Changelog

detected between upstream commits a9f3f087 and 226e8de827a6 (July 14, 2026).

Major upstream release with new commands, config keys, env vars, and behavior changes across nearly every episode doc. Full list below.

These upstream docs already had published episodes. A stale 59-episode coverage ledger caused false "new episode" labels. The ledger is now synced to all 87 published episodes.

Unclassifiable changes across various docs.

.

No episodes were built during this run because the Desktop worker endpoint timed out.

Upstream quickstart.md gained opt-in Blank Slate with explicit platform_toolsets.cli list. Build deferred - Desktop GPU worker unreachable.

Upstream installation.md: Nix is no longer an explicitly supported install path (best-effort only). Build deferred.

Upstream updating.md: Nix no longer explicitly supported. Build deferred.

Upstream slash-commands.md gained /prompt, /moa, /model, /timestamps, /learn, /suggestions, /blueprint, /pet, /hatch, /credits, /billing, /new, /platform commands. Build deferred.

Upstream cli-commands.md gained hermes moa, hermes whatsapp-cloud, hermes auth, hermes project, hermes pets, hermes desktop, hermes update, --provider, --safe-mode, migrate-legacy, enroll, and many more. Build deferred.

Upstream sessions.md gained export overhaul (jsonl, md/qmd, html, trace formats), archive, list improvements, gateway session auto-reset. Build deferred.

Upstream profiles.md: per-profile gateways supervised by s6-overlay, tool subprocesses keep real HOME by default. Build deferred.

Upstream memory.md gained write_approval gate, memory_notifications (off/on/verbose), background_review config. Build deferred.

Upstream memory-providers.md gained mode (platform/oss), host, rerank config keys. Build deferred.

Upstream curator.md gained consolidate and prune_builtins config keys. Consolidation opt-in by default. Build deferred.

Upstream tool-gateway.md gained hermes setup --portal and hermes portal info commands. Build deferred.

Upstream web-search.md gained formats, secret_key, image_proxy config keys. Build deferred.

Upstream telegram.md gained auto/edit draft streaming modes, platforms config key, rich messages, status indicators. Build deferred.

Upstream discord.md gained DISCORD_ALLOWED_USERS, DISCORD_ALLOW_ALL_USERS, GATEWAY_ALLOW_ALL_USERS, voice_fx config. Build deferred.

Upstream slack.md gained mpim:history, mpim:read, message.mpim scopes, rich_blocks, cron_continuable_surface. Build deferred.

Upstream whatsapp.md gained platforms, whatsapp, extra config keys with text_batch_delay. Build deferred.

Upstream email.md: stricter by default, dedicated inbox recommended. Build deferred.

Upstream sms.md gained SMS_WEBHOOK_HOST env var, telephony skill credential sharing. Build deferred.

Upstream webhooks.md gained prompt, filters, script config keys with declarative payload filtering. Build deferred.

Upstream skills.md gained hermes skills opt-out/opt-in, url/clawhub/lobehub/browse-sh sources, write_approval, groupings. Build deferred.

Upstream cron.md gained mirror_delivery, cron_continuable_surface, reply_in_thread, require_mention config keys. Build deferred.

Upstream goals.md gained /goal draft, /goal show, /goal wait/unwait, completion contracts (outcome, verification, constraints, boundaries, stop_when). Build deferred.

Upstream delegation.md: delegate_task runs inside parent's current turn and blocks by default. Build deferred.

Upstream kanban.md gained kanban_block, blocked, dependency_wait, block_loop_detected, unblocked commands, scratch workspace lifecycle. Build deferred.

Upstream hooks.md gained session_id, platform, model, coding, attempt, final_response, changed_paths, delegation context variables. Build deferred.

Upstream mcp.md gained connect_timeout, idle_timeout_seconds, max_lifetime_seconds config, playwright server. Build deferred.

Upstream built-in-plugins.md gained security-guidance, observability/nemo_relay, teams_pipeline plugins. Build deferred.

Upstream code-execution.md gained passthrough allowlist, terminal, env_passthrough config keys. Build deferred.

Upstream batch-processing.md gained --reasoning_effort flag. Build deferred.

Upstream python-library.md gained model config key. Build deferred.

Upstream providers.md gained provider, project_id, region, chat_template_kwargs, enable_thinking config keys. Fireworks native slash-form catalog IDs. Build deferred.

Upstream fallback-providers.md gained fallback_chain config with multiple provider entries. Build deferred.

Upstream credential-pools.md gained secret_source, secret_fingerprint, anthropic config keys with structured credential entries. Build deferred.

Upstream configuring-models.md gained title_generation, provider, model, fallback_chain config keys. Build deferred.

Upstream security.md gained mode (smart/manual) and deny config keys. Build deferred.

Upstream docker.md: HERMES_DASHBOARD_INSECURE deprecated/no-op, hard_stop_enabled, hard_stop_after config. Build deferred.

Upstream configuration.md gained TERMINAL_DOCKER_NETWORK, provider/model/base_url config, smart/manual approval modes, docker_network, max_turns, cache_ttl, and many more config keys. Build deferred.

Upstream environment-variables.md gained FIREWORKS_API_KEY, LM_API_KEY, LM_BASE_URL, COPILOT_API_BASE_URL, KIMI_CODING_API_KEY, and dozens more env vars across all platforms. Build deferred.

49 docs deferred (over cap of 2, logged for next run).

Re-narrated, TTS, HyperFrames rebuilt, rendered. Old video Jwr9Bw2wYUw deleted, new video ym-ODN1Bq3k uploaded. Site page.

Re-narrated, TTS, HyperFrames rebuilt, rendered. Old video VD5eOz1xwnw deleted, new video meWK8kRHtC0 uploaded. Site page.

Re-narrated, TTS, HyperFrames rebuilt, rendered (initial render failed, re-rendered successfully). Old video kiJ31P_kPnE deleted, new video dWo5iKNUSKc uploaded. Site page.

Re-narrated, TTS, HyperFrames rebuilt, rendered (initial render failed, re-rendered successfully). Old video GMzgaogqFLw deleted, new video yJpo7vpP76o uploaded. Site page.

The batch produced no artifacts. It remained pending and the July 14 doc-watch confirmed a recut is required.

Desktop GPU worker was down (port 9007 not listening). User restarted it on the Desktop.

Initial recut batch completed (returncode 0) but committed nothing to git. Root cause: agent did the work but never ran git add/commit/push. Fixed with a second job that committed 111 files and re-rendered 2 failed episodes.

Site deployed via wrangler. guard_deploy passed (87/87 embeds). All 4 live pages verified with correct new YouTube IDs.

detected between upstream commits a9f3f087 and 8895335453c6 (July 12, 2026).

50-provider-landscape (Fireworks env var), 59-env-vars (FIREWORKS_API_KEY), 58-configuration (smart/manual approval modes), 46-batch-processing (--reasoning_effort), 56-security (approval mode config).

autonomous-ai-agents skill doc (behavior change: smart approval mode by default).

quickstart.md (unclassifiable), api-server.md (unclassifiable).

contributing.md (developer guide, out of scope).

(over cap of 2, logged for next run).

Upstream providers.md gained Fireworks native slash-form catalog IDs. Build deferred - Desktop GPU worker unreachable (connection timed out).

Upstream environment-variables.md gained FIREWORKS_API_KEY. Build deferred - Desktop GPU worker unreachable.

Upstream configuration.md gained smart/manual approval modes. Build deferred - Desktop GPU worker unreachable.

Upstream batch-processing.md gained --reasoning_effort flag. Build deferred - Desktop GPU worker unreachable.

Upstream security.md gained approval mode config. Build deferred - Desktop GPU worker unreachable.

user-guide/skills/bundled/autonomous-ai-agents/autonomous-ai-agents-hermes-agent.md: Material change to uncovered doc. Smart approval mode by default. Not auto-created; logged for production pipeline.

getting-started/quickstart.md: 1+ 0- lines, unclassifiable. Needs human review.

user-guide/features/api-server.md: 9+ 1- lines, unclassifiable. Needs human review.

4 docs deferred (over cap, logged for next run).

detected between upstream commits 3a1a3c7e and a9f3f087 (July 10, 2026).

No material changes to primary episode docs were detected.

No new end-user docs were added.

provider-routing.md had 21+ 21- lines, unclassifiable. Needs manual inspection to determine if re-cuts are needed.

user-guide/features/provider-routing.md: 21+ 21- lines, unclassifiable change. No clear material signals but not purely cosmetic.

1 flagged doc needs human review to classify as material or cosmetic. No auto-re-cuts triggered.

detected between upstream commits f64e4f4f and 3a1a3c7e (July 9, 2026).

No material changes to primary episode docs were detected.

No new end-user docs were added.

All modified docs had no patch data available. Each needs manual inspection to determine if re-cuts are needed.

guides/webhook-github-pr-review.md

reference/cli-commands.md

user-guide/messaging/webhooks.md

All 3 flagged docs need human review to classify as material or cosmetic. No auto-re-cuts triggered.

re-cut. Upstream reference/cli-commands.md gained --script flag for filter/transform scripts under ~/.hermes/scripts/. The webhook pipeline now supports declarative payload filtering.

re-cut. Upstream user-guide/messaging/webhooks.md gained filters config key, script field, and declarative payload filter system (field, contains, equals, in_file, prompt, any). Major expansion of webhook routing and transformation capabilities.

guides/webhook-github-pr-review.md: Material change to uncovered doc. New config keys for field-based and in matching. Candidate for new episode on GitHub PR review webhooks. Not auto-created; logged for production pipeline.

1 doc deferred (over cap, logged for next run).

(video ID MI7yjhMTMSM). The native Hermes desktop app for macOS, Windows, and Linux. Same agent, same config, same sessions as the CLI. Covers launching with hermes desktop, chat with streaming tool output, drag-and-drop, the sticky model picker, settings as a real UI, management panes, Cmd+K command palette, and connecting to a remote backend. Details: 8 scenes (concept, terminal, concept, terminal, concept, concept, terminal, concept), ~2:00 duration, MP4 8,009,567 bytes. Module: M1 (Get Running). STEP 6b: episode-terms (4: Desktop App, Preview Rail, Command Palette, Remote Backend), learning-path (Beginner path), glossary (4 entries).

re-cut (old video PeXAw97bQhU deleted, new video nJzBjURo7pw). Upstream doc gained a major export overhaul: four formats (jsonl, md/qmd, html, trace), --redact for secret scrubbing, --only user-prompts, --dry-run, and --upload for Hugging Face Agent Trace Viewer. New export scene added, management cards scene trimmed.

re-cut (old video 2PD5VmiHCps deleted, new video A5xRFxrLAgg). Upstream doc gained required permissions section, Server Members Intent (now required alongside Message Content), and fail-closed allowlist behavior. Narration updated to cover all three. Two new scenes added: dedicated intents scene and permissions scene.

(video ID 5Ie6_7C6yPM). Connect Hermes to Raft, the agent network from raft.build, via a local wake-channel bridge. Module 5: Everywhere You Are.

Site page, learning-path entry, glossary term, and episode-terms added.

site/glossary.html: added "Raft" term.

site/learning-path.html: added raft to "I want private or unusual messaging" path.

brand/episode-terms.json: added 4 terms for raft.

episodes/42-mcp/page.html: added idle_timeout_seconds and max_lifetime_seconds to summary.

episodes/59-env-vars/page.html: added HERMES_STREAM_STALE_GIVEUP and safe-mode shell-hook skip to summary.

brand/youtube-ids.json rebuilt with the verified slug to video ID map for all 84 channel videos (was empty; the daily rebuild had been wiping YouTube embeds back to local MP4s).

26 new-era episodes (SimpleX, Teams, Photon, IRC, TTS, Tool Search, provider guides, and more) added to the module sidebar and search index. They were previously reachable only by direct URL.

irc, google-vertex, and platform-support pages created (videos were live on YouTube with no site page).

scripts/guard_deploy.py refuses any deploy that would reduce the live embed count. scripts/yt_channel_diff.py captures upload IDs by channel diff instead of title search. scripts/verify_thumb.py is the single thumbnail pixel check.

one-off debug scripts and stale state files quarantined to archive/fossils; junk and duplicate episode dirs archived.

Full audit, root causes, and forward workflow: see PIPELINE-RESET-HANDOFF.md.

detected between upstream commits 4b9d9b20 and f64e4f4f (July 7-8, 2026).

No material changes to primary episode docs were detected.

No new end-user docs were added.

All modified docs had no patch data available (compare API capped at 300 files). Each needs manual inspection to determine if re-cuts are needed.

developer-guide/context-compression-and-caching.md (developer guide, out of scope).

All 9 flagged docs need human review to classify as material or cosmetic. No auto-re-cuts triggered.

Material change to uncovered doc. New config keys: sources, bitwarden, enabled, project_id. Behavior change: env/shell wins by default. New env var: override_existing. New episodes are not auto-created. Logged for production pipeline.

New end-user doc about 1Password integration as a secret source. New episodes are not auto-created. Logged for production pipeline.

None (2 actionable within cap of 2)

detected between upstream commits 708b57e0 and 7e7e3af5 (July 5-6, 2026).

No material changes to primary episode docs were detected.

No new end-user docs were added.

All modified docs had no patch data available (compare API capped at 300 files). Each needs manual inspection to determine if re-cuts are needed.

developer-guide/context-compression-and-caching.md (developer guide, out of scope).

All 15 flagged docs need human review to classify as material or cosmetic. No auto-re-cuts triggered.

New episode uploaded to YouTube (j5gFrjjvrf4). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (k0_8d2Mmc5c). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (4ZxfTjH2RVE). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (i0bIz5qwOCQ). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (xXT75y-SChQ). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (_al7Hn9HpqI). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (z169OIZleFY). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (Ub7Ovn003RQ). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (yL2gPgcT-vE). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (x_PWDcW5I1I). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (535WJaX_zP0). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (ZeUbyxez2GI). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (EmPp5K3CqUI). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (MKvzn64GA1Y). Branded thumbnail set, metadata updated, added to playlist.

New episode uploaded to YouTube (1bjg7sarXbU). Branded thumbnail set, metadata updated, added to playlist.

Episodes 13-57 and 83 swapped from local MP4 to YouTube iframe embeds. All 41 pages now serve YouTube embeds instead of local video players. youtube-ids.json updated, local-video-overrides.json cleaned.

Desktop installer is now the recommended path for macOS and Windows. Curl one-liner repositioned as CLI-only path. Narration updated, TTS regenerated, MP4 re-rendered.

Nix is now Tier 2/best-effort only. Default package includes all libraries. Narration and episode.mjs updated, TTS regenerated, MP4 re-rendered.

Nix note updated to reflect best-effort status and all-libraries default. Narration updated, TTS regenerated, MP4 re-rendered.

Curator self-grooming changes from upstream docs. Narration updated, TTS regenerated, MP4 re-rendered.

New features: context_from job chaining, --workdir, enabled_toolsets, wakeAgent pre-run gate, Slack in-channel continuation. 3m 9s, 10.4 MB.

New commands: /goal draft, /goal show, /goal wait/unwait, completion contracts, automatic background-process parking. 2m 25s, 8.0 MB.

New features: tenant namespaces, --scheduled-at, --max-runtime, --max-retries, --idempotency-key, respawn guard, structured handoff, bulk verbs. 4m 11s, 14.8 MB.

New hooks: pre_verify, transform_tool_result/transform_terminal_output/transform_llm_output, subagent_start/stop, pre_gateway_dispatch, BOOT.md startup checklist. 2m 31s, 8.3 MB.

6 duplicate videos deleted from YouTube channel (old versions of -, that were replaced by new uploads). Channel verified at 75 videos, zero duplicates.

Doc-watch cron updated to include changelog update + git push after each run.

Recut upload cron scheduled for 2026-07-06 19:45 UTC (8 recut episodes).

New episode upload cron scheduled for 2026-07-07 19:45 UTC (11 new episodes).

New changelog skill created (hermes-howto-changelog) documenting the changelog update process.

Pitfall 64 added to gpu-worker skill: replacement uploads must delete old video first.

27 episodes checked across recut batches 3-7: all narrations match current upstream docs. No material changes detected.

Image-to-image editing added upstream. The image_generate tool now edits existing images when the active model supports it. New inputs: image_url (source photo) and reference_image_urls (style/composition cues). Four backends support editing: FAL (edit-capable models), OpenAI gpt-image-2, xAI Grok Imagine, Krea 2. Added a new concept scene (Scene 5) covering the edit mode. Expanded from 8 to 9 scenes. Rendered 202s, 10.7 MB. Frame inspection confirmed all scenes clean. Reason: upstream commit 9a2f275 added the image-to-image editing section to image-generation.md.

New config key auto_subscribe_on_create (default true). When a worker calls kanban_create from a session with a persistent delivery channel, the originating session is auto-subscribed to the new task's events. Set false to require explicit kanban_notify-subscribe calls. Updated the human-in-the-loop scene sub text and narration to name the config key. 11 scenes, 271s, 15.3 MB. Frame inspection confirmed the new text renders cleanly. Reason: upstream commit 9a2f275 added auto_subscribe_on_create to the kanban config table.

1 new-episode candidate detected (reference/tools-reference.md, image_generate tool entry). Logged for manual authoring. New episodes are not auto-created.

user-guide/skills/optional/payments/payments-stripe-projects.md: borderline change, logged for human review.

Built the doc-to-episode ledger. 59 episodes, 90 source references, 87 blob SHAs. Every source doc is now machine-traceable to its episode.

Change detection script. Monitors upstream NousResearch/hermes-agent (branch main, path website/docs/) via gh api. Compares last-seen SHA against HEAD. Falls back to per-doc SHA audit when the compare API is capped at 300 files. Classifies changes: added, modified, removed, renamed. Guardrails: single-flight lock, kill switch, per-run cap (2), notification hook.

Material vs cosmetic decision tree with 5 worked examples from real upstream commits.

Full pipeline orchestration. Detects changes, builds episodes (TTS + composition + check + render + ffprobe), updates coverage.json, git backup, notifies. Dry-run mode for testing.

Windows Task Scheduler setup. Daily at 9 AM with catch-up enabled.

Seeded to May 24 baseline (when episodes were built) so the first real run detects all changes between episode creation and now.

LLM consolidation is now opt-in (was always-on). New config key curator.consolidate: false. New flag hermes curator run --consolidate. Updated script, narration, composition, description, how-to. Rendered via HyperFrames (1920x1080, 195s, 10.7 MB). TTS via ElevenLabs. Reason: upstream commit 7bbffce made consolidation opt-in.

Fixed 4 broken source URLs (404 dead links on published site):

(updating): cli-reference/doctor -> reference/cli-commands

(one-line-install): getting-started/windows -> user-guide/windows-native

(vision): user-guide/context-references -> user-guide/features/context-references

(sessions): user-guide/memory -> user-guide/features/memory

All 4 deployed live to actionableops.com.