8 commits landed across Hermes in the last 3 hours, and the headline is real control-surface work for the desktop app plus a new dashboard import path.
What Changed
Desktop gets profile-aware approval mode (#feat-desktop). feat(desktop): add profile-aware approval mode control (Luigi Razon) lets the desktop client switch approval behavior per profile, so a work profile and a personal profile can enforce different gate rules without config juggling. Teknium followed up with chore(release): map @Tortugasaur desktop commits to credit the desktop work.
The dashboard can import sessions (#feat-dashboard). feat(dashboard): add session import flow (Shannon Sands) gives the web dashboard a way to pull in sessions — the companion to the validation fix below.
Smart-deny overrides are scoped to one operation (#fix-approval). fix(approval): scope smart deny owner overrides to one operation (Teknium) stops a deny override from leaking beyond the single operation it was meant for — a privilege-escalation footgun closed.
WhatsApp taps are gated on the DM allowlist (#fix-whatsapp). fix(whatsapp_cloud): gate interactive taps on DM allowlist (SahilRakhaiya05) blocks interactive message taps from outside the approved DM list.
Imported sessions are validated (#fix-sessions). fix(sessions): validate imported session payloads (kshitijk4poor) rejects malformed session files before they can corrupt state.
Approval redaction failure is isolated (#test-approval). test(approval): isolate smart observer redaction failure (Teknium) pins down a flaky redaction test so the observer path is actually trustworthy.
Why It Matters
The desktop profile-aware approval mode is the change power users will feel: different gate rules per profile, no more one-size-fits-all. Around it, the session import flow plus its validation and the scoped smart-deny fix harden the trust boundary so imports and overrides can't silently overreach. For the runtime-side context work that pairs with these agent fixes, our Hermes gateway context-budget coverage tracks the broader runtime story.
Don't overpay for AI tools. Check aiFiesta for exclusive pricing on coding agents.
Top comments (0)