v0.2.0

Added

• bcc on openmail_send and openmail_reply: blind copies hidden from To and Cc, for CRM logging addresses (HubSpot, Salesforce). Checked against outbound sender rules like every other recipient. (#7)

Fixed

• hermes plugins install openmail no longer fails Hermes's install scanner. A test fixture spelled /etc/passwd and ~/.ssh literally; the scanner flagged them as DANGEROUS and refused the install. (#9)
• CI installs the plugin's own httpx/websockets instead of relying on hermes-agent to bring them in. (#7, #9)

v0.1.2

Removes the key-minting tool (9 tools now); Bots are provisioned with hermes -p <bot> openmail setup --inbox <address>, which writes an inbox-scoped key to the profile's .env. Setup asks how to gate senders (allowlist, OpenMail sender rules, or later). Key scope read from /v1/me. Fixes attachment sends (multipart form). Skill rewritten around the native tools.

v0.1.1

Security hardening from the Hermes catalog review (#4): sender allowlist by default (--allow-all to open the gate), attachment paths confined to ~/.hermes/media and ~/.hermes/output, minted inbox-key tokens written to a 0600 file instead of returned to the model, @openmail/cli pinned to 0.7.2, openmail feedback user-confirmed.

v0.1.0

First release of the OpenMail platform plugin for Hermes Agent. Pinned in the Hermes plugin catalog as openmail.