# Hermes Agent v0.19.0: ~80% faster first token, smart approvals on by default, password-manager secrets

> Large Hermes release cutting cold-start time to first token from ~4.3s to ~0.9s across CLI, gateway, TUI, desktop and cron, with reasoning now streamed live by default. It also flips flagged-command approvals to LLM-reviewed by default, adds Bitwarden/1Password as secret sources, live subagent transcripts, and a durable ledger so a finished response survives a gateway crash. Anyone running Hermes unattended or with approval gates should read the approval-behaviour change before upgrading.

| | |
|---|---|
| **Tool** | Hermes Agent |
| **Version** | v2026.7.20 |
| **Kind** | release |
| **Published** | 2026-07-20 |
| **Observed** | 2026-08-11 |
| **Significance** | 4/5 |
| **Breaking** | no |
| **Categories** | feature, capability, security |

## What changed


- Cold-start agent init ~4.3s → ~0.9s (~80% cut) on CLI, gateway, TUI, desktop, cron
- Reasoning models stream thinking live by default; response box paints per token instead of per line
- Desktop: 20+ perf PRs — 14× cheaper markdown splitting on long replies, virtualized diff pane, no sidebar/tool-row re-render per token, backend pre-warm on hover, idle-mount for hidden panes
- TUI renders markdown incrementally
- `/subscription` and `/topup` manage the Nous plan from TUI or classic CLI: plan + remaining allowance, upgrade cost preview, downgrade timing, scheduled-change banners, undo; matching desktop billing settings tab
- Smart approvals now default: an LLM reviewer assesses each flagged command, verdicts scoped to that exact command (no pattern-wide blanket approval)
- User-defined deny rules block commands even under yolo mode; `/deny <reason>` passes the refusal reason back to the agent
- New pluggable `SecretSource` interface: Bitwarden and 1Password (`op://` refs) at load time, multiple vaults at once, deterministic precedence, conflict warnings, per-variable provenance
- `delegate_task` writes one live human-readable transcript file per subagent (tail-able during the run)
- Background delegation completions are durable — results restored and delivered through an ownership-checked ledger after a restart
- Final responses recorded in a delivery-obligation ledger in `state.db` so a gateway crash between generation and platform delivery no longer loses a paid turn
- Rolls up the v0.18.1 and v0.18.2 infrastructure patch tags
- Window totals: ~2,245 commits, ~1,065 merged PRs, ~3,300 issues closed, 450+ contributors


## Sources

- [github_release](https://github.com/NousResearch/hermes-agent/releases/tag/v2026.7.20) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/hermes-agent/v2026-7-20
Entity: https://changelogs.info/hermes-agent
Event ID: `evt_2026-07-20_hermes-agent_v2026-7-20`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.