Release v0.7.0

🚀 Enhancements

• Batch approval queue (b2cf617)
• Per-tool permission chips (0d15cea)
• /find in-process full-text search (D0) + defer the sidecar tier (1ee1cf0)
• Citation insert into notes (gated) + ghost-text spike (infeasible) + release runbook (51e433b)

🩹 Fixes

• Resolve CodeRabbit review on #36 (note targeting, pills, runbook) (#36)

📖 Documentation

• Record the closed typecheck hole (ddd7ad1)
• agent: Drop formatting churn, land the committed-blob lesson (cf1fabc)
• Reader-panel spike resolves infeasible — keep toolbar/context-menu → sidebar (40fd3d9)
• Clarify citation insertion, note resolution, and chat rendering behavior (fb9246d)

📦 Build

• Add a typecheck gate that actually covers test/ (a43b747)

🎨 Styles

• Wrap the batch dialog class string to satisfy prettier (201f100)
• Format the Wave 4 plan amendment block (8e7e402)

❤️ Contributors

• Chris Wenn
• Sysadmin

Release v0.6.0

🚀 Enhancements

• /synthesize collection-level synthesis (Task 6) (fcf89ad)

🩹 Fixes

• ci: Repair Dependabot auto-merge — it could never merge anything (8de5332)
• ci: Protect main; give github-actions bumps a real merge path (ef70c4a)
• Remove vault test subclass returning nsIFile where path expected (aac5917)

📖 Documentation

• ops: Add post-release verification and fix the gate's scope (5c2c0f1)
• Next-phase spec and multi-agent implementation plan (3bfb5f0)
• Spec section 2 storage-path ruling (hermes/ subdir accepted) (61d802f)
• RENAME.md — finish the Logios rename without orphaning stored data (71a3044)
• Spec s2 ruling amended - secrets under zotero-hermes/ (codebase-consistent) (a638778)
• Correct Wave-1 status; remove inaccurate claims (86df39a)

🏡 Chore

• ci: Pin workflow refs to the techne-tools fork, bump upload-artifact (c9183ab)
• deps: Bump zotero-plugin-toolkit from 5.2.0 to 6.0.0 (a46bf10)
• deps-dev: Bump eslint from 9.39.4 to 10.12.0 (55a2bf7)
• wave1: Consolidate next-phase lanes onto a reviewable branch (1da1fed)

✅ Tests

• Probe native auto-merge behaviour (temporary) (#31)
• Probe native auto-merge behaviour (temporary) " (#31)
• profile: Fix rename collateral in fixture and expectation (2eabfbd)
• integration: Replace writeGate/chatFlow stubs with real coverage (5167fb4)

🎨 Styles

• Make the CI lint gate pass (c6bc5bc)

❤️ Contributors

• Chris Wenn (@prismatic7)

Release v0.5.0

🚀 Enhancements

• acp: Scope the sidebar to a named Hermes profile (9052a90)

🩹 Fixes

• profile: Refuse to start when a requested profile is unusable (d7cbe13)

📖 Documentation

• Profile scoping in README, ARCHITECTURE security notes, CHANGELOG (a68647a)
• Correct the React-18-specific timing comments in the prompt-buffer path (cd61ce6)

🏡 Chore

• deps-dev: Bump the all-non-major group (prettier, chai, eslint-config) (#24)
• deps-dev: Bump mocha from 11.7.6 to 12.0.3 (5ed104a)
• deps-dev: Bump @types/node from 24.12.4 to 26.6.4 (7f61ab0)
• deps: Migrate to React 19 (react, react-dom, and their types together) (e1ced72)

✅ Tests

• profile: Verify the profile gate against real nsIFile; correct isDirectory (0fc6628)

❤️ Contributors

• Chris Wenn

Release v0.4.0

🚀 Enhancements

• hermes: Library operations round — metadata, DOI lookup, citations, bulk tags, annotations (0077eca)
• export: Add annotations-to-Obsidian note export titled Title — Author (45ba48d)
• hermes: B4 slash commands for the library-operations round (7ac103b)

🩹 Fixes

• zotero: Resolve directories from Zotero 10 string paths (4d47d6b)
• sidebar: Expand the item pane before mounting, drop dead utility classes (9ba61f3)
• sidebar: Anchor the slash dropdown and un-clamp its rows (607982a)

📖 Documentation

• ops: Correct the release workflow in zotero-ops (5d68658)
• skills: Record the Zotero 10 string-path trap (0d5e4c1)
• ops: Pin the release gate to the checker's own scope (6bfba6d)
• skills: Record verified Zotero 10 annotation, citation and OCR contracts (f46fe09)
• design: Resolve the north-star conflict — discovery sanctioned, sidecar narrowed (24aec7b)

🎨 Styles

• changelog: Prettier-format the 0.3.4 section (cd0ab12)
• skills: Prettier-format zotero-ref (fabb535)

❤️ Contributors

• Chris Wenn

Release v0.3.4

🚀 Enhancements

• hermes: Implement Round 3 academic reasoning tools (E, C, D, A, B) (5d9c26c)

🩹 Fixes

• hermes: Restore "Ask Hermes About Item" end to end (a2b5a1a)

🤖 CI

• Enable CI-gated Dependabot auto-merge for patch + minor bumps (1ed3c15)

❤️ Contributors

• Chris Wenn
• Prismatic7 (@prismatic7)

Release v0.3.2

🚀 Enhancements

• hermes: Implement metadata editing, approval gating, audit log, and runtime mode switching (a6129b6)
• hermes: Add obsidian export bridge, comparative synthesis, bbt drafting, and active reader workflows (5a76bad)

❤️ Contributors

• Chris Wenn

v0.3.1 — Security hardening and race condition fixes

Security Hardening & Race Condition Fixes

This release addresses high-priority security vulnerabilities (sandbox escape vectors, path traversal, dialog deadlocks) and multiple concurrency/race conditions across the Hermes agent interface.

Security Mitigations

• Sandbox escape mitigations: Disarmed dangerous URI schemes (javascript:, file:, chrome:, data:) in MarkdownRenderer and prevented unhandled schemes in HermesChatView from invoking privileged Gecko chrome execution. Added nested parenthesis link URL support.
• Workspace sandboxing & database protection: Sandboxed Hermes ACP agent session cwd and workdir to <profile>/zotero-hermes/workspace/ (isolated from zotero.sqlite), and disabled ACP filesystem client capabilities.
• Path traversal prevention: Enforced strict ID validation (/^[a-zA-Z0-9_-]+$/) across all ConversationManager file access methods.
• Modal dialog deadlock fix: Handled native cancel and close events in ApprovalDialog so pressing Escape resolves cleanly rather than deadlocking the approval queue.

Race Condition & Concurrency Fixes

• Process spawn mutex: Added connectPromise mutex in HermesClient to prevent concurrent calls from spawning multiple hermes acp child processes.
• Stream buffer bleed: Added abortActiveStream() and buffer clearing on chat switch, creation, or deletion; dropped reasoning chunks targeted at inactive conversations.
• Debounced save race: Captured target conversation ID in ChatManager.scheduleSave() to prevent delayed debounced writes from clobbering switched chats.
• Duplicate SSE stop events: Guarded against spurious duplicate stop notifications in HermesApiClient.
• Context synchronization: Added removeAttachedItem() to ItemManager and synchronized with ContextBar.onRemoveItem.
• Multi-window teardown: Switched to per-window WeakMap<Window, any> in hooks.ts to prevent window close from disrupting other open windows.

Install

Download hermes-agent-for-zotero.xpi and install via Zotero → Tools → Plugins → gear → Install Plugin From File.

v0.3.0 — OpenDesign 'Reading Room' redesign

OpenDesign "Reading Room" redesign

Complete visual redesign of the Hermes chat view, plus a critical identity correction.

Highlights

• New design language — bundled Source Sans 3 / Source Serif 4 / Source Code Pro fonts, refined dark/light palette tokens
• Input area — auto-growing textarea (up to 6 lines, then scroll) for wordy research queries; fixed-height centred send button; symmetric padding; cursor breathing room
• Header — matched to Zotero's native toolbar (40px, zero vertical padding)
• Identity correction — addon ID is now hermes@techne-tools.org (was hermes@nousresearch.com); author/homepage/bugs point at the techne-tools org

Notes

• Breaking for existing installs: the addon ID change means Zotero treats this as a new plugin. Existing users must remove the old hermes@nousresearch.com install and install this release fresh. Preferences (prefs prefix extensions.zotero.hermes) carry over.
• Zotero 7.0 – 10.x supported.

Install

Download hermes-agent-for-zotero.xpi and install via Zotero → Tools → Plugins → gear → Install Plugin From File.

Release v0.2.0

No significant changes.

Release Manifest

This release is used to host update.json, please do not delete or modify it!
Updated in UTC 2026-10-09T18:24:05.836Z for version 0.7.0