v0.3.1

hermes-plugin-dev v0.3.1

Catalog review fix for NousResearch/hermes-agent#152699: hpd_check no longer imports the plugin it is linting.

• The model-facing hpd_check tool measures schema tokens statically. It parses register_tool schema dicts from the AST and never imports or executes the target, even if the model invents an execute flag.
• Import-based measurement (register() on a fake host, the same class of execution as hermes plugins doctor) is only available on a user-run CLI: hermes hpd check <dir> --execute (also python hpd_cli.py check <dir> --execute). That path is unsandboxed — only use it on code you trust.
• Tests cover a malicious __init__.py that is not executed on the tool path, and is executed only with --execute. Static token counts match the import path for this plugin and the hello-hermes template.
• Schema cost is unchanged: 2 tools, 190 o200k tokens.

Pin this tag's commit (796a35e4d893b985f1b61d8e11b5ae7e4118bf6f) in the catalog entry.

v0.3.0

hermes-plugin-dev v0.3.0

Catalog-review lessons from 8–10 Nov 2026, plus a sync with hermes-agent main @ acdc8f1ba6.

• New skill references: catalog-review-lessons.md, hooks.md (46 hook names), and capabilities-and-isolation.md.
• hpd_check now flags core-override rebinds, imports outside the public plugin API, unknown manifest fields, invalid kind, unknown capability ids, absolute URLs to authedFetch, wildcard binds, postMessage(..., '*'), and null/file:// origin allowlists.
• provides_middleware belongs in the catalog capabilities: block, not plugin.yaml. override=True is gated by the tools.override capability.
• README rewritten. Banner unchanged (assets/banner-v3.jpg). Schema cost: 2 tools, 190 o200k tokens.
• docs/SUBMISSION.md drafts the catalog entry (pin this tag's commit after the docs follow-up).