Hermes Agent fixes the state.db failures from 0.21.0
The state.db failures that started with Hermes Agent version 0.21 are fixed, and the agent can now sign in from your password manager.
01 The session store holds together
The session store.
Other processes stopped writing into your live state.db
- Profile gateways keep room state in
shared-state.db - The dashboard opens the database read-only first
doctor --fixrefuses a checkpoint it can't prove safe
Several processes wrote into the live database and cancelled each other's locks, which corrupted some installs. Gateways, the dashboard, cron and doctor all stopped.
A damaged search index no longer ends your turn
- Search degrades while the index is damaged
- The index rebuilds later
- Your transcripts stay untouched
A damaged search index used to count as whole-file corruption, and ended the conversation. Now search degrades, the index rebuilds later, and transcripts stay untouched.
One bad row no longer crashes sessions list
- A bad timestamp shows as
?with a warning - Export and insights read past it
- Bulk delete handles more than 999 sessions
One corrupt row, like a timestamp stored as text, used to crash the whole session list. Now it shows a question mark and a warning, and the rest keeps working.
Opening state.db behind a busy gateway is instant
hermes command, then "database is locked"A quick hermes command behind a busy gateway could stall twenty seconds, then fail as locked. It now skips the write lock when there's nothing to write, and opens in a hundredth of a second.
02 Many profiles, one machine
Many profiles on one machine.
Each profile keeps its own secrets under one gateway
- Secondary bots stop inheriting the default allow-lists
- Local MCP servers stop receiving the default vault secrets
- A media reply can't attach another profile's
.env
Under one gateway, the default profile leaked into the others. Its allow-lists, its vault secrets for local MCP servers, and its credential files in media replies all stay put now.
A second hermes serve joins the one already running
- One host-wide lock for the backend and the gateway
- The desktop app attaches to the running backend
- Bot Mode stops spawning a backend per profile
Hermes now runs one backend per machine. A second hermes serve, for any profile, attaches to the running one, and so does the desktop app, instead of spawning more.
Remote desktop sessions stay signed in when your laptop wakes
- Refreshes carrying the same token share one request
- A slow sign-in provider no longer freezes the gateway
- Hermes Cloud agents pick this up automatically
On a remote gateway, a waking laptop could replay a used token and get the session revoked. Those refreshes now share one request, and Hermes Cloud agents get the fix on their own.
03 The agent does more for you
New things the agent can do.
The agent signs in from 1Password without seeing the password
- 1Password, Bitwarden or the local Hermes vault
- You confirm every card it fills at checkout
- Cron, webhook and API sessions can't spend
The agent can sign in, pay and fill addresses from 1Password, Bitwarden or the Hermes vault, without the model seeing a secret. You confirm every card, and unattended sessions can't spend.
A fresh install can chat before you add a key
- Free inference on one Nous model
- Connectors such as Gmail, Linear and Notion
/loginfrom inside a chat
Every install gets a Nous free tier, so the first command answers instead of asking for an API key. Connectors come with it. The guided first launch is still behind a flag.
Plugins come from a curated catalog, each pinned to a commit
- A curated index, every entry pinned by SHA
- One Plugins page in the desktop app
- A Connectors page replaces the MCP tab
Plugins now come from a curated catalog, each pinned to an exact commit. The desktop app installs them from one page, and a Connectors page replaces the MCP tab.
Pin a skill into every new session
skills.auto_loadinconfig.yaml--format stream-jsonprints structured outputhermes sessions set-journal-modeconverts a store offline
Skills listed in your config now load into every new session, across the CLI, gateway, cron and API. The CLI also streams structured JSON output.
The desktop app adds a Simple mode for just talking to Hermes
- Hides the terminal, file and review panes
- Full French, German and Spanish
- Type any model name into the picker
The desktop app adds a Simple mode that keeps the sidebar and chat and hides the developer panes. Advanced stays the default. The app also speaks French, German and Spanish.
04 Models
Models.
GPT-6 and Claude Opus 5.5 arrive in the model picker
- GPT-6 Sol and Luna, with Codex 900k variants
- Claude Opus 5.5 on Nous Portal and OpenRouter
- DeepSeek V4.1 Flash on Nous Portal and OpenRouter
GPT-6 Sol and Luna replace the 5.6 tiers on Nous Portal and OpenRouter. Claude Opus 5.5 and DeepSeek V4.1 Flash join both pickers.
Hermes Agent v0.21.5
If your database was already damaged, the v0.21.2 release notes explain the repair. Full notes arrive with version 0.22.



















