Hermes Agent v0.21.3 tags Cloud session and state.db fixes

Nous Research published Hermes Agent v0.21.3 as tag v2026.9.14 on 14 September 2026. The GitHub notes call it a patch: a stable tagged release for Docker images, Hermes Cloud, and other hosted deployments, so remote-gateway sign-in fixes reach Cloud agents that auto-update to the newest release tag.

Remote dashboard sessions no longer expire on concurrent refresh bursts. Both gateway refresh paths—the cookie gate and Desktop's native bearer route—now coalesce concurrent requests that carry the same rotating refresh token. A Desktop wake burst can no longer replay an already-rotated token into the Portal's reuse detection and revoke the whole session. Refresh also runs off the event loop, so a slow identity provider no longer freezes /api/status. The change pairs with hermes-portal#1209: a sliding 30-day idle horizon and a 5-minute rotated-token grace.

The same tag also stops long-lived processes from leaking duplicate state.db writer handles. Gateway, dashboard and Desktop backend, ACP, and CLI readers attach read-only, and in-process writers share one registry handle, so the N live SessionDB handles precursor stops firing on a healthy topology.

The rest of the window since v0.21.2 is left undocumented here on purpose. Full curated release notes for that window ship with v0.22.0. Git installs update with hermes update or by re-running the installer one-liner. Docker and Hermes Cloud images build from nousresearch/hermes-agent:v2026.9.14.

Pull that image tag or run hermes update, then confirm a Desktop wake no longer revokes the remote dashboard session and that SessionDB handle warnings stay quiet on a healthy topology.

Sources