Hermes merged 55 PRs on October 18 The ones worth knowing: • /usage in Desktop and the TUI now shows your provider account limits before you send the first message • Docker sandboxes are tighter: files can no longer carry setuid/setgid bits or file caps back to the host, and files written as root are handed back to your user at teardown • Plugins can now post to the current conversation and edit that message in place with ctx.post_message • Two new plugin hooks: post_compaction fires on every compaction path, and on_session_delete tells plugins about every session delete and archive • Plugin slash commands now receive the calling session on every surface • Clients that fall behind, reconnect or sit waiting now recover from the gateway instead of failing the turn • Unattended gateways no longer freeze and exit on a shell-hook consent prompt, and recorded consent registers the hook without a restart • Chat input stays in FIFO order, and session identity plus full history now survive compression, rewind and orphan reaping • Desktop session lists, resume and Bots groups stay stable across restarts • Stale dirty worktrees are archived before removal, and idle scratch clones are pruned again (one host had 100 GB held) • A wave of new catalog plugins, including WhatsApp voice, an Italian Desktop language pack, Hermes Gadget hardware, the Tsubasa model provider and Scalekit Here is the full list: DESKTOP IMPROVEMENTS (5 PRs) • Desktop/TUI /usage shows provider account limits before the first message • fix(desktop): New Bot's Capabilities tab loads when the name is typed later, and has room to use • fix(desktop): keep Desktop session lists, resume and Bots groups stable across restarts • fix(desktop): align main model settings controls • feat(plugin-catalog): add hermes-lang-it-full, an Italian Desktop language pack VOICE & REAL-TIME (3 PRs) • Clients that fall behind, reconnect or wait recover from the gateway instead of failing the turn • feat(plugin-catalog): add hermes-whatsapp-voice plugin • plugin-catalog: fish-audio v1.7.7 DEVELOPER TOOLS & PLUGINS (28 PRs) • Plugins get a post_compaction hook on every compaction path • feat(plugins): ctx.post_message: post to the current conversation and edit in place • Plugin slash commands receive the calling session on every surface • Plugins hear about every session delete and archive: on_session_delete hook • feat(plugins): public names for the skills tool's discovery and lookup helpers • feat(plugin-catalog): add scalekit • plugin-catalog: add completion-sound • catalog: codex-account-switch 1.2.3 (Hermes 0.22 support) • chore(plugin-catalog): re-pin hermes-windows-ops to a reachable commit • catalog: update Hermes Fleet Connector to 0.3.0 • feat(plugin-catalog): add edit-ledger • feat(plugin-catalog): add interim-ledger • catalog: add hermes-jetstream • feat(plugin-catalog): add gadget (Hermes Gadget hardware platform) • feat(catalog): add Tsubasa model-provider plugin • plugin-catalog: add hermes-seo • plugin-catalog: add offpeak-bekci (Ollama Cloud off-peak window + approval-gated work queue) • plugin-catalog: hermes-teammates 1.0.0 • plugin-catalog: bump hermes-vcc-engine to 0.4.1 • Update catalog entry: deepseek-search-fetch 1.0.6 (title, theme-safe banner, one known-issue note) • plugin-catalog: bump hermes-cron to 1.4.2 • chore(plugins): bump prompt-queue to latest commit • plugin-catalog: bump hermes-dreaming to 2.9.4 (the holographic provider's secret screen, a fact's origin) • chore(plugin-catalog): update Magi to v1.7.8 • plugin-catalog: openinvest re-pin to 0b9268b (0.25.0) • chore(plugins): pin birkin-mnemosyne to core 0.7.2 • docs(plugin-catalog): make Ace media discoverable by service name • docs(catalog): add Antenna banner image SECURITY & SECRETS (6 PRs) • Docker sandbox files can no longer carry setuid/setgid or file caps back to the host, persistent sandboxes included • Docker sandbox files written as root are handed back to your user at teardown • fix(secret-scope): the .env memo notices a same-size edit inside one timestamp tick • fix: profile-registry grants, hosted plugin route auth, and per-session Docker workspaces • fix(gateway): keep per-session settings and launch secrets that didn't stick • A gateway registers a shell hook once its consent is recorded, no restart INTEGRATIONS & CHAT (3 PRs) • fix(gateway): keep chat input in FIFO order and land Bot Chat deliveries whoever created the chat • fix(gateway): keep session identity and full history across compression, rewind and orphan reap • fix(gateway): serve goal-card criteria, subagent kill and steer, agent reactions and the connection card on the shared gateway STABILITY & FIXES (10 PRs) • Unattended gateway no longer freezes and exits 75 on a shell-hook consent prompt • fix(gateway): parked-profile ingress, downgrade relaunch, side-agent drain, idle exit, worker birth, Kanban ACK wait, log lock order • fix(gateway): a prune is not a permanent tombstone, and retirement is keyed by profile • fix(gateway): name an elevated gateway from its control pipe instead of OpenProcess • fix(update): a system-scope dashboard unit without root gets one exact restart command, not a polkit dump • fix(logging): the profile routing handler never builds a child handler under its own lock • Archive stale dirty worktrees before removing them, sweep every repo, ask on dirty exit • Idle scratch clones that share packs with a live repo are pruned again (100 GB held on one host) • Scratch prune logs one removal hint for root-owned entries instead of re-walking them hourly • test: the home-I/O guard exempts the PM generation dir around the running venv 55 new features and fixes xitter.cf/iamlukethedev/status/2…