v1.9.1

Summary

Maintenance release bundling dependency updates and documentation/test improvements. Bumps gh to 2.95.0 and hermes-agent to v2026.6.19 (Hermes Agent v0.17.0). Removes a fabricated cp -rn seed mechanism that was incorrectly documented for the hermes entrypoint, refactors the monolithic e2e test file into focused modules, and adds README documentation for apple/container kernel bootstrap, multi-provider env files, and container runtime resource configuration.

Dependency Updates

• updated gh from 2.94.0 to 2.95.0
• updated hermes-agent from v2026.6.5 to v2026.6.19

Upstream Release Notes

hermes-agent v2026.6.5 → v2026.6.19

v2026.6.19 (Hermes Agent v0.17.0, "The Reach Release") —

• New messaging channels: iMessage via Photon Spectrum (no Mac relay required), the official WhatsApp Business Cloud API (no bridge process), the Raft agent-network gateway, and SimpleX group support.
• Background/async subagents via delegate_task(background=true), image-to-image editing in image_generate, Automation Blueprints, and Cursor's Composer model reachable through an xAI Grok subscription.
• The memory tool gained atomic batch operations; the desktop app expanded substantially (subagent watch-windows, installable VS Code themes, composer model selector); the dashboard gained a full profile builder and a rehauled Skills Hub.
• The skill curator no longer spends aux-model budget on routine runs (consolidation is now opt-in); dashboard login was hardened; 300+ issues closed plus a security round.

Changes

• 372b42e chore: bump gh, hermes-agent, debian digest (#115)
• 6e0d3bc Delete TODO.md
• eb90c58 fix(docs): remove fabricated cp -rn seed mechanism from hermes entrypoint (#112)
• 41bf09f refactor: split monolithic e2e test file into focused modules (#111)
• 7cd7428 docs: add container runtime resource config to README (#109)
• 907426f docs: document apple/container kernel bootstrap and multi-provider env files (#110)

v1.9.0

[1.9.0] - 2026-06-20

Summary

Adds support for apple/container CLI as an alternative container runtime on macOS 26 / Apple Silicon. Experimental for now, so set HARNESS_CONTAINER_RUNTIME=apple to check it out.

(this release was done from inside an apple/container! 🎉 )

Changes

• 6adb030 feat: implement HARNESS_CONTAINER_RUNTIME for apple/container support (#108)
• 4a1e56b rfc: HARNESS_CONTAINER_RUNTIME for apple/container support (#107)

v1.8.6

Summary

Fixes zensical documentation build failures and adds a PR docs build check to CI. Improves documentation for git/gh auth configuration persistence (including gh PAT login), documents and mise data/state persistence in deployment guides, adds to all deployment guides for cloud mode consistency, and fixes references to . Also disables in-container self-update notifications for all agents to reduce noise.

Changes

• ec7dd17 fix(docs): fix zensical build failure and add PR docs build check (#106)
• bdafa75 feat: persist git/gh auth config and document gh PAT login (#105)
• 5c05670 docs: persist .config and mise data/state in deploy guides (#104)
• c77eef5 fix: disable in-container self-update notifications (#100) (#101)
• a070a6e docs: add HARNESS_CLOUD_MODE=1 to all deployment guides (#103)
• 0bec7c2 fix(docs): replace .hermes-openrouter with .hermes (#102)

v1.8.5

[1.8.5] - 2026-06-19

Summary

Adds project-level config persistence — the container's ~/.config is now persisted at the project (cwd) level and shared across every agent working in the same project, so tool configs (e.g. jj) survive across interactive runs with no new flags. Also removes sudo and sudoers from the base image and renames the package scope from capotej to boldblackai across the repo. Bundled agent bumps: pi-coding-agent 0.73.1 → 0.79.2 (now published under the @earendil-works scope) and hermes-agent v2026.5.29.2 → v2026.6.5.

Dependency Updates

• updated pi-coding-agent from @mariozechner/pi-coding-agent@0.73.1 to @earendil-works/pi-coding-agent@0.79.2
• updated hermes-agent from v2026.5.29.2 to v2026.6.5
• updated gh from 2.93.0 to 2.94.0
• updated uv from 0.11.16 to 0.11.19
• updated cosign from 3.0.6 to 3.1.1

Upstream Release Notes

@earendil-works/pi-coding-agent 0.73.1 → 0.79.2

v0.74.0 — Repository and package references moved to earendil-works/pi-mono and the @earendil-works/* scopes.
v0.74.1 — Image generation support (OpenRouter), Together AI provider, Windows ARM64 binaries, and improved markdown/terminal rendering.
v0.74.2 — Rescue release telling Node 20 users to upgrade Node; pi update self-update commands now pass --ignore-scripts.
v0.75.0 — Breaking: raised minimum Node.js to 22.19.0; system prompt/context boundaries now use explicit XML tags; user-scoped npm pi packages install under ~/.pi/agent/npm/; undici 8 dispatcher replaces the custom fetch override.
v0.75.1 — Fixed config selectors, Anthropic/Bedrock/Azure provider compat, and OpenCode Go Kimi reasoning replay; removed non-working Codex fast model variants.
v0.75.2 — Fixed Bun-compiled binaries, Xiaomi MiMo thinking-mode replay, and Windows external-editor / npm self-update handoffs.
v0.75.3 — Fixed undici 8 HTTP/2 destroyed-session crashes by reverting to HTTP/1.1-only fetch dispatcher behavior.
v0.75.4 — Hardened npm install/release path (generated shrinkwrap, lifecycle-script allowlists, isolated install smoke tests); interactive update notes after pi update.
v0.75.5 — Collapsed read tool cards, async file tools (Windows), compat.forceAdaptiveThinking for custom Anthropic providers, more reliable git-pinned package updates.
v0.76.0 — --session-id for exact project-local session IDs, excludeFromContext for RPC bash, configurable provider retries/timeouts, better terminal editing (Apple Terminal, Windows/JetBrains detection, Unicode word navigation).
v0.77.0 — Claude Opus 4.8 support, --exclude-tools/-xt selective tool disablement, headless Codex subscription device-code login, streamingBehavior on extension input events.
v0.78.0 — --name/-n session naming, OSC 8 file:// hyperlinks in file-tool titles, exported convertToPng/parseArgs for extension authors.
v0.78.1 — Ant Ling + NVIDIA NIM providers, MiniMax-M3 support, ctx.mode and ctx.getSystemPromptOptions() for extensions.
v0.79.0 — Project trust gating for local inputs (with --approve/--no-approve), extension-controlled trust decisions, prompt-cache hit rate in the footer, richer SDK/RPC extension exports.
v0.79.1 — Claude Fable 5, prompt-template default arguments (${1:-7}), defaultProjectTrust setting, extension autocomplete trigger characters.
v0.79.2 — Clearer Bedrock data-retention validation guidance; experimental first-time setup flow (PI_EXPERIMENTAL=1); project-trust and OpenAI/Azure context-window fixes.

hermes-agent v2026.5.29.2 → v2026.6.5

v2026.6.5 (v0.16.0, "The Surface Release") — New native desktop app (macOS/Linux/Windows) with in-app self-update, drag-and-drop files, an inline model picker, and concurrent multi-profile sessions that can connect to remote Hermes gateways over OAuth or username/password. The web dashboard grew a full admin panel (messaging channels, MCP catalog, credentials, webhooks, memory, pluggable OIDC / username-password login), plus a "Quick Setup via Nous Portal" first-run path. Also: trimmed default skill set, NVIDIA/skills as a trusted tap, fuzzy model picker everywhere (desktop/web/TUI/CLI), and /undo [N] across all interfaces. Rode along with 2 P0 + 62 P1 closures and a security round (Starlette CVE pin, SSRF off-loop hardening, subprocess credential stripping).

Changes

• 43e549f Remove sudo and sudoers from base image (#89) (#99)
• 62fa2e0 feat: persist container ~/.config at the project (cwd) level (#94)
• 8f321fe chore: rename capotej → boldblackai across repo (#98)
• 8221e88 chore: bump gh, cosign, uv, hermes-agent (#97)
• d8e8fb8 Update references to bb site (#95)

v1.8.4

[1.8.4] - 2026-06-07

Summary

Adds AWS Bedrock support to the hermes variant by enabling the extra in the hermes-agent installation.

Dependency Updates

• added extra to hermes-agent installation

Changes

• 2d86507 Add bedrock to hermes-agent extras (#93)

v1.8.3

[1.8.3] - 2026-06-05

Summary

Bumps the GitHub CLI (gh) to 2.93.0 and hermes-agent to v2026.5.29.2. The hermes-agent update brings the full v0.15.x release series — a major refactor that collapses the core agent loop by 76%, adds a kanban multi-agent platform with swarm topology, dramatically improves cold-start performance, adds Bitwarden Secrets Manager integration, an interactive MCP catalog picker, and fixes a dashboard infinite-reload loop in Docker loopback mode.

Dependency Updates

• updated gh from 2.92.0 to 2.93.0
• updated hermes-agent from v2026.5.16 to v2026.5.29.2

Upstream Release Notes

hermes-agent v2026.5.16 → v2026.5.29.2

v2026.5.28 — The Velocity Release (1,302 commits, 747 PRs). Core run_agent.py reduced from 16K to 3.8K lines (-76%). Kanban grew into a full multi-agent platform with swarm topology, orchestrator auto-decomposition, per-task model overrides, scheduled tasks, and worktree-per-task. Cold-start perf improved: another second shaved, 47% fewer per-conversation function calls. session_search is 4,500× faster. Bitwarden Secrets Manager replaces per-provider API keys. Skill bundles, interactive MCP catalog picker, Ink TUI multi-session orchestrator. Two new image_gen providers (Krea 2, FAL). xAI deep integration (Web Search plugin, natural TTS, base_url leak guard). 15 P0 + 65 P1 fixes.

v2026.5.29 — Hotfix for v0.15.0. Dashboard infinite-reload loop in loopback/Docker mode fixed. Docker --insecure is now an explicit env opt-in (HERMES_DASHBOARD_INSECURE=1). MCP bare command resolution fixed for Docker. Kanban worker SIGTERM fix. Full skills.sh catalog (858 → 19,932 entries). Hindsight narrowed to observation-only.

v2026.5.29.2 — Packaging fix: bundled plugin.yaml manifests now shipped in wheel and sdist.

Changes

• c0cbe30 chore: bump gh 2.92.0 -> 2.93.0 and hermes-agent v2026.5.16 -> v2026.5.29.2 (#91)

v1.8.2

Summary

Adds context file mounting — ~/.agents/AGENTS.md and ~/.claude/CLAUDE.md are now automatically bind-mounted into the agent's context directory so cross-agent rules apply inside the container. Disable with --no-context-files (or -nc). Adds openssh-client to the base image and libolm-dev with the matrix extra to the hermes variant, enabling Matrix protocol support. Also includes a documentation website (GitHub Pages) and AWS deployment guide for hermes claws.

Changes

• d0b2f9e feat: add libolm-dev to hermes Docker image and matrix extra (#88)
• 233fda2 feat: mount global ~/.agents/AGENTS.md into agent context path (#85) (#86)
• e60c9ae feat: add openssh-client to base image (#87)
• bae55fd docs: add AWS deployment guide for hermes claw (#71)
• df8abd3 fix(docs): nav paths relative to docs_dir, not project root (#84)
• 8d2e9eb chore: pin all GitHub Actions by full commit SHA (#83)
• bffffbf docs: mark documentation website RFC as Implemented (#82)
• 2c6bce6 fix(docs): use uv tool install and add PR preview deployments (#81)
• f85a3ed docs: add Zensical documentation website with GitHub Pages deployment (#80)
• 23221be docs: add RFC format note and propose documentation website (#76)

v1.8.1

[1.8.1] - 2026-05-25

Summary

Introduces cloud/local mode (HARNESS_CLOUD_MODE) — passing --env-file now automatically switches agents to cloud mode where they auto-detect providers from API keys in the file, instead of hardcoding OpenRouter. Use --local to force local mode even with --env-file (e.g. harness -e .env --local -p "..."). Simplifies hermes persistence to a single directory and scopes npm persistence to the pi adapter. Adds multi-provider configs for opencode (Anthropic, Google, OpenAI, ZAI).

🎉 First release created via harness!

Changes

• 967f1c2 scope mount to pi adapter, biome fixes for pi-lens (#79)
• e1ace6c stop hardcoding openrouter, start multi provider support (#78)

v1.8.0

Summary

Migrates persistence to XDG data directories with per-agent mise support — interactive runs now store agent state, tool data, and trust settings under XDG_DATA_HOME/harness/<project>/<agent>/. Ensures npm install -g works correctly for the harness user by configuring a non-root prefix. Bumps all three agent dependencies: pi 0.71.1 → 0.73.1, opencode 1.14.31 → 1.15.10, and hermes v2026.5.7 → v2026.5.16 (major v0.14.0 "Foundation" release).

Dependency Updates

• updated debian:stable-slim base image digest
• updated @mariozechner/pi-coding-agent from 0.71.1 to 0.73.1
• updated opencode-ai from 1.14.31 to 1.15.10
• updated uv from 0.11.8 to 0.11.16
• updated hermes-agent from v2026.5.7 to v2026.5.16
• updated python-telegram-bot from 22.7 to 22.6
• removed croniter from hermes image

Upstream Release Notes

@mariozechner/pi-coding-agent 0.71.1 → 0.73.1

v0.72.0 — Breaking: replaced compat.reasoningEffortMap with model-level thinkingLevelMap. Added Xiaomi MiMo Token Plan provider (XIAOMI_API_KEY), custom provider base URL overrides via pi.registerProvider(), and post-turn stop callback (shouldStopAfterTurn). Fixed self-update detection.

v0.73.0 — Breaking: switched built-in xiaomi provider from Token Plan AMS to API billing endpoint; Token Plan users should switch to xiaomi-token-plan-{cn,ams,sgp}. Added incremental bash output streaming (output appears while commands run) and compact read rendering. Fixed OpenAI Codex WebSocket transport fallback and session lifecycle, Bedrock Claude Opus 4.7 xhigh thinking, and Qwen 3.5/3.6 model metadata.

v0.73.1 — Added self-update support for the upcoming npm scope migration (@mariozechner → @earendil-works), interactive OAuth login selection for providers, and JSONC-style models.json parsing (comments and trailing commas). Fixed pi -p treating YAML frontmatter prompts as flags, /copy on Wayland compositors, HTML session exports stripping skill wrapper XML, and Codex OAuth refresh errors.

opencode-ai 1.14.31 → 1.15.10

v1.14.32–v1.14.35 — Shell mode prompt editing restored; PTY connection tickets for authenticated terminal websockets; v2 session failure events; improved shell command handling (Bash/PowerShell/cmd); many HTTP API fixes (structured errors, CORS, pagination, basic auth); diff patch boundary preservation fix.

v1.14.37 — Canceling a task now cancels child subtask sessions; improved v2 session rendering; added session warping to another workspace.

v1.14.38–v1.14.40 — Desktop trusts system CA certs and HTTP_PROXY env vars; support for .well-known/opencode remote config files; fixed Cloudflare AI Gateway, Mistral Medium 3.5 variants, and server-overload auto-retries.

v1.14.41–v1.14.42 — Added Scout agent for repo research/docs/dependency inspection; added workspace sync and interactive split-footer mode for opencode run; session warping carries uncommitted file changes; moved desktop local server to separate utility process.

v1.14.43–v1.14.45 — Fixed provider API responses with non-JSON auth loader; included tool image attachments in ACP updates; fixed read tool permissions for worktree-relative paths; SDK throwOnError throws real Error with server message.

v1.14.46 — Added built-in customize-opencode skill; fixed Plan Mode security bypass where subagents could ignore parent deny rules; fixed MCP tool discovery with broken outputSchema.

v1.14.47–v1.14.48 — Restored TUI prompt editing keybindings; model changes persist across sessions; Scout materializes configured reference repos; image attachments preserved as-is (reverted auto-resizing).

v1.14.49 — Major: Added v2 model/provider listing API; DigitalOcean OAuth + Inference Router support; auto-creates opencode.jsonc with full schema; @mentions autocomplete in prompts; pinned recent sessions + quick slots in TUI.

v1.14.50–v1.14.51 — Added experimental background subagents for concurrent task execution; fixed HTTP event streams closing after initial connect; restored markdown rendering for session output; LiteLLM now requires v1.85.0-rc.2+.

v1.15.0 — Added Effect-based core event system for more complete event delivery; fixed versioned event projector lookups; desktop auto-hides menu bar on Linux/Windows.

v1.15.1 — Added collapsed thinking view (expandable inline); pinned sessions with quick-switch slots; fixed npm native binary recovery; fixed multiline @ mentions; preserved custom tool Zod schema metadata.

v1.15.10 — Restored legacy production desktop flows for opening projects and starting sessions.

hermes-agent v2026.5.7 → v2026.5.16

v2026.5.16 — Major v0.14.0 "Foundation" release: xAI Grok via SuperGrok OAuth with grok-4.3 at 1M context window; OpenAI-compatible local proxy (hermes proxy) turns any OAuth provider into an endpoint for Codex/Aider/Cline/Continue; x_search first-class X (Twitter) search tool; Microsoft Teams end-to-end; massive debloating wave (heavy backends lazy-install on first use, pip install hermes-agent works from PyPI); cross-session 1-hour Claude prompt caching; 180x faster browser_console evaluations; ~19 seconds off cold-start launch; two new messaging platforms (LINE + SimpleX Chat, total 22); /handoff live session transfer; native button UI for clarify on Telegram/Discord; Discord channel history backfill; LSP semantic diagnostics on every write; unified pluggable video_generate; computer_use cua-driver backend for non-Anthropic models; native Windows beta; 808 commits, 633 merged PRs, 12 P0 + 50 P1 closures.

Changes

• 1bd5625 update dependencies
• 912cf73 npm install -g (used by pi install) is now owned by harness (#74)
• 15f8a1d feat: XDG persistence migration with per-agent mise support (#73)
• 4ed42cb XDG data home agent persistence migration (#72)

v1.7.0

[1.7.0] - 2026-05-16

Summary

Adds warning when unrecognized CLI flags are passed, blocks AF_ALG socket creation via seccomp profile for security, adds git to the base image for mise compatibility, bumps hermes-agent to v2026.5.7 (Tenacity Release with multi-agent kanban, /goal lock, and security fixes), expands test coverage with code coverage metrics, and consolidates v1.6.x test coverage.

Dependency Updates

• updated hermes-agent from v2026.4.30 to v2026.5.7

Upstream Release Notes

hermes-agent v2026.4.30 → v2026.5.7

v2026.5.7 — Major v0.13.0 "Tenacity" release: multi-agent Kanban with durable board, heartbeats, reclaim, zombie detection, and hallucination gate; /goal lock keeps the agent on-task across turns; security wave closes 8 P0s (redaction ON by default, Discord role-allowlists guild-scoped, WhatsApp rejects strangers by default, TOCTOU fixes across auth.json and MCP OAuth); Google Chat as 20th messaging platform; gateway auto-resumes interrupted sessions after restart; checkmarks v2 rewrite for real pruning; providers become a pluggable surface; i18n support for 7 locales.

Changes

• a76c6e2 security: block AF_ALG socket creation via seccomp profile (#60)
• 6b9a0d2 feat: warn on unrecognized CLI flags (#66)
• 22a4d5b fix: add git to base image for mise compatibility (#67)
• 041b706 deps: bump hermes-agent v2026.4.30 → v2026.5.7 (#59)
• 191d601 ci: add code coverage metrics to test suite (#56)
• 434d2d4 test: v1.7.x coverage bump (8 distinct CLI invariants) (#58)
• 8b30d3b test: consolidated v1.6.x coverage (tracks N-T, replaces #49-#55) (#57)
• e773746 Change CODEOWNERS to assign ownership to @capotej
• 97a7156 test(volumes): --volumes is forwarded alongside interactive persistence mounts (#48)
• a27b6f1 test(volumes): --volumes is forwarded alongside --file mode (both mounts present) (#47)