nousresearch/hermes-agent

Fix

Docker container identity labels no longer collide

Distinct shared-container keys now get unique digest-suffix labels so different profiles never accidentally share the same container.

Fix

Computer-use media paths recovered

Explicit screen-capture requests are now routed correctly to the desktop-state tool, and media file paths from computer-use sessions are repaired across related surfaces.

Fix

Telegram waits for reconnection before failing sends

After a network blip, message sending now waits for the connection to come back instead of immediately erroring with 'Not connected'.

Fix

Teams integration handles unbound SDK gracefully

The Microsoft Teams connector no longer crashes when its underlying SDK was never initialized.

Fix

Desktop app survives sleep/wake cycles

The desktop client now probes half-open sockets when the machine wakes up and reconnects rather than hanging on a dead connection.

Fix

CLI input fallback prevents lockout

When the fancy prompt library can't attach to the terminal, the CLI falls back to basic input; also fixed a bug where a security permission change locked users out of their own install directory.

Fix

Cron jobs got safer and more capable

Scheduled jobs can now explicitly re-arm as one-shots, refuse terminal commands, and won't fire past their grace window or overwrite names with blank values.

Fix

Security hole closed in gateway relays

Fixed an allowlist leak in multiplexing and blocked a code-injection vector where bots could run arbitrary Python via relay commands.

Fix

Curator skill pinning reports honestly

Pinning skills now checks results and surfaces failures instead of falsely reporting success, with clearer messages about what pinning does.

Fix

Safer browser snapshot storage

Browser snapshots are now written through a symlink-safe path so malicious symlinks can't redirect writes.

Fix

Update shim window closes itself

The desktop updater's helper window now auto-closes after errors or manual outcomes instead of lingering on screen.

Fix

Lifecycle guards see through wrapper prefixes

Security guards checking gateway lifecycle commands can now detect dangerous operations hidden behind wrapper command prefixes.

Fix

Pop-out windows keep their session transport

Closing a pop-out window re-binds the session's connection to a surviving window instead of dropping it.

Fix

Language server clients retire cleanly

When the protocol reader exits, language-server clients are properly retired and pending diagnostic waits abort instead of hanging forever.

Fix

Dead websocket peers detected via TCP keepalive

Terminal UI gateway websockets now use TCP keepalive so silently disconnected peers are noticed and cleaned up.

Fix

Cron NUL-padding bypass closed

Closed a loophole where attackers could sneak disallowed scripts past the scheduled-job guard by padding filenames with NUL characters.

Fix

Fallback provider transitions made visible

Users now see clear messages when the system switches to a backup AI provider and when the primary one recovers.

Fix

Custom providers respect caching settings

Prompt caching preferences are now honored when using custom (non-default) AI providers.

Fix

Uninstall guard conflict resolved

Fixed a conflict in the gateway's uninstall protection so the lifecycle guard behaves consistently.

Fix

Background reviewer must read before writing

The automated skill curator is now instructed (and enforced) to read existing content before making changes, preventing blind overwrites.

Fix

macOS launchctl guards hardened

Closed gaps in the launch-service security guards where command order or missing verbs could let restricted operations slip through.