokterdok
- Desktop): drop pool-limit notification wiring main added after the pool subsystem was removed ([`c3632fcc`](https://github.com/NousResearch/hermes-agent/commit/c3632fcca3639e44f1f16ebfce176c3f2fd6823c))
- Runtime): owner scope is multiplex-only; foreign LOCAL sources fail closed; primary = launch home ([`a37550b9`](https://github.com/NousResearch/hermes-agent/commit/a37550b96ff7f5f433990149d1b04f100df2b57c))
- Type session creation identity with merged onboarding options ([`0948ffc9`](https://github.com/NousResearch/hermes-agent/commit/0948ffc98a77426a0f529837e6ebee7b70343a30))
- Preserve main lifecycle and discovery behavior after extraction ([`b186879a`](https://github.com/NousResearch/hermes-agent/commit/b186879a3fe2915077880c71db5ad1a5ea8a79a0))
- Preserve webhook delivery profile and snapshot scoped home ([`8fe3d198`](https://github.com/NousResearch/hermes-agent/commit/8fe3d19800cf7ace40c9595fa5183a54d1de3927))
- Retain per-admission bot and API authors ([`61f75a77`](https://github.com/NousResearch/hermes-agent/commit/61f75a7752387852eb996eee9c9e081ed7f245dc))
- Recover mixed-clock sessions and compose runtime test listeners ([`9e747d7f`](https://github.com/NousResearch/hermes-agent/commit/9e747d7f1e4374e98b0a8fe0a747fd770c5b6963))
- Preserve hosted image admission and execution across owners ([`2672b820`](https://github.com/NousResearch/hermes-agent/commit/2672b82012162187f8e6b68d8a5cfb39531f8a8a))
- Gateway): restore hosted image attachments natively ([`bdfe8a50`](https://github.com/NousResearch/hermes-agent/commit/bdfe8a50c30058a712ed6bedeb7bdcc3726312ce))
- Desktop): preserve profile target during reconnect ([`ddf8bec7`](https://github.com/NousResearch/hermes-agent/commit/ddf8bec7b32bf4677f2f7e493f8f23393de451da))
- Restore durable hosted group sends before enabling input ([`d3162155`](https://github.com/NousResearch/hermes-agent/commit/d31621559f82646fe0161f2c8ea2408b5c349108))
- Translate canonical hosted group controls in all desktop locales ([`29e27af5`](https://github.com/NousResearch/hermes-agent/commit/29e27af5cf2905202d4992084d229e3b16c08d59))
- Desktop): journal canonical group sends before admission ([`3d1cb4e0`](https://github.com/NousResearch/hermes-agent/commit/3d1cb4e0e88dc56ae0d603c26991651a4283a0c3))
- Integrate hosted attachment admission hooks ([`c094d91e`](https://github.com/NousResearch/hermes-agent/commit/c094d91ec29a9854dd9eb481bd3d975a05898772))
- Transfer hosted input bytes through task-scoped owner attestation ([`519e1101`](https://github.com/NousResearch/hermes-agent/commit/519e11011d63df04ae8b5381475cbe10db994782))
- Bind hosted owner transport to exact destination home ([`9035ef9a`](https://github.com/NousResearch/hermes-agent/commit/9035ef9a9c04b2d00c9e4b0b561180001ec9ea4d))
- Minimize retained webhook destinations and preserve legacy receipts ([`c6456808`](https://github.com/NousResearch/hermes-agent/commit/c6456808af9803127ba8556b75a613f7b1d17502))
- Capture peer ACK evidence and trim unused file catalog helpers ([`c86dd71b`](https://github.com/NousResearch/hermes-agent/commit/c86dd71b654e47564eeee62897396f8558428138))
- Publish hosted file shares with cursor-fenced retries ([`49e27d8b`](https://github.com/NousResearch/hermes-agent/commit/49e27d8b4c9a21f9392cac86ff765090ef32de5f))
- Run hosted rooms through independently owned profile daemons ([`53a260ac`](https://github.com/NousResearch/hermes-agent/commit/53a260ac1b09e9d11413bccdb9d7e6e7574311ce))
- Fence hosted discard and prevent unknown retry generations ([`3cde0092`](https://github.com/NousResearch/hermes-agent/commit/3cde00927487ce70759b4640d857d2ecfebbf9b4))
- Explicitly discard exact hosted unknown executions ([`864c34f3`](https://github.com/NousResearch/hermes-agent/commit/864c34f3c68213242cbfba9680a599769cc6c56c))
- Preserve hosted room ownership during service shutdown ([`bfa8022d`](https://github.com/NousResearch/hermes-agent/commit/bfa8022d88c47aca2cd020848303928430b7bdaa))
- Durably recover webhook destinations ([`d207fd64`](https://github.com/NousResearch/hermes-agent/commit/d207fd64d3b0ab2b1073d048009873565a14abad))
- Recover native admissions after ordinary adapter startup ([`70659676`](https://github.com/NousResearch/hermes-agent/commit/706596765107a52ef20397ce21e92901a7402357))
- Carry finite execution policy through canonical admission ([`9edd28e6`](https://github.com/NousResearch/hermes-agent/commit/9edd28e6e0ad951f8bf1c6ca0917537bf579051b))
- Join finite gateway chat delegations in the admitted turn ([`5977ef75`](https://github.com/NousResearch/hermes-agent/commit/5977ef75fdd74306bdda3da5e2a9bba6df0a720a))
- Resolve managed Node in native ticket probes ([`ee9030bd`](https://github.com/NousResearch/hermes-agent/commit/ee9030bd303da503857f26ecce3c7dd445b9cc8a))
- Preserve manual compression settings and session identity ([`9fa0b6aa`](https://github.com/NousResearch/hermes-agent/commit/9fa0b6aa7a42f621172b66bf9d44dc118ca60590))
- Prevent duplicate cron alerts after durable delivery handoff ([`47e3bb25`](https://github.com/NousResearch/hermes-agent/commit/47e3bb25fb5b26e6d38f276f7d8ee30b787c8da3))
- Preserve cron delivery silence and incident acknowledgements ([`0c7f676e`](https://github.com/NousResearch/hermes-agent/commit/0c7f676ee41564da7d4355c5665523a970d97fe7))
- Bound canonical cron owner store acquisition ([`61759b57`](https://github.com/NousResearch/hermes-agent/commit/61759b573d4626eb4f8598a4abb689c90d0bb03f))
- Restore canonical desktop image thumbnails safely ([`4d5db820`](https://github.com/NousResearch/hermes-agent/commit/4d5db8201b9022c0cd42863bbfdd2282688731a7))
- Restore prepared desktop image drafts after restart ([`5034ee3a`](https://github.com/NousResearch/hermes-agent/commit/5034ee3a4a20ec08fc48c25e7af1155a7d69a62a))
- Route lost prompt discard to its session owner ([`566872a8`](https://github.com/NousResearch/hermes-agent/commit/566872a8190128359f55193eb42222eaca7aa8f1))
- Preserve newer replies across delayed redirect receipts ([`ac30b57a`](https://github.com/NousResearch/hermes-agent/commit/ac30b57acbddec343573c2b3488fbda4855e25e5))
- Retry transient desktop busy policy reads ([`82098e63`](https://github.com/NousResearch/hermes-agent/commit/82098e63730d87c63b22ace154e168e791c1cbef))
- Keep desktop streams intact when corrections are refused ([`3c886973`](https://github.com/NousResearch/hermes-agent/commit/3c88697343eb324a8bcd25929ce65a7d927b7f84))
- Connect recovery and owner projection routes ([`cfa5c152`](https://github.com/NousResearch/hermes-agent/commit/cfa5c152214d246e49f3304efa33fe68aa9c27c8))
- Discover private gateway sockets across native temp roots ([`de66df14`](https://github.com/NousResearch/hermes-agent/commit/de66df140032c903f3fae7fefbd441ade7ea0d54))
- Expose owner-scoped ancillary session reads ([`61ace21a`](https://github.com/NousResearch/hermes-agent/commit/61ace21a95a9d78096924fc61b086963ce7e3af7))
- Stage canonical remote images in the authorized owner cache ([`baaa4464`](https://github.com/NousResearch/hermes-agent/commit/baaa4464a4680dea7eb1fa21d423442cf94c73c6))
- Project native config and model inventory from canonical owner ([`1064971e`](https://github.com/NousResearch/hermes-agent/commit/1064971e07d3f95f39a7dc9128b14f7093d416ff))
- Preserve Kanban board discovery and unknown owner attempts ([`90e2b2eb`](https://github.com/NousResearch/hermes-agent/commit/90e2b2eb3adb1f46638e03817c5519d0cbd7d872))
- Reconcile canonical cron receipts into durable delivery ([`c1172b1a`](https://github.com/NousResearch/hermes-agent/commit/c1172b1a8278bcb7f4135317fcba7c9904992a68))
- Preserve admitted images and async usage in managed workers ([`4abbb3f9`](https://github.com/NousResearch/hermes-agent/commit/4abbb3f9788ce374652ff8380f458d7797352b1a))
- Share static-token session ownership across HTTP and WebSocket ([`56e344e5`](https://github.com/NousResearch/hermes-agent/commit/56e344e5a8039caaafddad33ccc415f5b7b8a336))
- Connect canonical cutover repairs across owner and clients ([`c8f8d9ae`](https://github.com/NousResearch/hermes-agent/commit/c8f8d9ae638447799c1253f6e0d0d3093d87f9cc))
- Restore scoped canonical busy and correction controls ([`daa01697`](https://github.com/NousResearch/hermes-agent/commit/daa016976b09cec396c9c421baa34bec83622af0))
- Isolate authenticated gateway owners by provider and issuer ([`6b8a6d4c`](https://github.com/NousResearch/hermes-agent/commit/6b8a6d4c358161b62c621cb7f04a4c901ec701a9))
- Bootstrap Windows desktop tickets through validated Python pipes ([`f8ba25a9`](https://github.com/NousResearch/hermes-agent/commit/f8ba25a99b0e9bd75d3f2743f4887d813dacb195))
- Submit Desktop images through canonical admissions ([`c93382c0`](https://github.com/NousResearch/hermes-agent/commit/c93382c0a1dc3abb6a19e84ad89190446673d943))
- Preserve desktop busy correction intent on rejection ([`b3cca0f3`](https://github.com/NousResearch/hermes-agent/commit/b3cca0f3caf7cc7fba027af120657458246a152d))
- Keep canonical RPC refusals out of Desktop resume recovery ([`9ba2582b`](https://github.com/NousResearch/hermes-agent/commit/9ba2582bbae1f72e5cb37ea00afd5d00ca25c3a1))
- Keep unbound Ink drafts instead of claiming memory-only admission ([`07588b5e`](https://github.com/NousResearch/hermes-agent/commit/07588b5e7d13f6cf80be71e4da20311fc58de062))
- Honor non-idempotent canonical busy control acknowledgements ([`01e4829c`](https://github.com/NousResearch/hermes-agent/commit/01e4829cbaee5cc0d3c860717853abfc9ff8f31b))
- Stage clipboard images on the Ink client host ([`179a8473`](https://github.com/NousResearch/hermes-agent/commit/179a84734cdf604604a45d4531c22f4c45e17cbe))
- Scope Ink config hydration and prompt model mutations ([`798c3926`](https://github.com/NousResearch/hermes-agent/commit/798c3926662aa5aec2f37ec3291b38ecc609d860))
- Retain disconnected Ink input and canonical control receipts ([`1a5bae9b`](https://github.com/NousResearch/hermes-agent/commit/1a5bae9bd1ab6b99e100067989a2f03f2389f0a6))
- Stage and retain canonical Ink image submissions ([`33622c04`](https://github.com/NousResearch/hermes-agent/commit/33622c04095805497ebe0fbe5c0e0140178556f6))
- Route Ink session controls through canonical authority ([`bf0b25a9`](https://github.com/NousResearch/hermes-agent/commit/bf0b25a90f1f554091e8fb516ae5df0addea869a))
- Preserve Kanban execution PID and durable worker outcomes ([`d4fd07d2`](https://github.com/NousResearch/hermes-agent/commit/d4fd07d21239500dd03d6aac78d5bba8d0397f41))
- Route claimed Kanban tasks through trusted owner admission ([`5aeba055`](https://github.com/NousResearch/hermes-agent/commit/5aeba055f28280bd326f29aa9f8627eaabf4dc05))
- Admit agent cron runs through the canonical owner ([`cdbe8c35`](https://github.com/NousResearch/hermes-agent/commit/cdbe8c35adf224de282b47fde3fc297002441485))
- Forward A2A profile tasks through session authority ([`4e3a6bdb`](https://github.com/NousResearch/hermes-agent/commit/4e3a6bdbb732b543f5a3b80f35ea5abbd047b4e8))
- Project ACP cancellation and failed admissions accurately ([`03c0efc8`](https://github.com/NousResearch/hermes-agent/commit/03c0efc84dd66716f0a3c28b1dd94fa7abe63b31))
- Preserve API content identity history and terminal outcomes ([`f48d0956`](https://github.com/NousResearch/hermes-agent/commit/f48d09563b37297322a994b42c24f1359ddb7d8c))
- Fence legacy history claims and follow Bot reset targets ([`f88f8615`](https://github.com/NousResearch/hermes-agent/commit/f88f861567de81ec6828854bffcd0b290ca238c2))
- Adopt legacy local history through trusted session owner ([`cb748e7a`](https://github.com/NousResearch/hermes-agent/commit/cb748e7a193a70ead9e2e50d1b3cdc1163123f27))
- Record physical admission assignment before later compression ([`7b9dc454`](https://github.com/NousResearch/hermes-agent/commit/7b9dc45444f367f4cffcc43da994350dd0b8830b))
- Classify managed worker errors and verify compression restart ([`4bbbb90f`](https://github.com/NousResearch/hermes-agent/commit/4bbbb90ff2189b3d476182a210c25332d28c4cbf))
- Preserve worker compression admission identity ([`588c609c`](https://github.com/NousResearch/hermes-agent/commit/588c609c1542f447ccea9fadba536ffa62c63adf))
- Refresh worker row identities after compression ([`e19f05ff`](https://github.com/NousResearch/hermes-agent/commit/e19f05ffb9ca0aa59650047406b8a7b9893f2d5b))
- Preserve managed transcript lineage and settle after worker finish ([`ec0ebf80`](https://github.com/NousResearch/hermes-agent/commit/ec0ebf80639d58a3854bb087bb63e3db14163346))
- Cli): keep Termux startup hints out of gateway policy ([`31dc5078`](https://github.com/NousResearch/hermes-agent/commit/31dc5078fa4251d3eef039d2ed88914cb28d0a49))
- Service suffix follows main profile-root rule; drop in-process cli.main tests ([`0ea5a879`](https://github.com/NousResearch/hermes-agent/commit/0ea5a879b957efd52e27c366aca7659479ee20e8))
- Canonical delivery feeds attachment results to record_delivery; log failed turns ([`19ca1e85`](https://github.com/NousResearch/hermes-agent/commit/19ca1e85c805264bb662684c94a51a56179e67d7))
- Managed worker outbox directory is a portable spelling of the execution id ([`4a08032d`](https://github.com/NousResearch/hermes-agent/commit/4a08032d35685a3079a17d48db4112a086a9fb45))
- Owner verifies managed worker identity through interpreter trampolines ([`e8fbefb2`](https://github.com/NousResearch/hermes-agent/commit/e8fbefb21e37b5e98ddf73c062e4ffb9eb7a6520))
- Refuse /v1/runs on a natively owned session with a bounded 409 ([`809fec15`](https://github.com/NousResearch/hermes-agent/commit/809fec1567d3d5eb0fa83c32a81bda49aec93863))
- Commit execution results with terminal settlement ([`43348a03`](https://github.com/NousResearch/hermes-agent/commit/43348a03b7fd1463a5696567bcc1be59d939f1f0))
- Replay canonical relay envelopes until terminal reply acknowledgement ([`8dfd7add`](https://github.com/NousResearch/hermes-agent/commit/8dfd7addcd589a9d4bd876eb930ed6d6b6b0f2fc))
- Keep bot relay discovery and outbox in sender profile ([`437e3d85`](https://github.com/NousResearch/hermes-agent/commit/437e3d85d683871e498beb5da4017c2d176d934d))
- Isolate desktop bot relay sender and target profile routes ([`4f75b6aa`](https://github.com/NousResearch/hermes-agent/commit/4f75b6aae4c54849dd3d894c3b566fe2ab453d3c))
- Recover bot mailbox receipts and migrate queued inputs at owner startup ([`76a60441`](https://github.com/NousResearch/hermes-agent/commit/76a6044139c12e6a9ad71987b9e10117c246c186))
- Recover bot replies from exact committed admission results ([`a5ea5b21`](https://github.com/NousResearch/hermes-agent/commit/a5ea5b21a5252aae945eb901e2912c256d226674))
- Retain identified desktop bot deliveries until settlement ([`e1734e7d`](https://github.com/NousResearch/hermes-agent/commit/e1734e7de6165ca246a3218d1df0e64e7a7c2a8d))
- Pause managed admission followers when the owned worker is lost ([`e6077ecc`](https://github.com/NousResearch/hermes-agent/commit/e6077eccc19e5723ee33f883c14fcf101f4cd355))
- Prevent scoped secret rehydration in bypass workers ([`1ff3d877`](https://github.com/NousResearch/hermes-agent/commit/1ff3d87770d4f7e9e5201d21b655fcd7eaf20e1d))
- Preserve hosted API source during peer persistence ([`06a9516c`](https://github.com/NousResearch/hermes-agent/commit/06a9516c166d38bf908939641c8f519680590094))
- Return explicit unknown execution on API crash retries ([`f26c5c43`](https://github.com/NousResearch/hermes-agent/commit/f26c5c432123de5d7d7bde365d00b9416950c943))
- Recover committed API queue when its adapter reconnects ([`8ef9fbe8`](https://github.com/NousResearch/hermes-agent/commit/8ef9fbe8ef066b8405e62740ba803da6f0afb6fe))
- Resolve API prompts through canonical pending controls ([`f35358a6`](https://github.com/NousResearch/hermes-agent/commit/f35358a60f2240a58019c6c08b4b62eef9f5465b))
- Preserve pre-editor credential identity and native control coverage ([`8e3b3a0c`](https://github.com/NousResearch/hermes-agent/commit/8e3b3a0c67a97840d0ac70ef44ceffef4c82a129))
- Defer editor MCP schema changes until a new session ([`be748101`](https://github.com/NousResearch/hermes-agent/commit/be748101302dd40bd736292912510c97c9f79230))
- Bind imported history control in its receipt transaction ([`f40dc17b`](https://github.com/NousResearch/hermes-agent/commit/f40dc17bd6bdbbfe205de03d1d5cb5752a4150a6))
- Prevent import from reusing retired runtime identities ([`0a55e373`](https://github.com/NousResearch/hermes-agent/commit/0a55e37320050ad74dbf61921add9ce97b9e263d))
- Retire local physical lineage and cache affinity on deletion ([`a1d47945`](https://github.com/NousResearch/hermes-agent/commit/a1d47945ad82be38d901a1b31860324114098b95))
- Authorize cold history mutations without execution rebinding ([`529fb127`](https://github.com/NousResearch/hermes-agent/commit/529fb127b42ad217ad4a697eaff14c9304b8843b))
- Retire native session routes with deletion receipts ([`10b155bf`](https://github.com/NousResearch/hermes-agent/commit/10b155bfc084ea66c952611070985f3904a00679))
- Retire the legacy Bot mailbox producer and inference drain ([`ee09dad4`](https://github.com/NousResearch/hermes-agent/commit/ee09dad420a1fd49165ae89f6f5ea635c260b7ff))
- Retain immutable Bot relay reply receipts on exact retry ([`391517b7`](https://github.com/NousResearch/hermes-agent/commit/391517b74b3a129befaf54de8cc3bae21954798c))
- Refuse Bot delivery instead of starting a competing runtime ([`03f5d843`](https://github.com/NousResearch/hermes-agent/commit/03f5d8438efaff32e8775d8dcb795611fb3668d0))
- Migrate worker rotation automation inside owner publication ([`6fce9f77`](https://github.com/NousResearch/hermes-agent/commit/6fce9f77c6f5a84c93ecaca90f0497c5c444910b))
- Bind registered worker ledger before agent discovery ([`56586998`](https://github.com/NousResearch/hermes-agent/commit/56586998e278d3da1a284bfff70bf8a7bc1bed42))
- Release original worker turn lease after rotation ([`ce8b1171`](https://github.com/NousResearch/hermes-agent/commit/ce8b1171a6617fa162b0f0c51123d5a93c84dc95))
- Preserve REST mutation success response shape ([`c1882a69`](https://github.com/NousResearch/hermes-agent/commit/c1882a690ef7f913fe699c17c9f004c5823a9f61))
- Require exclusive maintenance for legacy bulk session writes ([`7323773c`](https://github.com/NousResearch/hermes-agent/commit/7323773c0a13dae5ba57328d3ca2aec10fb156d9))
- Fence persisted bot visibility without activating profiles ([`7fab399a`](https://github.com/NousResearch/hermes-agent/commit/7fab399a7cde05e69dc37d14bad56c361060495d))
- Retain dashboard mutation identity across uncertain replies ([`20dd6813`](https://github.com/NousResearch/hermes-agent/commit/20dd681307dc86ea835af2d7b204d454a756bb3f))
- Prepare desktop session edits from owner snapshots ([`c01a625c`](https://github.com/NousResearch/hermes-agent/commit/c01a625c6896bbf770a45508a0e505281f51ac68))
- Preserve import validation with real authority fixtures ([`83b87b01`](https://github.com/NousResearch/hermes-agent/commit/83b87b01a66f4f4f3293b885338192bb70ddbe01))
- Reject coerced session mutation counters and flags ([`927ca964`](https://github.com/NousResearch/hermes-agent/commit/927ca9647fa23491ed911d883c4450a16cd091b5))
- Anchor V4A editor approval paths to session cwd ([`490453f7`](https://github.com/NousResearch/hermes-agent/commit/490453f7b8448be4e7f9839b0f886872a3035919))
- List canonical ACP sessions under their frozen workspace ([`3c79ac4e`](https://github.com/NousResearch/hermes-agent/commit/3c79ac4e609f339b791f2bef9a7c217d5ca6b641))
- Resolve ACP edit previews against execution cwd ([`85ce5418`](https://github.com/NousResearch/hermes-agent/commit/85ce5418ec748a3325cbda63faacdece56134846))
- Project canonical editor diffs and frozen cwd to ACP ([`45aee742`](https://github.com/NousResearch/hermes-agent/commit/45aee7424c2dd934dba955589509b491177e995f))
- Release ACP transport without client MCP discovery ([`92d97ba8`](https://github.com/NousResearch/hermes-agent/commit/92d97ba8a4446bcebbf33a7199706fa673a2e6a1))
- Steer API runs through the current authority claim ([`a69efa90`](https://github.com/NousResearch/hermes-agent/commit/a69efa90ffe35e88ecbba80c0f28497fa4391018))
- Fence API run cancellation to its durable admission ([`f67f19fb`](https://github.com/NousResearch/hermes-agent/commit/f67f19fb272b3d8ce71645da321b73d5f6bde4ff))
- Replay durable API results across HTTP delivery modes ([`cbcad6fb`](https://github.com/NousResearch/hermes-agent/commit/cbcad6fb554f3cdab9ef9c630fc8f1a1cb3eb2aa))
- Retain recoverable worker title conflicts as durable outcomes ([`b7d14c75`](https://github.com/NousResearch/hermes-agent/commit/b7d14c758e04174e97db063db2ed5a32ff99d0e8))
- Preserve worker compression pre-publication flush annotations ([`dbe08962`](https://github.com/NousResearch/hermes-agent/commit/dbe089623f71a8ee783955e979910834d8de56d7))
- Retain worker compression cleanup authority after rotation ([`36d5b639`](https://github.com/NousResearch/hermes-agent/commit/36d5b63906fc0b853ec31db5d48db572c2dfc66b))
- Accept real worker compression handoff markers ([`e98a036a`](https://github.com/NousResearch/hermes-agent/commit/e98a036a09f3bbf113b211890ae7b5cdbea6a6bc))
- Preserve live delegate tasks during parent deletion ([`b0f792ac`](https://github.com/NousResearch/hermes-agent/commit/b0f792ac49a7e222b5490c6fb37c61613f049c24))
- Fence ACP controls and expose the read-only catalog ([`d304b025`](https://github.com/NousResearch/hermes-agent/commit/d304b025fca20bfdadae7bea9f13c8a93730dc74))
- Keep ACP session catalog read-only ([`b117521c`](https://github.com/NousResearch/hermes-agent/commit/b117521cbd6ff77c5278f8c7e343d55a0e40d035))
- Bind API storage to its selected runtime authority ([`c812ec71`](https://github.com/NousResearch/hermes-agent/commit/c812ec711b96a0851ecc44329c9399d62cdeabf9))
- Preserve webhook duplicate responses with real route admission fixtures ([`253f9b5e`](https://github.com/NousResearch/hermes-agent/commit/253f9b5e4c5f69460991c0ad7a6cbee403f739db))
- Fence webhook finalization by admitted session and generation ([`ca2211f0`](https://github.com/NousResearch/hermes-agent/commit/ca2211f0d845da6ec4e723a40293b21c46f52625))
- Durably admit authenticated Graph notifications before acknowledgement ([`e8e17493`](https://github.com/NousResearch/hermes-agent/commit/e8e17493bad09a1470107fa0655f47f6b332e478))
- Retain relay deliveries until canonical admission commits ([`e75bc52f`](https://github.com/NousResearch/hermes-agent/commit/e75bc52f50b4af92b0f7ac191cd7135276e264ab))
- Acknowledge webhooks only after durable native admission ([`9d9e4789`](https://github.com/NousResearch/hermes-agent/commit/9d9e4789dd561afe56f2096f06ed9cd9c5439697))
- Restore worker compressor guards before agent construction ([`84ccae21`](https://github.com/NousResearch/hermes-agent/commit/84ccae21417e629132f4a205bd98a588c43a1f41))
- Refuse unregistered child and cron persistence in compute workers ([`2ee0725c`](https://github.com/NousResearch/hermes-agent/commit/2ee0725c324f4549ba65d70209ff1a7cabeeb7a4))
- Keep registered compute imports out of owner delegation recovery ([`7eecdcf2`](https://github.com/NousResearch/hermes-agent/commit/7eecdcf213664c482d1687acfad44c744bd71542))
- Retain distinct repeated watch notices in local consumers ([`0c42619c`](https://github.com/NousResearch/hermes-agent/commit/0c42619c35d1853224c68dbbded3fd5a5dd3aba4))
- Refund legacy notification claims refused by admission ([`d5b332ed`](https://github.com/NousResearch/hermes-agent/commit/d5b332edfefa7ba9ae663f68ef03011ca1b38df2))
- Give watch events stable owner-bound automation identities ([`135730d1`](https://github.com/NousResearch/hermes-agent/commit/135730d1bc3dccefaf98464460b3a97e7d5332b4))
- Validate gateway launch options before first-run config checks ([`bec94623`](https://github.com/NousResearch/hermes-agent/commit/bec94623041eba5d9847a2a8c51657546645a682))
- Restore first-run guidance before gateway admission ([`351b8eb4`](https://github.com/NousResearch/hermes-agent/commit/351b8eb462f5a06de315716e8c677ae6a0e25169))
- Retain partial-update diagnostics at canonical CLI launch ([`a6376f0e`](https://github.com/NousResearch/hermes-agent/commit/a6376f0eebde0aea12e566a969ff35501478e285))
- Preserve runtime authority across updater snapshot restores ([`8a8a1372`](https://github.com/NousResearch/hermes-agent/commit/8a8a13723b82ee361a13eac045277e72abfa9583))
- Refuse unowned automation without spending sibling retry budgets ([`d6635ffe`](https://github.com/NousResearch/hermes-agent/commit/d6635ffe03bc1eb92dbaa56155a5b49c23f271c3))
- Retain completion batch siblings across durable handoff retries ([`0307a33f`](https://github.com/NousResearch/hermes-agent/commit/0307a33f82fce50113796498f0a0938107164240))
- Keep named launch keys and endpoints separate from profile defaults ([`219ed58f`](https://github.com/NousResearch/hermes-agent/commit/219ed58f9c19483792ec866eca8d0ad3bc34966b))
- Redact and recover credential-bearing terminal projections ([`478d9b73`](https://github.com/NousResearch/hermes-agent/commit/478d9b7379dcc668863adbf11ec2362598b0bb07))
- Resolve configured local routes from frozen provider policy ([`e02cc03a`](https://github.com/NousResearch/hermes-agent/commit/e02cc03a337f3594aa9976553cf711b2de5c720a))
- Retain startup consent on top-level one-shot launches ([`ecb0afa6`](https://github.com/NousResearch/hermes-agent/commit/ecb0afa631b23a44701b7b85b7e39f41e5cc96ae))
- Enforce startup cost and data consent before gateway admission ([`4dcf234d`](https://github.com/NousResearch/hermes-agent/commit/4dcf234d0d313283bc8ede7ba4e2384d3d6b11f8))
- Retry local creation without binding replacement credentials ([`12899b65`](https://github.com/NousResearch/hermes-agent/commit/12899b65d51f1ceb4aba7dc3f2695ff24f737a3b))
- Recover frozen local config credentials from their profile source ([`f1da7833`](https://github.com/NousResearch/hermes-agent/commit/f1da7833aad10bbbd0a8a3637b60dd5b880fa4f5))
- Keep configured credentials out of frozen policy receipts ([`2f6fb46b`](https://github.com/NousResearch/hermes-agent/commit/2f6fb46bf3016dea2a8bfeb9ee2387791120d748))
- Keep explicit local launch keys in authority memory only ([`32d512fb`](https://github.com/NousResearch/hermes-agent/commit/32d512fb9e3896b82ae80e11bd7e2980d448256d))
- Freeze local CLI reasoning and execution launch options ([`d0954a9e`](https://github.com/NousResearch/hermes-agent/commit/d0954a9ede1d903b860cfc2cef954c0a3f0ffe45))
- Preflight canonical epoch before restoring profile snapshot files ([`610a97ea`](https://github.com/NousResearch/hermes-agent/commit/610a97ea48df71f085c7634f6dbd296cc131485f))
- Retain explicit verified deletion after read-only export migration ([`23456236`](https://github.com/NousResearch/hermes-agent/commit/23456236c8f1232d91dbecc8efdcac66e9b8cf5d))
- Recover fresh and historical session row layouts by identity ([`9c681b2d`](https://github.com/NousResearch/hermes-agent/commit/9c681b2d67025d406ef16158d5ca183d80360072))
- Explain safe transcript salvage when canonical restore is refused ([`c559236f`](https://github.com/NousResearch/hermes-agent/commit/c559236f68248ee6722f9c34ab31d31e84e11657))
- Preserve structured Unicode through worker payload and receipt encoding ([`f56e660e`](https://github.com/NousResearch/hermes-agent/commit/f56e660e018493c530f5e5e6bb94717ff3cf3364))
- Pause workers on outbox I/O failure and preserve local lease waits ([`23b54921`](https://github.com/NousResearch/hermes-agent/commit/23b549216de9d16dd0832534d801cb41cc3f33d6))
- Freeze retry journals and retain exclusive worker outbox ownership ([`a8c163af`](https://github.com/NousResearch/hermes-agent/commit/a8c163afbcf5a2f3dafb7ac567864ecb28ff7776))
- Attenuate worker reconnect tickets to execution operations ([`e7cd5f93`](https://github.com/NousResearch/hermes-agent/commit/e7cd5f9380b15f7cc31dda55f8520946618e15ad))
- Install relay trust only after provenance verification ([`90f107f2`](https://github.com/NousResearch/hermes-agent/commit/90f107f22f4c8f97c56443d21445444bd7b16794))
- Keep relay reader live during canonical busy delivery ([`4485fb73`](https://github.com/NousResearch/hermes-agent/commit/4485fb73d5a32d08a3132877789b9128728a0de7))
- Admit relay inputs with verified connector provenance ([`8fe258cc`](https://github.com/NousResearch/hermes-agent/commit/8fe258cc116ba5abac94a962ef5050c35962a437))
- Keep retained process lineage lookup read-only ([`bf9cf5c2`](https://github.com/NousResearch/hermes-agent/commit/bf9cf5c217ff0ce68943511cdb795a6e808a220e))
- Retain corruption restore for non-runtime SQLite stores ([`ad354c28`](https://github.com/NousResearch/hermes-agent/commit/ad354c28ab6f87f8ec1a66ca42fa947638b4fce7))
- Preflight all restore destinations and preserve import warning parity ([`f1b4f6e3`](https://github.com/NousResearch/hermes-agent/commit/f1b4f6e33badcacd30e40b688310d1cb677aea2a))
- Preserve runtime epoch floors across older backup restores ([`7fd8082e`](https://github.com/NousResearch/hermes-agent/commit/7fd8082e40d664ef325254996fd4211017171121))
- Fence canonical recovery output and report excluded runtime state ([`43f62e7a`](https://github.com/NousResearch/hermes-agent/commit/43f62e7af9f2520da96378db98218ac9d18673f0))
- Exclude restore and import with canonical runtime ownership ([`4dce8f7e`](https://github.com/NousResearch/hermes-agent/commit/4dce8f7ed24c689935b190a6cf27f52707996239))
- Keep dashboard session browsing read-only ([`af4599c1`](https://github.com/NousResearch/hermes-agent/commit/af4599c10738169e557dcd29f4281f893b196352))
- Preserve loop liveness witnesses for long gateway homes ([`ae92d198`](https://github.com/NousResearch/hermes-agent/commit/ae92d198b7cc074ad950e799ab073eaa74104a43))
- Retain newer composer scope across delayed queue acknowledgements ([`4b39a5fd`](https://github.com/NousResearch/hermes-agent/commit/4b39a5fd64d32436637469ed43f5c4de8ac12a12))
- Keep native steer fallback on canonical queue admission ([`35255f5c`](https://github.com/NousResearch/hermes-agent/commit/35255f5c13435741ac8a8f61b6c99ca0fb172055))
- Admit native busy slash kickoffs through canonical submit ([`6bef46ea`](https://github.com/NousResearch/hermes-agent/commit/6bef46ea53dc15a18ca9104706fe42a596749ca1))
- Reconcile queue input IDs with canonical admission identities ([`a877aa6e`](https://github.com/NousResearch/hermes-agent/commit/a877aa6e5a11edf39297c376505eaba2556e6306))
- Preserve active turn ownership during canonical queue admission ([`a131bf4a`](https://github.com/NousResearch/hermes-agent/commit/a131bf4aca37820459c4493f4fe51a8a5757379f))
- Route native composer Queue through existing admission submit ([`4ce95d5f`](https://github.com/NousResearch/hermes-agent/commit/4ce95d5f2eaa0637b6a1607fe1cce2599c3b9fe2))
- Authenticate native desktop file downloads per attempt ([`28741ef8`](https://github.com/NousResearch/hermes-agent/commit/28741ef8809e63d6ce0b5a066cef0797ba612656))
- Scope stable execution identity to canonical local sources ([`c3aa2e5c`](https://github.com/NousResearch/hermes-agent/commit/c3aa2e5c442486298637459b1f02f8ce161e1d29))
- Reject foreign local receipts inside lineage publication ([`1ffba2ac`](https://github.com/NousResearch/hermes-agent/commit/1ffba2ac1fa0a93c07308b94b7a84263370abaea))
- Retain local admission ownership across transcript rotation ([`42ee0d34`](https://github.com/NousResearch/hermes-agent/commit/42ee0d341a7745c0ca21e196946f4cadb0a914ef))
- Publish shared queue changes to attached viewers ([`fb02973f`](https://github.com/NousResearch/hermes-agent/commit/fb02973f611c3f840db12ac8e60a5d6fe7ca9d52))
- Retain public queued input identity in shared snapshots ([`37332c17`](https://github.com/NousResearch/hermes-agent/commit/37332c17b11318483d948035627387c85c2191a6))
- Expose profile-bound setup readiness on canonical sessions ([`971c3c95`](https://github.com/NousResearch/hermes-agent/commit/971c3c95515e7b27555d962c8b6c96ce14c08cc4))
- Normalize canonical prompts before named desktop listeners ([`9a2a30a6`](https://github.com/NousResearch/hermes-agent/commit/9a2a30a62d63164ab908842492cd1993e6c1312b))
- Fence canonical desktop RPC metadata edits with revision receipts ([`ce3037dc`](https://github.com/NousResearch/hermes-agent/commit/ce3037dc1d407bb6205de93211248d6dc2d081c4))
- Bind desktop create retries to the explicit draft intent ([`c69bb4db`](https://github.com/NousResearch/hermes-agent/commit/c69bb4db31c52554894ae5cc0ee1b5e323468881))
- Retain desktop update and profile gates before canonical ensure ([`a7821f63`](https://github.com/NousResearch/hermes-agent/commit/a7821f635e28d99d0db22903ab1355655e0ea434))
- Adapt desktop native sessions to canonical identities and controls ([`d1546a54`](https://github.com/NousResearch/hermes-agent/commit/d1546a54c43b850f3afeef56479550e477145e8f))
- Authenticate native desktop HTTP with fresh private tickets ([`dd8b9f38`](https://github.com/NousResearch/hermes-agent/commit/dd8b9f38344d27dc24058fa71866defdd598f33f))
- Preserve native HTTP profile selectors across JSON contracts ([`eaad737e`](https://github.com/NousResearch/hermes-agent/commit/eaad737e88a3f5350deb1c992a2d2baf43bbcb66))
- Retain source-free authority control projections ([`3546eb41`](https://github.com/NousResearch/hermes-agent/commit/3546eb41a933c2aaa93c54b744bd88a34c6cb390))
- Preflight durable local policy before claiming queued work ([`d98dd743`](https://github.com/NousResearch/hermes-agent/commit/d98dd7435ad12f3693f9247e874fc517b31f0214))
- Publish canonical Ink readiness only after discovery ([`653889ef`](https://github.com/NousResearch/hermes-agent/commit/653889ef7f719d7bad0602d1dc6083fd676e016c))
- Hydrate canonical Ink history independently of live events ([`971ff7f3`](https://github.com/NousResearch/hermes-agent/commit/971ff7f362b6eaacc72006bea8da4b6a6aa263f2))
- Carry native ticket through WebSocket subprotocol negotiation ([`7fe8c72c`](https://github.com/NousResearch/hermes-agent/commit/7fe8c72c78e42e0dc65ec893e249389ebaee28f5))
- Correlate canonical Ink receipts with prepared input identities ([`3dfb7d50`](https://github.com/NousResearch/hermes-agent/commit/3dfb7d50a5c8050f8e584942156d787a94ca2d58))
- Scope one-shot output to its admitted turn and retain direct query aliases ([`17155e73`](https://github.com/NousResearch/hermes-agent/commit/17155e733138b29c8067eb4370838c9e59e6e016))
- Preserve gateway toolset policy and reject resume source overrides ([`6feaafcc`](https://github.com/NousResearch/hermes-agent/commit/6feaafcc2960930fb4b2d5eebd43e9dab4a6d3fd))
- Reject fresh session registration while gateway drains ([`a67637cc`](https://github.com/NousResearch/hermes-agent/commit/a67637cc973ade7d423cf9551019323d5c207641))
- Separate clarification permission from execution control ([`66bc2861`](https://github.com/NousResearch/hermes-agent/commit/66bc2861eaeda0f78e29ccfa0804fe60b90250b4))
- Stamp authenticated legacy clients before shared session admission ([`4be08ae5`](https://github.com/NousResearch/hermes-agent/commit/4be08ae58a16611a6384ce426e9e6d5968849b28))
- Preserve scoped bootstrap grants in shared session connections ([`b699e0e9`](https://github.com/NousResearch/hermes-agent/commit/b699e0e95baee7200fd698a5d6b8230c4ef12f2a))
- Keep forged local profiles out of messaging authorization fallback ([`d379d6cc`](https://github.com/NousResearch/hermes-agent/commit/d379d6cc1d08aabd78a8404c939fad75fb9dcc8a))
- Retain queued inputs when shutdown crosses authorization awaits ([`733dde1c`](https://github.com/NousResearch/hermes-agent/commit/733dde1cc9a8969b0263fac7f84d57d1d1587e0f))
- Reload transport role policy after Discord membership awaits ([`43ae9e9a`](https://github.com/NousResearch/hermes-agent/commit/43ae9e9a23129f6b5bdac60c9539fd0db5bc3eba))
- Retain native trust fields for validation when freezing ingress ([`53aadf44`](https://github.com/NousResearch/hermes-agent/commit/53aadf44895e10151f8005a14a2d52c41d2edb96))
- Fence native authorization yields against identity and FIFO changes ([`6ef8b38d`](https://github.com/NousResearch/hermes-agent/commit/6ef8b38df56ced2387907f836c07fc02f2daaf1d))
- Report malformed installed plists without leaking parser failures ([`1b55d964`](https://github.com/NousResearch/hermes-agent/commit/1b55d9646aa7e544a2b4ce75897d79c7f5b99d8c))
- Resolve installed names from the requested profile root ([`258049b3`](https://github.com/NousResearch/hermes-agent/commit/258049b38f80a2dcee4baf47386c23f860e4bd08))
- Reject unbound launch wrappers and nonregular service definitions ([`1dd6268b`](https://github.com/NousResearch/hermes-agent/commit/1dd6268bcd5354632a789c902f49e7a3988e63e4))
- Preserve task XML encoding and document service binding refusals ([`7b904f95`](https://github.com/NousResearch/hermes-agent/commit/7b904f95bf3a91f5ef87f291da9cf4cad18593ef))
- Bind loaded launchd jobs and scheduled task XML before start ([`1ce0d11e`](https://github.com/NousResearch/hermes-agent/commit/1ce0d11ef3fe0382061c9d672d2537a841449ef5))
- Verify effective systemd profile and account before ensure starts ([`efadac8d`](https://github.com/NousResearch/hermes-agent/commit/efadac8de2e99aee61dbb523786bbcc45302a123))
- Stop bootstrap background workers after listener failure ([`6716636f`](https://github.com/NousResearch/hermes-agent/commit/6716636ffc967db0e2103280b0ac967fb54b2990))
- Withdraw gateway readiness when the session listener exits ([`57ec2718`](https://github.com/NousResearch/hermes-agent/commit/57ec27186f84fe508d247cfbf72b68b1d5419ae8))
- Keep readiness and cleanup fenced across runtime shutdown ([`82ff0592`](https://github.com/NousResearch/hermes-agent/commit/82ff0592d0784533e1b7f0a7b7b1ce90e8ff9aa9))
- Retain browser authentication and withdraw native ingress on drain ([`5da456be`](https://github.com/NousResearch/hermes-agent/commit/5da456be802528872bacc208f4508ea26bf3b85f))
- Export sessions without mutating canonical storage ([`ae82c1a2`](https://github.com/NousResearch/hermes-agent/commit/ae82c1a2d0cca85d17d93a26ee317757bfc38ca7))
- Keep native segment sentinels out of canonical text deltas ([`caae4af5`](https://github.com/NousResearch/hermes-agent/commit/caae4af5717dc8bfcfbba107acbf774b97574286))
- Keep launcher YOLO out of shared gateway policy ([`628d702c`](https://github.com/NousResearch/hermes-agent/commit/628d702c0e503cf116eacc4b7521d88db2706ac2))
- Align profile reservations with bootstrap permissions ([`87ba34fd`](https://github.com/NousResearch/hermes-agent/commit/87ba34fdf90f2ea7ff80e784a09f0e6dacf84a52))
- Reject FIFO gateway metadata without blocking discovery ([`5b0f0276`](https://github.com/NousResearch/hermes-agent/commit/5b0f0276eb21c388793aee46fd881f7bd97c1971))
- Bind fresh ordinary admissions while preserving exact legacy retries ([`e5f39ada`](https://github.com/NousResearch/hermes-agent/commit/e5f39ada9ff21601c3d9ac73a26b1d9e78c99bba))
- Preserve ordinary native retry fingerprints through callback migration ([`6083e9ed`](https://github.com/NousResearch/hermes-agent/commit/6083e9ed31a15372cde35a052be8407b398e2ddc))
- Refuse unrouted profile claims in native callback snapshots ([`99c923bc`](https://github.com/NousResearch/hermes-agent/commit/99c923bc8b6b6c9123781daba4d2832575466803))
- Preserve authority ownership through scoped adapter callbacks ([`42ce26af`](https://github.com/NousResearch/hermes-agent/commit/42ce26af2e482bcd63d04651bae0928fff184fac))
- Retain trusted ordinary native callback provenance ([`1d4dab77`](https://github.com/NousResearch/hermes-agent/commit/1d4dab77c682f4a0893174fe9eb1e52c5ed7f379))
- Omit retired approvals from gateway attach snapshots ([`e7ee1d67`](https://github.com/NousResearch/hermes-agent/commit/e7ee1d6747960aeb8e522d0fec8a69d0c2b63cd4))
- Deny controls after gateway execution settlement ([`a064afdd`](https://github.com/NousResearch/hermes-agent/commit/a064afdd5ff02aac033667a1441103ce15214be7))
- Reject approval publication from retired gateway workers ([`295bc0f5`](https://github.com/NousResearch/hermes-agent/commit/295bc0f57d9cdd9161e1bd7588943ccb83d3f992))
- Retain legacy session writers during reader migration ([`82dfb85d`](https://github.com/NousResearch/hermes-agent/commit/82dfb85d6789ab7a4a53f90c1447652db39b8ed2))
- Keep session lists and statistics read-only ([`1a1ad945`](https://github.com/NousResearch/hermes-agent/commit/1a1ad945981c7ce1c2b56333c0f2cf1a113efb64))
- Resolve terminal breadcrumbs without opening a session writer ([`73238088`](https://github.com/NousResearch/hermes-agent/commit/73238088e6cc3221dea73317ef0a9548f7d6a3f0))
- Share read-only insights reporting with interactive CLI ([`9cd5d6dd`](https://github.com/NousResearch/hermes-agent/commit/9cd5d6dd2108bcb14e749d1fe2c22ad3b81a17ca))
- Generate CLI insights without initializing session storage ([`680937a6`](https://github.com/NousResearch/hermes-agent/commit/680937a6e768be7622169308af1970b39442b35a))
- Keep resume lookup and TUI exit metadata read-only ([`617be2da`](https://github.com/NousResearch/hermes-agent/commit/617be2dabc9cbff4ad4f96711a1f71f0e50f5459))
- Keep status session inspection read-only ([`ca77b197`](https://github.com/NousResearch/hermes-agent/commit/ca77b19711b7723d1b1ef4440d455f1e208aa5cb))
- Bind shared authority when starting gateway API ([`11958d46`](https://github.com/NousResearch/hermes-agent/commit/11958d461893961b21e27bd36c5ddf2785b9acd2))
- Refuse redirected native media publication ([`e924cf98`](https://github.com/NousResearch/hermes-agent/commit/e924cf98a39a2d8b53fd133caaa4998e84a43b54))
- Preserve legacy native text admission retries ([`ca226b68`](https://github.com/NousResearch/hermes-agent/commit/ca226b68230f2cdba430ddd4bf7fe591ba67c2d5))
- Rotate authority replay epoch on concurrent eviction ([`a9de35d2`](https://github.com/NousResearch/hermes-agent/commit/a9de35d29ae81ba999ef89bcf6048f834057a4be))
- Isolate authority execution from slow observers ([`aab36dc6`](https://github.com/NousResearch/hermes-agent/commit/aab36dc64cc92ba2850c0f5adf91f88a449dfc18))
- Keep authority subscriptions stable across repeated resume ([`8c889765`](https://github.com/NousResearch/hermes-agent/commit/8c88976587e4239fd74126b150c60880589adcc1))
- Admit busy messaging text into the canonical durable FIFO ([`eae6194b`](https://github.com/NousResearch/hermes-agent/commit/eae6194b0aff9416849fac5d83eb4e8952692588))
- Preserve surrogate request identity while sanitizing worker text ([`bb90f4b8`](https://github.com/NousResearch/hermes-agent/commit/bb90f4b8972923431d270f94e7357203da199bf1))
- Replay committed worker receipts after terminal settlement ([`203b3f4f`](https://github.com/NousResearch/hermes-agent/commit/203b3f4f6d51b7d46fa5684daef2a9980bd00486))
- Retain transcript closure guard for worker appends ([`71f835b6`](https://github.com/NousResearch/hermes-agent/commit/71f835b60e937db07e436c96ef875fb3e657e1bf))
- Revoke workers when resolving unknown admissions ([`d7089f75`](https://github.com/NousResearch/hermes-agent/commit/d7089f7534b47bbee400d008420c7a230931cef4))
- Align runtime mutation receipts with canonical wire contract ([`e6b1dc06`](https://github.com/NousResearch/hermes-agent/commit/e6b1dc06d616ed10437bb7c807655ed919c030eb))
- Fence ancestor revisions when runtime titles transfer ([`62aef795`](https://github.com/NousResearch/hermes-agent/commit/62aef7959e8dbb7bf2d66f5dbc7eea963683767f))
- Fence worker persistence when its admission settles ([`e3bfe640`](https://github.com/NousResearch/hermes-agent/commit/e3bfe6408d2147aa013b9b356e8526fd2e28a2c7))
- Transfer admitted claims atomically during worker adoption ([`341aed41`](https://github.com/NousResearch/hermes-agent/commit/341aed4184ee327bf22ead8eaafb15012a6bde2f))
- Preserve legacy execution generations through admission import ([`c45d2e5c`](https://github.com/NousResearch/hermes-agent/commit/c45d2e5c70ff01ec47a975e9f2c0c0e5970ce380))
- Restore Ink pending inputs after cold durable resume ([`34fb13a1`](https://github.com/NousResearch/hermes-agent/commit/34fb13a1a00b0ff6c9a025b004a763bcf4fd5f5b))
- Preserve Ink slash attachments and reconcile stale images ([`dbc7ffa8`](https://github.com/NousResearch/hermes-agent/commit/dbc7ffa80c3a0e6c1e58f66f39346c0fe4389940))
- Reconcile Ink replay receipts with current execution ([`8a589010`](https://github.com/NousResearch/hermes-agent/commit/8a589010ebeaf39a0987367b08a7187401621b43))
- Settle desktop receipts on recovered runtime and tidy composed probes ([`1ad31afa`](https://github.com/NousResearch/hermes-agent/commit/1ad31afa193a2750dba098246c7566390833f466))
- Retire desktop Stop for newer owner executions and fence old output ([`926d097d`](https://github.com/NousResearch/hermes-agent/commit/926d097dee9f1175e81b5e4623a168b953d45a57))
- Settle terminal desktop admission receipts without stopping live turns ([`d89a90e1`](https://github.com/NousResearch/hermes-agent/commit/d89a90e11848dddb1eb9b0a6f980b378ba9537f2))
- Fence same-call desktop legacy admission retries ([`41b017f1`](https://github.com/NousResearch/hermes-agent/commit/41b017f1e3cc565fdd4dc2e6d733be1056c0233b))
- Never resend ambiguous Ink legacy admissions ([`5681c7d4`](https://github.com/NousResearch/hermes-agent/commit/5681c7d40699b5d111f1fb44b3277c164cea4a92))
- Emit structured CLI parse failures only once ([`1d4d2b2d`](https://github.com/NousResearch/hermes-agent/commit/1d4d2b2d09faf2e18acd92cbffeb479ab74bfcc1))
- Bound gateway probes and structure ensure parser errors ([`ad1099d6`](https://github.com/NousResearch/hermes-agent/commit/ad1099d6c531333addcb93d736457b1a4f0bf29d))
- Discover the gateway private fallback socket directory ([`c804d40b`](https://github.com/NousResearch/hermes-agent/commit/c804d40b0280c87f65ae91bd64c6c529fd80ba0f))
- Retain runtime locks while scheduler threads survive cleanup ([`954d5e99`](https://github.com/NousResearch/hermes-agent/commit/954d5e9919ca5b85d8c96eee20fa2772facb35bf))
- Retain gateway ownership through exit-state persistence ([`d465ad0d`](https://github.com/NousResearch/hermes-agent/commit/d465ad0dbf633dca6beab00c8b912f2911cc545f))
- Reserve all gateway profiles before writable initialization ([`c941b0e6`](https://github.com/NousResearch/hermes-agent/commit/c941b0e674c3b6586cc86cf3349df291014454c6))
- Keep standalone session search read-only ([`0e7c0588`](https://github.com/NousResearch/hermes-agent/commit/0e7c058897dd0cc5166fcc1293cc75fb893ee33a))

## 📚 Documentation

- Agent): use the released model name Nemotron 3.5 Super VL ([`79651b71`](https://github.com/NousResearch/hermes-agent/commit/79651b71bd56efd76d06f3de1df64dde09b58ff3)) — @j-nolan
- Env): add NVIDIA NIM to .env example ([`3dd96101`](https://github.com/NousResearch/hermes-agent/commit/3dd961013c57398b4ba42d16f5bcc3772baa0701)) — @elisam0
- Providers): use a non-cloud example key for local NIM ([`da463310`](https://github.com/NousResearch/hermes-agent/commit/da463310b1e31d8690b1aac6d3701798bb36a06e)) — @rroverin
- Rollback section the downgrade refusals link to; regenerate the command-parity table ([`97ec76fa`](https://github.com/NousResearch/hermes-agent/commit/97ec76fa7eaf5066cb334b98448d1b71118df4e5))
- Gateway): describe the messaging pause notice and /reset escape ([`6cdf7815`](https://github.com/NousResearch/hermes-agent/commit/6cdf7815defdb94f642a0a2d2d01a0e33558bee9))
- Explain ambiguous legacy A2A recovery boundary ([`22a8154f`](https://github.com/NousResearch/hermes-agent/commit/22a8154ff371d9b904bd2017d9d71a5e878ae603))
- Cli): classic chat resolves --resume <title> and -c <title> --create-if-missing at the gateway; bare -c stays refused ([`c6c4161c`](https://github.com/NousResearch/hermes-agent/commit/c6c4161cbf8181b6dd8c357a09ef2baece3c736d))
- Gateway): document prompt.submit attachments and the ACP media path ([`e3d60eed`](https://github.com/NousResearch/hermes-agent/commit/e3d60eed6528d1aee1b0add480311257df37eb5e))
- Desktop): gateway-owned queue and the Discard control for a turn lost during restart ([`101be7d7`](https://github.com/NousResearch/hermes-agent/commit/101be7d78ebb4f819347d2a335277ac6fe6204a6))
- Explicit /model rewrites the system prompt Model line once (single cache-prefix miss) ([`ef813b35`](https://github.com/NousResearch/hermes-agent/commit/ef813b356786b63685a527a20858bc814a6fe734))
- /new rebinds only the invoking view of a shared session ([`6be1de8d`](https://github.com/NousResearch/hermes-agent/commit/6be1de8d10462ac38e1194a9c6e88a57b0f679fe))
- API runs and X-Hermes-Session-Id cannot bind a session owned by another surface (409 permission_denied) ([`789caca2`](https://github.com/NousResearch/hermes-agent/commit/789caca24f1f8e63aae670bb5ad1a47dff03964d))
- Dashboard session delete fences, tombstones, and offline-only bulk maintenance ([`46c50515`](https://github.com/NousResearch/hermes-agent/commit/46c50515dcd0ad596dbd4fc7d46b45bb19fb8944))
- Explain canonical editor MCP ownership and cold reattachment ([`fcc978bd`](https://github.com/NousResearch/hermes-agent/commit/fcc978bd3c9b0d744695bf5b9dc42cbaf50034bb))
- Distinguish canonical Bot admission from retired UI ownership ([`2d22a7cd`](https://github.com/NousResearch/hermes-agent/commit/2d22a7cd441e945681b83a1d3bf1f69947b014f0))
- Record worker lifecycle hooks proofs and remaining integration gates ([`3dae322e`](https://github.com/NousResearch/hermes-agent/commit/3dae322e642d144f00107aa732dd2ad578942192))
- Record isolated worker inference proof and remaining migration gates ([`b762d80c`](https://github.com/NousResearch/hermes-agent/commit/b762d80c95bc64f514ddf2f1a6c18e0edfd43715))
- Distinguish admission recovery from producer replay proof ([`bc3bcaff`](https://github.com/NousResearch/hermes-agent/commit/bc3bcaff41c4789211a907927ad9bead322a9277))
- Delimit verified worker substrate coverage and rollout blockers ([`f22754e8`](https://github.com/NousResearch/hermes-agent/commit/f22754e86cf9fdad840bb16697166982e76e8e89))
- Inventory exact worker persistence consumers before substrate ([`0e30eb6a`](https://github.com/NousResearch/hermes-agent/commit/0e30eb6af5c43ce7fcec11299e3fa23fff3cba2f))
- Define stable local lineage and paused fork recovery ([`757f19f4`](https://github.com/NousResearch/hermes-agent/commit/757f19f4b44ec23c201af59df7bb9b3ac66ae779))
- Define native HTTP trust and primary-profile scope ([`a8a6b02c`](https://github.com/NousResearch/hermes-agent/commit/a8a6b02c920fe97a588ed4396e2bb278dc97ca3a))
- Document local crash recovery contract and replay limits ([`375fce55`](https://github.com/NousResearch/hermes-agent/commit/375fce5548f41d22606fa0461c488ba3249744f3))
- Describe settled Ink recovery and native lifecycle probes ([`2dc2e740`](https://github.com/NousResearch/hermes-agent/commit/2dc2e74069c474d23833eeefbccf4956a97d94cf))
- Define Desktop gateway ownership and private ticket boundary ([`f0ff6c57`](https://github.com/NousResearch/hermes-agent/commit/f0ff6c5701098ea4d26eb06647363504e4824349))
- Distinguish native policy proof from remaining classic CLI parity ([`256cab2b`](https://github.com/NousResearch/hermes-agent/commit/256cab2b78ef549183636650f07586f0741b74c9))
- Publish supported local creation policy and recovery boundary ([`0400a5ef`](https://github.com/NousResearch/hermes-agent/commit/0400a5efc141827bdb341df91d960a88dccfeb2f))
- Explain gateway ensure readiness and service consent ([`a272e8df`](https://github.com/NousResearch/hermes-agent/commit/a272e8df90f9013386f6bacdccf0e355885a098e))

## 🧪 Tests

- Relay): the OpenAI-stream e2e no longer self-deadlocks when the stream is buffered ([`6e84ce66`](https://github.com/NousResearch/hermes-agent/commit/6e84ce66fb577ceeaf43a1e2da773e70609953d2))
- Gateway): the authority stream probe waits for the idle session.info ([`56b9691c`](https://github.com/NousResearch/hermes-agent/commit/56b9691cc95fc209612a63415257d7f62d31c583))
- Gateway): align SSE prepare cleanup with retained streams ([`c0230ca5`](https://github.com/NousResearch/hermes-agent/commit/c0230ca59555af3be8471cd1cb42a83f5191799d)) — @Lokee86
- Desktop-core): capture the Electron PID before quit for the orphan census message ([`2cf48e0c`](https://github.com/NousResearch/hermes-agent/commit/2cf48e0c82122bd23166f5732c8987f82463bb09))
- Gateway): the unserve runner stub carries the reservation our release step shrinks ([`5fdb477b`](https://github.com/NousResearch/hermes-agent/commit/5fdb477bd9686eeb369c49ced3b57db6bd136812))
- Cold-profile archive/unarchive through one multiplexing gateway is an acceptance case ([`dfbb9142`](https://github.com/NousResearch/hermes-agent/commit/dfbb914244812dc2e22894efc45f29e5b958856a))
- Seed-compensation fake uses discard_unadmitted_session; hosted auth probe waits are load-tolerant ([`cc1eab12`](https://github.com/NousResearch/hermes-agent/commit/cc1eab12c0f784e8c501c6209e07e1513bf57abd))
- Gateway): managed-worker first-inference wait tolerates a saturated 40-worker runner ([`57c95771`](https://github.com/NousResearch/hermes-agent/commit/57c957713d676ac562ac49bd595fe88371644e33))
- Tui): slash-attachment composer assertions wait for the journaled clear ([`d5950d72`](https://github.com/NousResearch/hermes-agent/commit/d5950d725a86ce582ece85cafe663c396b8e5235))
- Patch origin API probe in banner ancestry fixtures ([`cdf4eda7`](https://github.com/NousResearch/hermes-agent/commit/cdf4eda7082644712d9f58df8b46e333758032f4))
- Migrate authored bot fixtures to canonical transport ([`37d7834e`](https://github.com/NousResearch/hermes-agent/commit/37d7834e16e21199df7801271db13eb311bda0b7))
- Verify webhook receipt observation and composed HTTP startup ([`a5a0da66`](https://github.com/NousResearch/hermes-agent/commit/a5a0da667c7d62390df84f3a8f842850a6e23255))
- Exercise authenticated hosted room Stop and approval ([`7a6b2961`](https://github.com/NousResearch/hermes-agent/commit/7a6b2961a4ca6ecdfd2668f1007c456d49b023fd))
- Use system Python for the stdlib-only ticket bridge ([`3394ef4c`](https://github.com/NousResearch/hermes-agent/commit/3394ef4cbb1cb832f986bc301b006c562570d3b4))
- Preserve Kanban policy and cron cleanup owner invariants ([`e1b6f10b`](https://github.com/NousResearch/hermes-agent/commit/e1b6f10ba19abb8d016b7241f03aa5ab6bd83d74))
- Align Kanban scope fixtures with owner worker client ([`ea2342d4`](https://github.com/NousResearch/hermes-agent/commit/ea2342d41c26f8f117d50740dd0eb6b2fa7704d1))
- Observe relay completion and cron guard at owner seams ([`625bb379`](https://github.com/NousResearch/hermes-agent/commit/625bb379b7ebe46ca39e7662a41075956913a0fa))
- Drain durable cron failure deliveries before asserting sends ([`9b753d3b`](https://github.com/NousResearch/hermes-agent/commit/9b753d3b3fe7018e504825b48466845243fa53f6))
- Migrate cron guards and context fixtures through owner execution ([`7080a488`](https://github.com/NousResearch/hermes-agent/commit/7080a488630dab0c70ce4084dd94c437f95f1d5a))
- Restore cron owner configuration and session invariants ([`c08349cf`](https://github.com/NousResearch/hermes-agent/commit/c08349cffd1b122b7b4db0852db1d9f06524a6c3))
- Exercise cron provider and workdir paths through owner ([`9fde59d3`](https://github.com/NousResearch/hermes-agent/commit/9fde59d3d103b9c294e6fd09e54f1581ddf99487))
- Migrate cron lifecycle invariants to canonical owner execution ([`e4a2d476`](https://github.com/NousResearch/hermes-agent/commit/e4a2d476cb49ab5da1d3d62e1a9fa4efac587327))
- Retain queued input identity after session list loading ([`2671381d`](https://github.com/NousResearch/hermes-agent/commit/2671381d20afcd859287e6e5a9b10dacc68e006f))
- Exercise native Electron gateway HTTP and WebSocket tickets ([`45c6c8de`](https://github.com/NousResearch/hermes-agent/commit/45c6c8de542e749337c91a80194cc991d13db0f7))
- Verify busy acknowledgements and document Ink recovery limits ([`59a90b4d`](https://github.com/NousResearch/hermes-agent/commit/59a90b4d46ab9da2885ff75d800d4af0724bbc2a))
- Cover canonical Ink image composer and startup handoff ([`65635634`](https://github.com/NousResearch/hermes-agent/commit/6563563443ceb6bb05ff79c8c0c473b11f37b291))
- Verify native legacy resume and compression cutover ([`90052b33`](https://github.com/NousResearch/hermes-agent/commit/90052b3351edee51f9de3f1801aef974baa63c54))
- Prove admission-backed automatic compression retry ([`3ec0ea59`](https://github.com/NousResearch/hermes-agent/commit/3ec0ea59babdbbe6dcf1eb8141a004af890bf419))
- Gate the Discord role probe on the real distribution, not the conftest mock ([`19feada0`](https://github.com/NousResearch/hermes-agent/commit/19feada077552c535490f4d32f4cc53b46862bec))
- Acp): live editor image prompt reaches the loopback model as an image_url part ([`993a63f0`](https://github.com/NousResearch/hermes-agent/commit/993a63f0517971409e9e55970e8189a97b9f0614))
- Native suite finds the managed worker by owner ancestry, not bare ppid (venv trampoline) ([`9e335738`](https://github.com/NousResearch/hermes-agent/commit/9e33573819b531d4925cd883c6ab07e95f2d8604))
- Trampoline reap check waits for the owner's bounded close instead of racing the terminal commit ([`cc2cdbe2`](https://github.com/NousResearch/hermes-agent/commit/cc2cdbe28fc8e6789e6dd0c3928b44d3fbdea565))
- Desktop): move the token download-transport invariant beside the extracted function ([`ff662b6b`](https://github.com/NousResearch/hermes-agent/commit/ff662b6b4324ae5a11f0ae3d77ab27e962c1990d))
- Exercise safe identity suppression through real prompt assembly ([`cccb516c`](https://github.com/NousResearch/hermes-agent/commit/cccb516cd7e12717d9652519a4b8f0bbd76c1bb3))
- Verify reserved admission claims through worker handlers ([`107af6fc`](https://github.com/NousResearch/hermes-agent/commit/107af6fc7a647f4f1a9e3f16d68507e7f3390b3f))
- Isolate and reap owned Kanban systemd scopes ([`3776709d`](https://github.com/NousResearch/hermes-agent/commit/3776709d521bb932f24790ba5b8ac9d99f867459))
- Prove rotated worker survives owner kill and adoption ([`8459b140`](https://github.com/NousResearch/hermes-agent/commit/8459b14094104210cfad432b680ed7397112f2d9))
- Prove fresh ACP handoff and cold canonical restoration ([`56f62381`](https://github.com/NousResearch/hermes-agent/commit/56f623818839ebe120f25aec658e2ede93776202))
- Verify per-admission API usage on the ordinary daemon ([`35d9eb2f`](https://github.com/NousResearch/hermes-agent/commit/35d9eb2f7024293dca0d2bda5df9ff6ace69b57e))
- Prove shared API FIFO on the ordinary daemon ([`e721121f`](https://github.com/NousResearch/hermes-agent/commit/e721121f7beb367a65194986747e46db80af2dc9))
- Prove registered worker terminal execution without canonical SQLite opens ([`e31b96bc`](https://github.com/NousResearch/hermes-agent/commit/e31b96bc84572ab685166f3bc45aca4160c72977))
- Exercise worker lifecycle and stale callbacks through ordinary owner ([`5038cf75`](https://github.com/NousResearch/hermes-agent/commit/5038cf75c91c0605bb99b5d7ca13fcc7703f3cef))
- Verify worker rotation claim and lost-ack replay over daemon ([`17cf264f`](https://github.com/NousResearch/hermes-agent/commit/17cf264fc5973301cc69ead17ef89e708d8aaa5a))
- Verify native ACP approval and wrong-profile refusal ([`d157534a`](https://github.com/NousResearch/hermes-agent/commit/d157534a4a4eba4cb4ecd5d2db740f68b7ec9f87))
- Verify local automation stays nonhuman and cache stable ([`ef071dd3`](https://github.com/NousResearch/hermes-agent/commit/ef071dd371e4c50ff084fe90408bbeb16e2adc70))
- Prove local completion recovery after owner kill ([`9afff7e9`](https://github.com/NousResearch/hermes-agent/commit/9afff7e9d5b7218ab45af1a95518e854fda70d0d))
- Follow canonical CLI launch in startup guard fixtures ([`34b9aad1`](https://github.com/NousResearch/hermes-agent/commit/34b9aad158d12a6dad51ffab38253e3a9ba8928b))
- State): keep FTS migration fixtures on historical versions ([`21baec51`](https://github.com/NousResearch/hermes-agent/commit/21baec51bb6e3308cf885ea2a8bcde27eaf0f04b))
- Document recovery limits and verify consented gateway launches ([`ddc1b0a1`](https://github.com/NousResearch/hermes-agent/commit/ddc1b0a1b75065e561e498e236e7cd5336d3fb3f))
- Refuse unauthenticated credential launch over ordinary daemon websocket ([`9b0d7861`](https://github.com/NousResearch/hermes-agent/commit/9b0d7861d40ea2f26d48f14893d3be8ec75ee154))
- Deny credential-bearing creation to restricted principals ([`2d2fdff9`](https://github.com/NousResearch/hermes-agent/commit/2d2fdff90d41a7127cbe44563c5d08a7e774e125))
- Verify frozen CLI iteration limits through actual tool rounds ([`cc37de8b`](https://github.com/NousResearch/hermes-agent/commit/cc37de8b8488a7c806c056a049a76161068f07bc))
- Prove concurrent CLI launch wire and restart credential isolation ([`84e86a87`](https://github.com/NousResearch/hermes-agent/commit/84e86a87ec8a9e41c168a96a4934a8cc76cb2215))
- Own canonical daemon in completed-process CLI integration ([`6c8f0fd8`](https://github.com/NousResearch/hermes-agent/commit/6c8f0fd8430cd273eae7e597bd6b9024f89540f4))
- Keep simulated HEAD updates off the live runtime fleet ([`7b8fdfa8`](https://github.com/NousResearch/hermes-agent/commit/7b8fdfa864bb6dcb6b0fc090a63b94a817ca0f0b))
- Seed owner database for dashboard parameter validation ([`2af3bfd4`](https://github.com/NousResearch/hermes-agent/commit/2af3bfd471ba8a00dbd0e9b926c02501054b785b))
- Initialize owner store for dashboard refresh success ([`a1811942`](https://github.com/NousResearch/hermes-agent/commit/a1811942e41b03cc8ac48537615d236e51522cfa))
- Isolate service ordering fixture home ([`3b42e697`](https://github.com/NousResearch/hermes-agent/commit/3b42e697695f72521e523a0d073158f4df0fd411))
- Seed gateway status through real read-only storage ([`6af1ac81`](https://github.com/NousResearch/hermes-agent/commit/6af1ac81fe978735fdf130602109105484fe3511))
- Exercise CLI exports against real read-only session storage ([`96782704`](https://github.com/NousResearch/hermes-agent/commit/96782704a006e8bd1d6e38ce693c3e110c2b6730))
- Prove pending worker usage survives real owner outage and adoption ([`58bcc3ec`](https://github.com/NousResearch/hermes-agent/commit/58bcc3ec4d76a5dc85431b82995857cf7af9bdbb))
- Verify live relay replacement and websocket revocation fences ([`89567476`](https://github.com/NousResearch/hermes-agent/commit/8956747661cd5a7dd2b3a1c0d2e3dd160489e330))
- Reject relay trust installation from an invalid seal ([`80d677d2`](https://github.com/NousResearch/hermes-agent/commit/80d677d2d0ac937d30f06dfa9178cb781fecc163))
- Reproduce relay busy ingress blocking outbound acknowledgements ([`73bf2c66`](https://github.com/NousResearch/hermes-agent/commit/73bf2c66d364cca4d8bbea27ef9fd8d0558739b9))
- Reproduce authenticated relay native admission rejection ([`0bbe3740`](https://github.com/NousResearch/hermes-agent/commit/0bbe37401b2f66e800bc22d03ba5bff625105764))
- Preserve destination lock identity after offline import ([`ef1fe3de`](https://github.com/NousResearch/hermes-agent/commit/ef1fe3dedc97a2f5bd93ebe11c535382f79f8676))
- Verify separate-output recovery against active daemon source ([`cc96119b`](https://github.com/NousResearch/hermes-agent/commit/cc96119bf57efbf677c1ec9af7e0d3856c4be12e))
- Expose epoch reuse and service revival after refused import ([`dbb1e531`](https://github.com/NousResearch/hermes-agent/commit/dbb1e531e221d6a690d27b50f4c7269a14473a40))
- Reproduce live restore deleting active authority admissions ([`3a0111ee`](https://github.com/NousResearch/hermes-agent/commit/3a0111ee03029d4c4fb7be02400ce1a9af73b92a))
- Align search fixture with owner-initialized session stores ([`e2a853ba`](https://github.com/NousResearch/hermes-agent/commit/e2a853ba7f0a8bf1da9cac089cbdab415327c0e2))
- Cover encoded socket limits with direct control paths ([`34407c9e`](https://github.com/NousResearch/hermes-agent/commit/34407c9ec6ca0922233dc9c8f7cd4070609b0bf1))
- Reproduce missing loop witnesses in long-home daemons ([`36649795`](https://github.com/NousResearch/hermes-agent/commit/366497955805e9f32a3805d855c97b208cdfed23))
- Configure a restorable model for token session creation ([`bcf39bfb`](https://github.com/NousResearch/hermes-agent/commit/bcf39bfb11986643663da0b78efb57780a61d958))
- Verify ordinary daemon replay and release fixture stores ([`e8f57b7f`](https://github.com/NousResearch/hermes-agent/commit/e8f57b7fbcfa423c6b39bf4e37fb543bc29f83a1))
- Supply real session stores to gateway authority fixtures ([`e3d23087`](https://github.com/NousResearch/hermes-agent/commit/e3d230875fe505a8ea87d8ddca49e07ab5280810))
- Verify ordinary daemon slash actor isolation and handler scope ([`3cdf25cb`](https://github.com/NousResearch/hermes-agent/commit/3cdf25cb2ff57aa05ebf2c5c24130cabb21b5c78))
- Verify native download boundaries and document transport scope ([`c8620011`](https://github.com/NousResearch/hermes-agent/commit/c86200114096632d460371e3b4ee4d83f6d094ae))
- Prove local rotation and reset across cold daemon restarts ([`af3f2dfe`](https://github.com/NousResearch/hermes-agent/commit/af3f2dfe1adfb49a00976a1e08a4b0d083e8cb04))
- Compare discovery on real legacy serve and canonical daemon sockets ([`5d1d1ee0`](https://github.com/NousResearch/hermes-agent/commit/5d1d1ee039a140eb9589edc2d9c8489cb45af522))
- Reproduce missing canonical command discovery over ordinary daemon WS ([`659632c3`](https://github.com/NousResearch/hermes-agent/commit/659632c390c24d44ee3cbfb4d125faa29710666b))
- Scope private Unix ticket fixture to supported native hosts ([`ca3e4b64`](https://github.com/NousResearch/hermes-agent/commit/ca3e4b644c70dda72c61193a3853d43de0b6cccb))
- Keep native protocol fixtures within their runtime type boundary ([`da98497c`](https://github.com/NousResearch/hermes-agent/commit/da98497cdc4be395f43c48c9f8bc65ebe3c7c939))
- Verify canonical receipts retire the native private-file journal ([`5bd5a8d6`](https://github.com/NousResearch/hermes-agent/commit/5bd5a8d63ad6e753da9b5ed005871b6227cf7692))
- Verify native HTTP selectors against real sibling profiles ([`f6ef1ea4`](https://github.com/NousResearch/hermes-agent/commit/f6ef1ea436991d6d2ac4c3d5af33d99e8245bc7c))
- Prove cold local recovery through separate authenticated daemons ([`041d9ee7`](https://github.com/NousResearch/hermes-agent/commit/041d9ee74e754fc9347d09bdf022fa09a162d36d))
- Exercise native Stop through the Python Ink launcher ([`c75e0cdd`](https://github.com/NousResearch/hermes-agent/commit/c75e0cdd76a117efde713e8dfa16eaf2d2e57c6c))
- Verify native Ink Stop acknowledgement and fresh follow-up ([`d0ad8324`](https://github.com/NousResearch/hermes-agent/commit/d0ad8324c8407a8199e02828774d8bb51a4249e7))
- Exercise fresh Ink launch through the real Python launcher ([`8b727f4a`](https://github.com/NousResearch/hermes-agent/commit/8b727f4aada6b0f40a2278cf7775c33c9253c62d))
- Verify actual native clarification answer on model wire ([`cc4ad0d1`](https://github.com/NousResearch/hermes-agent/commit/cc4ad0d1158ea032d5c39023df6205a57225deec))
- Require native Ink reconnect to render settled history ([`eecaba42`](https://github.com/NousResearch/hermes-agent/commit/eecaba4203c736bfc6e66f4d67b9cf42e28e97d8))
- Initialize replay fixture with explicit runtime admission state ([`014b3ea4`](https://github.com/NousResearch/hermes-agent/commit/014b3ea496297fdacba7522188679ea442687344))
- Retain native reconnect output for intermittent Ink failure ([`f454485d`](https://github.com/NousResearch/hermes-agent/commit/f454485d7cc2a94082f954fc23b6be1a8a9f52e1))
- Verify native CLI cwd execution against the policy-enabled daemon ([`db2bdf31`](https://github.com/NousResearch/hermes-agent/commit/db2bdf316367f345ae33957bd645c9e4c6934933))
- Prove native gateway approvals survive CLI detach and invalid choice ([`a0c361ae`](https://github.com/NousResearch/hermes-agent/commit/a0c361ae387c438f7ceb9bf5c65d8befd85fcac5))
- Prove concurrent local policy isolation on provider wire ([`15052599`](https://github.com/NousResearch/hermes-agent/commit/1505259991975ad66d45b80c59b9dbfe44c8b19a))
- Verify metadata retries through ordinary gateway sockets ([`0d5d548f`](https://github.com/NousResearch/hermes-agent/commit/0d5d548f1d5cfb1eb63f549f28de900348f55210))
- Execute fresh sessions through ordinary gateway startup ([`ae19a6e0`](https://github.com/NousResearch/hermes-agent/commit/ae19a6e0354646a6872e4d3222ec08fbd65a80b1))
- Prove fresh local clarify survives complete viewer detachment ([`1044867b`](https://github.com/NousResearch/hermes-agent/commit/1044867be6a64a85b4a99bc1a99ecfa2f01a4474))
- Preserve Discord direct pairing and scoped DM grants ([`144c86c7`](https://github.com/NousResearch/hermes-agent/commit/144c86c76449ff30fe63354c99ad0dc5929922d9))
- Retain startup exit contracts with real authority stores ([`a126b4cc`](https://github.com/NousResearch/hermes-agent/commit/a126b4cc0a81377ea9177c0679a61f9f90fb4b55))
- Verify excluded observer prefix against canonical replay ([`cacd4d22`](https://github.com/NousResearch/hermes-agent/commit/cacd4d224f1616dd60b04d3da6dfb35ab0260660))
- Retain live gateway bootstrap readiness probe ([`29167522`](https://github.com/NousResearch/hermes-agent/commit/29167522421b9ced0590360934ca38717c3e5866))
- Exercise shared approvals through production API startup ([`118b34ac`](https://github.com/NousResearch/hermes-agent/commit/118b34ac6c1567b614af47c3abc7939b66e4a790))
- Verify native runtime ownership and execution-time secret refresh ([`234f1278`](https://github.com/NousResearch/hermes-agent/commit/234f1278cebce88c54bc247e5b568d7ef40ca9cc))
- Exercise approval rendering through initialized turn runners ([`76efc227`](https://github.com/NousResearch/hermes-agent/commit/76efc227017e424779299fd3e7474276df728c3c))
- Verify CLI readers alongside an active SQLite writer ([`ee23996c`](https://github.com/NousResearch/hermes-agent/commit/ee23996cff7e55413f2fbe3624562ec0696bb265))
- Retain real CLI reader A/B harness ([`bcc03ee8`](https://github.com/NousResearch/hermes-agent/commit/bcc03ee8f7786d07fe6c7ea168a9522b8f253b91))
- Preserve insights cleanup coverage with absent-store fast path ([`eae783bc`](https://github.com/NousResearch/hermes-agent/commit/eae783bc50c89d2737861d160f0c7543613aaa57))
- Exercise shared turns through production API startup ([`0cfe5a2f`](https://github.com/NousResearch/hermes-agent/commit/0cfe5a2ff436f76739342d26e02724eaa921a46d))
- Retain authority backpressure execution receipt ([`47ce83d6`](https://github.com/NousResearch/hermes-agent/commit/47ce83d6ff882ca01f7f104526486adca26547a4))
- Retain real-process read-only search A/B probe ([`551ccfca`](https://github.com/NousResearch/hermes-agent/commit/551ccfcad1496e66a17b165c9cf334d1988d14a4))
- Require complete shared gateway acceptance receipt coverage ([`d853d145`](https://github.com/NousResearch/hermes-agent/commit/d853d14574c53869cd408372d4e9807181e674bb))
- Retain gateway source invariants across sibling extractions ([`e1df5d12`](https://github.com/NousResearch/hermes-agent/commit/e1df5d12bdd4c555bb25990fd4d33755f4ce27aa))
- Follow production methods across gateway turn extraction ([`04cef1e9`](https://github.com/NousResearch/hermes-agent/commit/04cef1e9b30b9c6e2d41b69267146ce392f2c5b3))
- Reap truncation fixture worker before restoring bindings ([`d6d8af93`](https://github.com/NousResearch/hermes-agent/commit/d6d8af931c8d1041404479bc340ecfb626aefcaf))
- Trace borrowed SQLite readers in search projection invariant ([`fa572cbe`](https://github.com/NousResearch/hermes-agent/commit/fa572cbeab9d04ceb1e70b6bf6c53f4865e62253))
- Verify runtime schema upgrades and genuine SQLite full rollback ([`1769e803`](https://github.com/NousResearch/hermes-agent/commit/1769e803f8413abe51af4a08008918139bf09051))
- Reproduce Ink receipt-only retry busy latch ([`1c144c98`](https://github.com/NousResearch/hermes-agent/commit/1c144c98d76bf42e8b2312241bb398ebef6b95f4))
- Reproduce desktop receipt stop and legacy timeout races ([`02e0ab74`](https://github.com/NousResearch/hermes-agent/commit/02e0ab74da057f683b5837a475c43dfd6d032e64))
- Verify gateway service consent across import and setup ([`4ecf5975`](https://github.com/NousResearch/hermes-agent/commit/4ecf59755e9c2e2cf6f17ae3d149c2d4b08f5f0d))
- Make unreserved profile snapshots explicit in multiplex fixtures ([`a72ed0a5`](https://github.com/NousResearch/hermes-agent/commit/a72ed0a5e8d16fabcd3fb9d6a6440992f8f2dfd6))

## 🏗️ Infrastructure

- Release): admit stable releases from release/* branches, not just main ([`9686d55c`](https://github.com/NousResearch/hermes-agent/commit/9686d55ca87ccb22f779f012dd1ced7cdf63e0b9)) — @ethernet8023
- Plugins): pin birkin-mnemosyne to core 0.7.1 ([`e216cd74`](https://github.com/NousResearch/hermes-agent/commit/e216cd746f9e6600cf40ab5622f5ad2119ef91cb)) — @ashmoonori-afk
- Catalog): review disclosure for huddo ([`85d27a51`](https://github.com/NousResearch/hermes-agent/commit/85d27a51cf87327f6ea894a3a78302a207706f34))
- Map contributor email for StudioCodeAI ([`c708b34f`](https://github.com/NousResearch/hermes-agent/commit/c708b34ff60cacbb2aa2a34d80e46febed1c2a1b))
- Plugin-catalog): update Telegram Client to 1.3.1 ([`27aaade9`](https://github.com/NousResearch/hermes-agent/commit/27aaade97b75cf8961be8201f167624b46454d8b)) — @guberm
- Plugin-catalog): bump Gmail to v1.0.20 ([`c6ac0565`](https://github.com/NousResearch/hermes-agent/commit/c6ac05655ca24c96c87ddd91d444f690ca9e621d)) — @guberm
- Kiwi): bump pin to kiwi@0.12.5, plugin v1.2.2 ([`a08f5894`](https://github.com/NousResearch/hermes-agent/commit/a08f5894355ac410a4af46875ff3ac47e8f89f50)) — @harrylabsj
- Lightningai-rate-limit to v1.1.0 (wall-clock aligned window) ([`e28d64e8`](https://github.com/NousResearch/hermes-agent/commit/e28d64e8b7b54258eae5c8cdc825f919421ca65a)) — @dinosauria123
- Map contributor email for TREE-Ind ([`71f78b3f`](https://github.com/NousResearch/hermes-agent/commit/71f78b3fe2a5b6be2dc219c999fc64ab44053b47))
- Catalog): review disclosure for hermes-aac ([`0567d017`](https://github.com/NousResearch/hermes-agent/commit/0567d017c46c3fdb9dd66d5468ad2ed96dc3cfc3))
- Catalog): review disclosure for openinvest ([`c179b286`](https://github.com/NousResearch/hermes-agent/commit/c179b286d448411f500c7318baf183769b6ba885))
- Map contributor email for Sahil-SS9 ([`d8b5bd8a`](https://github.com/NousResearch/hermes-agent/commit/d8b5bd8a497f7f3e8f02acf966b1be6afce2cd91))
- Catalog): review disclosure for hermes-agent-mixer ([`a98cc310`](https://github.com/NousResearch/hermes-agent/commit/a98cc310f913bb6e7ac27622fa105a433e415138))
- Update Activity catalog to v0.2.0 ([`908c525d`](https://github.com/NousResearch/hermes-agent/commit/908c525dee4f28ba96617b4faa5e051bb21da2d7)) — @hassan-kamel
- Catalog): showly reviewed disclosure + requires_hermes >=0.21.6 ([`2ee820e7`](https://github.com/NousResearch/hermes-agent/commit/2ee820e771033539a5d5eac8356c317af9979245))
- Catalog): review disclosure for nexus ([`1a5f5c7b`](https://github.com/NousResearch/hermes-agent/commit/1a5f5c7b484f8ffccaa511ceb1639c3ce652e550))
- Catalog): review disclosure for kumiho-memory ([`63da5f7b`](https://github.com/NousResearch/hermes-agent/commit/63da5f7b2033d3969b825425937143cbc2168851))
- Catalog): review disclosure for model-router ([`92790c6d`](https://github.com/NousResearch/hermes-agent/commit/92790c6d79f0d743f532b9bf0c964bde6d893a29))
- Catalog): review disclosures for anatomy-museum, agent-janitor ([`560b2507`](https://github.com/NousResearch/hermes-agent/commit/560b250762a707ad355f3cd9019bff48be954d53))
- Js): lint after the main merges: drop the unused watchdog import, order a test import, stub gw on the steer ctx ([`1b78a417`](https://github.com/NousResearch/hermes-agent/commit/1b78a417d4438655736f5d3e6ff0e6dfd5ea3b60))
- Retrigger CI (zero-job dispatch failure, auto-heal) ([`d056a624`](https://github.com/NousResearch/hermes-agent/commit/d056a62442dfb655fcb488b580ff292b4844be4a))
- Give area detection its sparse checkout and retry budget ([`8824ac96`](https://github.com/NousResearch/hermes-agent/commit/8824ac9686e67f8b650e685919447f3f15204591))
- Retrigger CI (zero-job dispatch failure, auto-heal) ([`2cbeac1f`](https://github.com/NousResearch/hermes-agent/commit/2cbeac1f1c57fa64b963eb0fde075769b6cd3d61))
- Retrigger after 0-job workflow startup failure ([`254432b2`](https://github.com/NousResearch/hermes-agent/commit/254432b2d40a19ad4693f4c7ee98ab9658fe6dcf))
- Retrigger (dispatch window) ([`1e398140`](https://github.com/NousResearch/hermes-agent/commit/1e39814039247a602a990c0196be3be054ebc059))
- Retrigger (dispatch window) ([`40b17a25`](https://github.com/NousResearch/hermes-agent/commit/40b17a25f4d5812c597d0062d9b13af8f0e80671))
- Retrigger (dispatch window) ([`5e198b8b`](https://github.com/NousResearch/hermes-agent/commit/5e198b8b2fb72a39887414fdffbe3f2d56e4d96c))
- Retrigger after 0-job workflow startup failure ([`f6dd9025`](https://github.com/NousResearch/hermes-agent/commit/f6dd9025fd357ccecb8ea8b6713704cdbe497a4e))
- Retrigger after 0-job workflow startup failure ([`911b559e`](https://github.com/NousResearch/hermes-agent/commit/911b559e4a38bfc0e13113276dea824bc1741749))
- Retrigger after 0-job workflow startup failure ([`4ff21ecd`](https://github.com/NousResearch/hermes-agent/commit/4ff21ecd722f1ddf63614799657e0eedf0c5528c))
- Retrigger after 0-job workflow startup failure ([`c37453e7`](https://github.com/NousResearch/hermes-agent/commit/c37453e7c4e6c51d1726ff54767cfce3518f43ce))
- Retrigger after 0-job workflow startup failure ([`cb296788`](https://github.com/NousResearch/hermes-agent/commit/cb29678859be3e7737620a394147193f65d1b5a3))
- Retrigger after 0-job workflow startup failure ([`346615f3`](https://github.com/NousResearch/hermes-agent/commit/346615f3f911f9f153d54c23fb5e6bcea30321bc))
- Retrigger after 0-job workflow startup failure ([`1e4edefa`](https://github.com/NousResearch/hermes-agent/commit/1e4edefa4279b22e711f9c5c99a6b1082d538a46))
- Retrigger after 0-job workflow startup failure ([`f3d4105f`](https://github.com/NousResearch/hermes-agent/commit/f3d4105f694f71f18ddd215ce25318317a2d350f))
- Retrigger after 0-job workflow startup failure ([`73d9e413`](https://github.com/NousResearch/hermes-agent/commit/73d9e41344488956f49bec9ed902a318e85f5c78))
- Retrigger after 0-job workflow startup failure ([`c7fcc65c`](https://github.com/NousResearch/hermes-agent/commit/c7fcc65c9b1132622eb6117843c253177cd22851))
- Retrigger after 0-job workflow startup failure ([`4892e1d4`](https://github.com/NousResearch/hermes-agent/commit/4892e1d4416772bdaed1131a68d242a2bfa9beae))
- Retrigger after 0-job workflow startup failure ([`2cb84f43`](https://github.com/NousResearch/hermes-agent/commit/2cb84f4398fb52d24f03dacb02f56cbbeb287b69))
- Retrigger after lost push event (0 runs on 19ca1e85c80) ([`c86b415d`](https://github.com/NousResearch/hermes-agent/commit/c86b415df4470cca848d4acbeae683591faae734))
- Trim native HTTP helper imports ([`25fd73b6`](https://github.com/NousResearch/hermes-agent/commit/25fd73b6654125c6a0264aff4fcc8f2b0c0f1224))

## 📦 Other Changes

- Repin hermes-insight to afb08fb (1.0.2) ([`51e663da`](https://github.com/NousResearch/hermes-agent/commit/51e663da9def59da047d05cd88f8dd300fca75ed)) — @BrokeSkill
- Plugin-catalog: bump huddo to 0.9.0 ([`eeacc00a`](https://github.com/NousResearch/hermes-agent/commit/eeacc00ac0b6cfd25c7daee9709d428d3cc66213)) — @hellohanchen
- Plugin-catalog: re-pin hermes-lang-pt-br to 7548ff1 (pack verifier + CI) ([`82fbd41f`](https://github.com/NousResearch/hermes-agent/commit/82fbd41fd41998124a0ae15477306aba65ba6e29)) — @StudioCodeAI
- Plugin-catalog: re-pin hermes-lang-pt-br to 69efb2f (credits/timeline README) ([`2c20d9a3`](https://github.com/NousResearch/hermes-agent/commit/2c20d9a350a09c3cf36f3109d6fbf0e3431fde82)) — @StudioCodeAI
- Catalog: bump speechify to 0.1.1 ([`3a5b9e84`](https://github.com/NousResearch/hermes-agent/commit/3a5b9e84b15b3f6d878e40045e2b26f170415759)) — @Lokeshm24
- Catalog: re-pin qdrant-memory to 0.2.1 (e14adc06) ([`720552bb`](https://github.com/NousResearch/hermes-agent/commit/720552bb3083aa7a68087ee98b46b52214fbecc9)) — @cnkang
- Catalog: repin Hermes AAC 0.1.1 SDK-only reduced features ([`473e2847`](https://github.com/NousResearch/hermes-agent/commit/473e284730b8047d1623f038bafd94c77da2f124)) — @TREE-Ind
- Plugin-catalog: openinvest re-pin to 106e5ba (bounded backend deps, 0.41.6) ([`6cc9a434`](https://github.com/NousResearch/hermes-agent/commit/6cc9a4347b351ca6d4f4b084e572322c9d6f824c)) — @longsizhuo
- Plugin-catalog: openinvest re-pin to 3a0c816 (review fixes, backend 0.41.4) ([`00c311c8`](https://github.com/NousResearch/hermes-agent/commit/00c311c834c0184f5eecc36635e8abc0e665dbf9)) — @longsizhuo
- Plugin-catalog: openinvest re-pin to 3e1a9d7 (review fixes) ([`cb223633`](https://github.com/NousResearch/hermes-agent/commit/cb223633d2d8dc84782254563d32902d4213a943)) — @longsizhuo
- Plugin-catalog: bump plan-mode to 0.4.4 ([`2a5617f8`](https://github.com/NousResearch/hermes-agent/commit/2a5617f858a22ab852ee0332460e164af8bbbc3a)) — @100yenadmin
- Plugin-catalog: bump plan-mode to 0.4.3 ([`6fafdd4f`](https://github.com/NousResearch/hermes-agent/commit/6fafdd4f06b35ec4e09adccf6769b547a470ac69)) — @100yenadmin
- Catalog: pin the Showly community plugin ([`5da3156c`](https://github.com/NousResearch/hermes-agent/commit/5da3156c8607f15206de74b22a69a015c073d09e)) — @slchris
- Catalog(nexus): repin the sha to 4392e6d — /embed and /mcp demand a per-installation key ([`64425a06`](https://github.com/NousResearch/hermes-agent/commit/64425a0663de5e2d660b498013a9a89a4b68f920)) — @Neboy72
- Plugin-catalog: bump account-pool to 4.0.2 ([`e5d2cebe`](https://github.com/NousResearch/hermes-agent/commit/e5d2cebe17e94a3bba69867a8127d98bdf2cc05b)) — @roqianjas
- Plugin-catalog: bump alans-way and alans-way-computer to 0.21.5 ([`a8d61e30`](https://github.com/NousResearch/hermes-agent/commit/a8d61e309fc8e7f22e7e4c9e3a48a11fb1f19a47)) — @capthvnsen
- Plugin-catalog: nvidia-app + nvidia-broadcast pin -> 729e25c (first-run setup when the app side is not ready) ([`f18948e4`](https://github.com/NousResearch/hermes-agent/commit/f18948e4cdc88b38104c0c4572dd8f00269c3eed)) — @alt-glitch
- Catalog: agent-janitor (from #137875) ([#137875](https://github.com/NousResearch/hermes-agent/pull/137875)) — @ZidoCode
- Catalog: anatomy-museum (from #138166) ([#138166](https://github.com/NousResearch/hermes-agent/pull/138166)) — @danrudy33
- Catalog: secure-env-ingress (from #132272) ([#132272](https://github.com/NousResearch/hermes-agent/pull/132272)) — @web3blind
- Style: align canonical group controls with Desktop lint rules ([`c8d8900d`](https://github.com/NousResearch/hermes-agent/commit/c8d8900dcd17281dd52f52624ac712f2199eaed3))
- Style: normalize verified queue admission imports and spacing ([`d3ad7a90`](https://github.com/NousResearch/hermes-agent/commit/d3ad7a90ec585deea401a7c37ec32dbcdcb6c086))

## 👥 Contributors

Thank you to everyone who contributed to this release!

- @Lokee86 (11 commits)
- @dokterdok (6 commits)
- @elisam0 (5 commits)
- @longsizhuo (4 commits)
- @100yenadmin (3 commits)
- @StudioCodeAI (3 commits)
- @olric3015 (3 commits)
- @ethernet8023 (2 commits)
- @helix4u (2 commits)
- @guberm (2 commits)
- @TakeshiTGAL (2 commits)
- @dinosauria123 (2 commits)
- @TREE-Ind (2 commits)
- @Sahil-SS9 (2 commits)
- @hassan-kamel (2 commits)
- @slchris (2 commits)
- David Dudok de Wit (2 commits)
- @xxxigm (1 commit)
- @kshitijk4poor (1 commit)
- @j-nolan (1 commit)
- @rroverin (1 commit)
- @BrokeSkill (1 commit)
- @dandacompany (1 commit)
- @ashmoonori-afk (1 commit)
- @hellohanchen (1 commit)
- @2867297362mjb-sketch (1 commit)
- @Lokeshm24 (1 commit)
- @harrylabsj (1 commit)
- @cnkang (1 commit)
- @Neboy72 (1 commit)
- @kaveone (1 commit)
- @roqianjas (1 commit)
- @capthvnsen (1 commit)
- @alt-glitch (1 commit)
- @metamindedu (1 commit)
- @ZidoCode (1 commit)
- @danrudy33 (1 commit)
- @web3blind (1 commit)
- @KoNit-K (1 commit)
- @unsupportedpastels (1 commit)
- @abundantbeing (1 commit)
- @utkubakir (1 commit)

**Full Changelog**: [v0.22.0...rc.5-v0.22.1](https://github.com/NousResearch/hermes-agent/compare/v0.22.0...rc.5-v0.22.1)