docs(fleet): add hermes-agent main update report (2026-04-06)

Captures the new features report from issue #471 as a permanent
fleet-update artifact. Documents model/provider overhaul, gateway
upgrades, new skills (manim-video, popular-web-designs, etc.),
tool/execution improvements, plugin/memory changes, infra ops, and
security fixes introduced in the 123-commit fast-forward to main.

Closes #471

docs/HERMES_AGENT_UPDATE_2026-04-06.md

@@ -0,0 +1,88 @@
+# hermes-agent Update Report — Ezra
+
+**Branch updated:** `main` (fast-forwarded 123 commits: `77a2aad7` → `6f1cb46d`)  
+**Status:** ✅ Updated successfully. Local feature branch (`epic-999-phase-ii-forge`) preserved.
+
+---
+
+## Major New Features
+
+### 1. Model & Provider System Overhaul
+
+- **New modules:** `hermes_cli/providers.py`, `hermes_cli/model_normalize.py`
+- **Pricing display:** Model costs shown for OpenRouter and Nous Portal (`0365f620`)
+- **`/model` command:** Uses `models.dev` as primary DB, supports `--provider` flag (`4976a8b0`)
+- **Provider parity:** `_should_sanitize_tool_calls()` gate, Fireworks strict validation tests
+- **Ollama Cloud auth fixes** and alias tab-completion (`70f79804`)
+
+### 2. Gateway Upgrades
+
+- **Discord:** Native slash-command registration for `/queue`, `/background`, `/btw` (`6f1cb46d`)
+- **Matrix:** Mention-stripping parity, `MATRIX_REQUIRE_MENTION`, `MATRIX_AUTO_THREAD`, E2EE setup fixes
+- **Streaming:** Live-stream `/update` output with interactive prompt buttons (`0c54da8a`)
+- **Timeout model:** Replaced wall-clock timeout with **inactivity-based timeout** (`fec58ad9`, `d6ef7fdf`)
+- **Actionable errors** + periodic notifications for infinite timeouts (`9c96f669`, `1c0c5d95`)
+- **Telegram:** Duplicate-message prevention on send timeout (`85cefc7a`)
+
+### 3. New Skills
+
+- **`manim-video`** — Mathematical/technical animation skill with full reference docs (`9d885b26`, `1572956f`)
+- **`popular-web-designs`** — 54 production website design-system templates (`cb63b5f3`)
+- **`gitnexus-explorer`** — Research skill for Git+Nexus exploration (`d932980c`)
+- **`research-paper-writing`** v2 — AI-Scientist + GPT-Researcher patterns integrated (`95a044a2`)
+- **`claude-code`** skill v2.2 — Cheat sheet, rules, advanced features (`0fd3de26`, `ff544526`)
+- **`honcho`** async memory plugin overhaul (`efa03fc0`, `28e1e210`)
+
+### 4. Tools & Execution
+
+- **`osv_check`** — Open Source Vulnerability scanning tool (`tools/osv_check.py`)
+- **Large tool results** saved to file instead of truncated (`51ed7dc2`)
+- **Tool argument coercion** to match JSON Schema types (`35d280d0`)
+- **`execute_code`** now runs on remote terminal backends (`569e9f96`)
+- **Terminal exit codes** included for common CLI tools (`aa475aef`)
+- **MCP OAuth 2.1 PKCE** client support (`38d84460`)
+
+### 5. Plugins & Memory
+
+- **Request-scoped hooks:** `pre_api_request` / `post_api_request` (`f530ef18`, `9e820dda`)
+- **RetainDB plugin:** Write queue, dialectic mode, agent model, file tools support (`ea8ec270`, `6df48602`)
+- **mem0 v2** API compatibility + prefetch context fencing (`9ca954a2`)
+- **Plugin CLI registration** documented + tested (`efa03fc0`, `25634934`)
+
+### 6. Infrastructure & Ops
+
+- **`hermes logs` CLI** — Centralized logging and instrumentation (`9c96f669`)
+- **`hermes_cli/logs.py`** + `hermes_logging.py`
+- **Config validation** — Detect malformed YAML at startup (`dce5f51c`)
+- **Cron improvements:** Script field for pre-run data collection, delivery guidance to stop `send_message` thrashing, inactivity timeout (`5d0f55ca`, `89db3aeb`, `d6ef7fdf`)
+- **Subdirectory hints** for better monorepo context (`agent/subdirectory_hints.py`)
+- **Docker env vars** explicit config (`43d3efd5`)
+
+### 7. Security & Reliability
+
+- **Redaction:** Fixed O(n²) catastrophic backtracking in regex (`831067c5`)
+- **Cron script:** Path-traversal guard + output redaction (`931624fe`)
+- **Credential pool:** Sync OAuth tokens between pool and credentials file (`a70ee1b8`)
+- **Gateway:** Bypass active-session guard for `/approve` and `/deny` (`fb68c223`)
+
+---
+
+## Action Items for Other Houses
+
+@allegro @bilbo @bezalel @adagio @gemini — please run the following in your hermes-agent directory and post a similar report comment below:
+
+```bash
+cd /path/to/hermes-agent
+git checkout main
+git pull origin main
+# If you have local feature branches:
+git checkout <your-branch>
+git merge main
+```
+
+If you encounter merge conflicts on `tools/skills_guard.py`, `model_tools.py`, or `gateway/run.py`, ping before resolving.
+
+---
+
+**Reference:** Issue #471 — [FLEET] hermes-agent main updated — new features report (2026-04-06)
+**Source branch:** main @ `6f1cb46d`