Hermes Agent 0.22.1

Hermes Agent v0.22.1 (rc.5-v0.22.1)

Release Date: October 14, 2026

This is a patch release, with a handful of fixes for the Windows Store, plugin updates, and more.

Features

• Agent): add nemotron super 3.5 default parameters (c59d2994) - @elisam0
• Cli): add curated model list at the top in the model picker list (e6835fd3) - @elisam0
• Plugin-catalog): add hermes-lang-ko - Korean Desktop language pack (e5f49b6a) - @dandacompany
• Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) - @StudioCodeAI
• Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) - @2867297362mjb-sketch
• Plugin-catalog): add author-feed (5f6d6836) - @TakeshiTGAL
• Plugin-catalog): bump aux-ledger to 1.4.0 (6048066e) - @olric3015
• Plugin-catalog): add the wait-ledger catalog card (77cb58e5) - @olric3015
• Plugin-catalog): add wait-ledger (97e65322) - @olric3015
• Community plugin: lightningai + lightningai-rate-limit (07515466) - @dinosauria123
• Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) - @TREE-Ind
• Plugin-catalog): add openinvest (b6e86101) - @longsizhuo
• Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) - @Sahil-SS9
• Plugins): move Kumiho Memory to memory catalog shelf (46f95e08) - @kaveone
• Add canonical group attachment controls (4673f17c)
• Consume event-bound hosted files through canonical admissions (e87bd098)
• Connect Desktop groups to canonical driver controls (3c2c9d47)
• Transport hosted producers through authenticated owner sockets (51189b05)
• Retain hosted room work evidence across authority changes (0af2c714)
• Route hosted room workers through session authority (bd22e0f9)
• Wire canonical hosted group controls (fa2179bb)
• Gateway): resolve --resume <title> and -c <title> [--create-if-missing] in the authority (11a83ad4)
• Retain terminal identity tombstones during history retirement (ba435291)
• Route native CLI and ACP actions through prepared controls (27b0f7f2)
• Publish real prepared compression in the mutation receipt transaction (b6540276)
• Prepare and atomically publish local model changes (7e7fa7c6)
• Commit independent local branch policy and route atomically (f98eaec1)
• Project managed tool progress without private arguments or results (61ccd894)
• Bridge managed worker approvals clarification and stop (a0b5118f)
• Launch admission-owned tool workers from the ordinary daemon (510e32be)
• Enforce safe defaults at bare agent construction (1eeac867)
• Suppress rules skills and memory readers in private safe workers (25cda66a)
• Bypass plugin providers and hook execution in safe workers (33921e6f)
• Bind immutable private worker config before runtime imports (4cc3f420)
• Expose verified canonical ACP editor MCP attachment (1bda56a1)
• Rebind exact editor MCP credentials on canonical ACP resume (5bfa2f2c)
• Borrow editor MCP configurations with frozen session manifests (394f00f6)
• Isolate execution-owned MCP registry overlays (96e4d296)
• Commit local reset targets with runtime mutation receipts (821137c3)
• Expose profile-scoped Bot relay mailbox RPCs on the authority (792aa35a)
• Migrate queued Bot mailbox identities without replaying claims (af49e2fc)
• Send local Bot DMs to the discovered canonical authority (47ba694e)
• Admit identified Bot Chat relay deliveries through session authority (998df8cc)
• Reserve exact owner-started admission worker claims (fbdfd46d)
• Expose authenticated owner mutation snapshots (d6331c48)
• Freeze ACP tool policy and bind execution-owned edit consent (e2f5cfc6)
• Reserve hosted API identities through the authority (6b278ca4)
• Admit API runs before acknowledging execution (f2d9cea3)
• Run bound API turns on the shared cached agent (dea4f0c5)
• Restore server-bound API session identities (76532ae1)
• Retain claim-fenced structured admission results (262e0ebf)
• Compose worker compression lifecycle and delegation persistence (6c57ad37)
• Publish committed worker completions through authenticated owner bridge (d94ccc2d)
• Fence delegation receipts with shared worker sequence and epoch (be85ca24)
• Route registered worker delegation writes through durable outbox (1ee6545f)
• Add execution-bound delegation ledger operations (8128e88f)
• Persist worker titles activity and route sidecars with receipts (235e4f12)
• Add assignment-fenced worker constructor and finalization handlers (b7de5a8e)
• Atomically compact and advance worker transcript assignments (c2e77eba)
• Preserve worker history and cache lineage identities (e63e1101)
• Add receipted worker compression guards and leases (d51afe4c)
• Route REST imports and deletion through mutation receipts (2cdd103d)
• Route REST sidebar edits through the shared authority (eb329d21)
• Coordinate shared mutations and publish committed revisions (eb42a002)
• Reuse transactional rewind with generation and receipt fences (6777ffa4)
• Import session histories atomically with retry receipts (b9194595)
• Fence destructive deletion without erasing runtime obligations (e5249c9a)
• Commit sidebar edits with canonical mutation receipts (0b1b8e0f)
• Project execution-owned approvals to ACP viewers (97a24c10)
• Attach ACP transport to canonical session execution (8dd92a30)
• Persist assigned worker prompt context and usage anchors (c6540cb9)
• Admit local automation through owner durable FIFO (1642b339)
• Queue due gateway heartbeat ticks through canonical admission (ab44af2c)
• Admit trusted gateway completions to the durable session FIFO (7cd1b000)
• Fence worker terminal receipt after sequenced durable writes (21a48aea)
• Authenticate live worker persistence and explicit restart adoption (9d7d7e2a)
• Receipt worker main and auxiliary usage in canonical transactions (9d896c49)
• Atomically receipt structured worker transcripts and turn leases (2abe47de)
• Dispatch bound local slash commands through gateway handlers (b0377e92)
• Share authenticated canonical slash discovery with legacy catalogs (fcf50e03)
• Authenticate native HTTP through private daemon grants (75764b2a)
• Commit local creation policy and restore cold authority routes (aa2624ba)