v0.7.2

Hermes no longer triggers Gatekeeper prompts on macOS 26: the host makes charset_normalizer use its pure-Python fallbacks instead of the uv-installed cd/md native modules, which Gatekeeper keeps rejecting. This also covers the uv cache, and keeps the artifact preview and "Continue in another Agent" changes from 0.7.1.

v0.7.1

Artifacts can now be previewed in a new tab: Markdown is rendered, and text, images, PDF, sandboxed HTML, audio and video open in an OpenSider preview page. The artifact header also opens the artifacts folder, and the handoff action is now "Continue in another Agent". Hermes no longer triggers macOS Gatekeeper prompts for its managed Python modules.

v0.7.0

Hermes Agent can now run in the side panel: OpenSider detects hermes-acp / hermes acp, lists its models and reasoning-effort option, and maps the ask / accept-edits / don't-ask levels to the permission policy.

A streaming turn now keeps a minimum-height stage, so the message that started it stays put while steps come and go; the next message releases the previous stage.

v0.6.1

Fix a streaming bug that could render one reply many times over, and an old "the agent needs you" card no longer reappears after reopening the panel: a failed sidebar port is retired instead of staying subscribed, and handoff cards are now tied to their conversation and expire.

Old conversations no longer slow the panel down: sessions idle for 30 days, or the oldest ones needed to keep the mirrored state under 16MB, are archived automatically every 30 minutes. The transcript stays on disk, and an "Archived" group in the session drawer restores it on demand.

v0.6.0

Sessions keep their order and their artifacts. The drawer is sorted by creation time, so a running turn no longer reshuffles it, and a parallel session's output files land in that session instead of whichever chat is on screen.

Translate and search now show what the agent is doing and always end — a slow or failed run reports why instead of spinning forever. Agents can hand a step back to you (login, captcha) or ask for secrets through a sidebar form that fills the page directly, so values never reach the model. Waiting for a page command is now one blocking call, which keeps the agent out of sleep loops.

v0.5.8

Closing the side panel no longer cuts a running turn: the worker stays awake
while a turn is in flight, a reopened panel adopts the live turn, and a message
sent into a busy session is queued instead of dropped. Resuming an old session
without ACP history now carries your local transcript into the next prompt.

v0.5.7

A task keeps running when you close the side panel. The toolbar icon counts the
turns in flight, reopening a panel replays what happened while it was away —
including cards still waiting for your answer — and Stop parks the tab takeover
right away instead of waiting for a turn that may never end. Takeover rows carry
hover actions (focus the tab, take it back), each with an inline confirm.

Heavy replies no longer wedge a session: the bridge used to stop reading the
agent's output once a single line passed 4MB, which any session that had just
read an image would hit, and the panel stayed on "running" forever. It now reads
without a line cap and trims oversized payloads before they reach the panel.

Agents whose own CLI you uninstalled drop out of the picker. Claude Code and
Codex keep working through the ACP adapter OpenSider installed, so they stayed
listed even after claude / codex were gone; they are now hidden until the
CLI is back.

Assets: the six platform binaries of the local bridge (opensider-*), plus
extension.zip with the browser extension itself.

v0.5.6

The model picker is remembered per conversation now: pick a model in one chat,
pick another in the next, and switching back shows the first one again — and the
engine is switched back with it. Each agent keeps its own memory, so switching
agents no longer carries the previous one's selection (or its list) along.

Dropping a folder attaches the folder itself instead of every file inside it.
The contents are still copied so the Agent can read them, and nested folders
keep their paths.

Assets: the six platform binaries of the local bridge (opensider-*), plus
extension.zip with the browser extension itself.

v0.5.5

This build is about macOS leaving a session alone. Every Agent session unpacks a
small native library beside its CLI, and the bridge cleared that file's
quarantine flag before signing it — but signing rewrites the binary, and macOS
stamps the flag straight back on, so a session ended in a handful of "Apple
could not verify this file" prompts every time. The bridge now signs first and
clears afterwards, wipes the whole native directory rather than the size-limited
subset it used to walk, and asks OpenCode not to unpack its native search module
at all.

Linux and Windows are unaffected, and no session data moves.

v0.5.4

This build is about the browser staying up. While a turn ran, the side panel
used to push its whole state — tens of megabytes once transcripts pile up —
through storage and the local bridge every second or two, and the browser
process died right behind one of those pushes. Transcript changes now wait for
the turn to end; settings like the permission mode still land the moment you
change them.

The tab-control card is a list now: one row per page the Agent is working in,
with the page's own Take back, and a Take back all in the header.