Skip to content

FSB v0.9.65: Hermes MCP client allowlist + version bump

Choose a tag to compare

View all tags
@LakshmanTurlapati LakshmanTurlapati released this 14 May 06:02
v0.9.65
858e692
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

Adds Hermes to the trusted MCP visual-session client allowlist. Prior to this release, every action-tool call from a Hermes-labeled MCP client was rejected with Visual session contract / Client label "Hermes" is not on the trusted v0.9.36 badge allowlist. Closes #47.

Also bumps the project version 0.9.64 → 0.9.65 across the Chrome extension, root package, showcase Angular app, README badges, and Chrome Web Store listing copy.

What's fixed

  • mcp/src/tools/visual-session.ts — Added 'Hermes' to MCP_VISUAL_CLIENT_LABELS.
  • extension/utils/mcp-visual-session.js — Added 'Hermes' to the extension-side mirror so the dispatcher's allowlist check matches the MCP side. The shared allowlist now contains 13 canonical client labels: Claude, Codex, ChatGPT, Perplexity, Windsurf, Cursor, Antigravity, OpenCode, OpenClaw, OpenClaw 🦀, Grok, Gemini, Hermes.

Version bump

Bumped 0.9.64 → 0.9.65 in:

  • package.json (version, zip script, badge URL)
  • extension/manifest.json (name + version)
  • README.md (title, badge, status banner)
  • extension/README.md
  • store-assets/chrome-web-store/listing-copy.md
  • mcp/README.md (cross-reference parenthetical)
  • showcase/angular/package.json + package-lock.json
  • showcase/angular/src/app/core/seo/version.ts + public/llms-full.txt + public/sitemap.xml (regenerated by scripts/build-crawler-files.mjs)

The MCP package version (fsb-mcp-server@0.9.0) is independent and unchanged. Frozen contract anchors (v0.9.36, v0.9.60, v0.9.61, v0.9.62) referenced in source comments and tests are historical phase markers, also unchanged.

Compatibility

  • No protocol or schema changes. Existing agents and MCP clients continue to work unmodified.
  • To pick up the Hermes allowlist fix, reload the FSB Chrome extension. No MCP server redeploy is required (the MCP server's allowlist was already updated server-side as part of this release).

Verification

  • mcp-visual-session-contract: 116/116 pass
  • visual-session-schema-lock: 314/314 pass
  • mcp-version-parity: 10/10 pass
  • skill-fsb-spec: 48/48 pass
  • CI on both release PRs (#48, #49): extension ✅, mcp ✅, showcase ✅

Download

The packaged Chrome extension (fsb-extension-v0.9.65.zip) is attached below. To install:

  1. Download and unzip.
  2. Open chrome://extensions, enable Developer mode.
  3. Click Load unpacked and select the unzipped directory.

Or get it from the Chrome Web Store once the store review completes.

Pull Requests

  • #49 — fix(visual-session): add Hermes to MCP client allowlist
  • #48 — chore(release): bump version 0.9.64 -> 0.9.65
Assets 3
Loading