@baimingtao/lbs-agent 1.0.0

package/extensions/skills/builtin/autonomous-ai-agents/hermes-agent/SKILL.md

@@ -0,0 +1,728 @@
+---
+name: hermes-agent
+description: "配置、扩展或为 Hermes Agent 做出贡献。"
+version: 2.2.0
+author: Hermes Agent + Teknium
+license: MIT
+platforms: [linux, macos, windows]
+metadata:
+  hermes:
+    tags: [hermes, setup, configuration, multi-agent, spawning, cli, gateway, development]
+    homepage: https://github.com/NousResearch/hermes-agent
+    related_skills: [claude-code, codex, opencode]
+---
+
+# Hermes Agent
+
+Hermes Agent 是由 Nous Research 开发的开源 AI agent 框架，可在你的终端、消息平台和 IDE 中运行。它属于与 Claude Code (Anthropic)、Codex (OpenAI) 和 OpenClaw 同类别的产品——即利用 tool calling 与你的系统交互的自主编码与任务执行 agent。Hermes 兼容任何 LLM provider (OpenRouter、Anthropic、OpenAI、DeepSeek、本地模型以及其他 15 个以上的提供商)，并可在 Linux、macOS 和 WSL 上运行。
+
+Hermes 的与众不同之处：
+
+- **通过 skills 实现自我改进** — Hermes 通过将可复用的流程保存为 skills 来从经验中学习。当它解决了一个复杂问题、发现了一个工作流或被纠正时，它可以将这些知识持久化为一个 skill 文档，并在未来的会话中加载。skills 会随着时间不断积累，使 agent 在处理你的特定任务和环境时表现得更加出色。
+- **跨会话的持久记忆** — 记住你是谁、你的偏好、环境细节以及过往的经验教训。可插拔的 memory 后端（内置、Honcho、Mem0 等）让你自由选择记忆的运作方式。
+- **多平台 gateway** — 同一个 agent 可以在 Telegram、Discord、Slack、WhatsApp、Signal、Matrix、Email 等 10 多个平台上运行，并且拥有完整的工具访问权限，而不仅仅是聊天。
+- **Provider 无关** — 在工作流中段切换 model 和 provider 毫无障碍。Credential pools 会在多个 API key 之间自动轮换。
+- **Profiles** — 运行多个独立的 Hermes 实例，拥有相互隔离的 config、sessions、skills 和 memory。
+- **可扩展** — 支持插件、MCP servers、自定义工具、webhook 触发器、cron 调度以及完整的 Python 生态系统。
+
+人们将 Hermes 用于软件开发、研究、系统管理、数据分析、内容创作、家庭自动化，以及任何其他能从具备持久上下文和完整系统访问权限的 AI agent 中获益的场景。
+
+**这个 skill 帮助你高效地使用 Hermes Agent** — 包括进行设置、配置各项功能、生成额外的 agent 实例、排查问题、寻找正确的命令与设置，以及在需要对其进行扩展或为其贡献代码时理解系统的整体运作方式。
+
+**Docs:** https://hermes-agent.nousresearch.com/docs/
+
+## Scope & 验证
+
+这个 skill 是一份简明的操作指南，并非每个 Hermes 功能的绝对标准参考。如果此处未提及某个 Hermes 功能、命令或设置，请不要将其视为该功能不存在的证据。在给出否定答案之前，请务必查看实时的代码仓库和官方文档。
+
+良好的验证目标：
+
+- CLI 命令: `hermes --help`, `hermes <command> --help`, 以及 `hermes_cli/main.py`
+- 用户文档: https://hermes-agent.nousresearch.com/docs/
+- 源码树: https://github.com/NousResearch/hermes-agent
+
+## 快速开始
+
+```bash
+# Install
+curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash
+
+# Interactive chat (default)
+hermes
+
+# Single query
+hermes chat -q "What is the capital of France?"
+
+# Setup wizard
+hermes setup
+
+# Change model/provider
+hermes model
+
+# Check health
+hermes doctor
+```
+
+---
+
+## CLI Reference
+
+### Global Flags
+
+```
+hermes [flags] [command]
+
+  --version, -V             Show version
+  --resume, -r SESSION      Resume session by ID or title
+  --continue, -c [NAME]     Resume by name, or most recent session
+  --worktree, -w            Isolated git worktree mode (parallel agents)
+  --skills, -s SKILL        Preload skills (comma-separate or repeat)
+  --profile, -p NAME        Use a named profile
+  --yolo                    Skip dangerous command approval
+  --pass-session-id         Include session ID in system prompt
+```
+
+如果不指定子命令，则默认使用 `chat`。
+
+### Chat
+
+```
+hermes chat [flags]
+  -q, --query TEXT          Single query, non-interactive
+  -m, --model MODEL         Model (e.g. anthropic/claude-sonnet-4)
+  -t, --toolsets LIST       Comma-separated toolsets
+  --provider PROVIDER       Force provider (openrouter, anthropic, nous, etc.)
+  -v, --verbose             Verbose output
+  -Q, --quiet               Suppress banner, spinner, tool previews
+  --checkpoints             Enable filesystem checkpoints (/rollback)
+  --source TAG              Session source tag (default: cli)
+```
+
+### 配置
+
+```
+hermes setup [section]      Interactive wizard (model|terminal|gateway|tools|agent)
+hermes model                Interactive model/provider picker
+hermes config               View current config
+hermes config edit          Open config.yaml in $EDITOR
+hermes config set KEY VAL   Set a config value
+hermes config path          Print config.yaml path
+hermes config env-path      Print .env path
+hermes config check         Check for missing/outdated config
+hermes config migrate       Update config with new options
+hermes auth                 Interactive credential manager
+hermes auth add PROVIDER    Add OAuth or API-key credential (e.g. nous, openai-codex, qwen-oauth)
+hermes auth list            List stored credentials
+hermes auth remove PROVIDER Remove a stored credential
+hermes doctor [--fix]       Check dependencies and config
+hermes status [--all]       Show component status
+```
+
+### 工具 & Skills
+
+```
+hermes tools                Interactive tool enable/disable (curses UI)
+hermes tools list           Show all tools and status
+hermes tools enable NAME    Enable a toolset
+hermes tools disable NAME   Disable a toolset
+
+hermes skills list          List installed skills
+hermes skills search QUERY  Search the skills hub
+hermes skills install ID    Install a skill (ID can be a hub identifier OR a direct https://…/SKILL.md URL; pass --name to override when frontmatter has no name)
+hermes skills inspect ID    Preview without installing
+hermes skills config        Enable/disable skills per platform
+hermes skills check         Check for updates
+hermes skills update        Update outdated skills
+hermes skills uninstall N   Remove a hub skill
+hermes skills publish PATH  Publish to registry
+hermes skills browse        Browse all available skills
+hermes skills tap add REPO  Add a GitHub repo as skill source
+```
+
+### MCP Servers
+
+```
+hermes mcp serve            Run Hermes as an MCP server
+hermes mcp add NAME         Add an MCP server (--url or --command)
+hermes mcp remove NAME      Remove an MCP server
+hermes mcp list             List configured servers
+hermes mcp test NAME        Test connection
+hermes mcp configure NAME   Toggle tool selection
+```
+
+关于内置 MCP 客户端如何连接服务器、自动发现其工具、并将它们作为一等工具暴露出来，以及目录安装 (`hermes mcp install <name>`) 的说明：`skill_view(name="hermes-agent", file_path="references/native-mcp.md")`。
+
+### Gateway (Messaging Platforms)
+
+```
+hermes gateway run          Start gateway foreground
+hermes gateway install      Install as background service
+hermes gateway start/stop   Control the service
+hermes gateway restart      Restart the service
+hermes gateway status       Check status
+hermes gateway setup        Configure platforms
+```
+
+支持的 platforms: Telegram, Discord, Slack, WhatsApp, Signal, Email, SMS, Matrix, Mattermost, Home Assistant, DingTalk, Feishu, WeCom, BlueBubbles (iMessage), Weixin (WeChat), API Server, Webhooks。Open WebUI 可通过 API Server 适配器连接。
+
+Platform 文档: https://hermes-agent.nousresearch.com/docs/user-guide/messaging/
+
+### Sessions
+
+```
+hermes sessions list        List recent sessions
+hermes sessions browse      Interactive picker
+hermes sessions export OUT  Export to JSONL
+hermes sessions rename ID T Rename a session
+hermes sessions delete ID   Delete a session
+hermes sessions prune       Clean up old sessions (--older-than N days)
+hermes sessions stats       Session store statistics
+```
+
+### Cron Jobs
+
+```
+hermes cron list            List jobs (--all for disabled)
+hermes cron create SCHED    Create: '30m', 'every 2h', '0 9 * * *'
+hermes cron edit ID         Edit schedule, prompt, delivery
+hermes cron pause/resume ID Control job state
+hermes cron run ID          Trigger on next tick
+hermes cron remove ID       Delete a job
+hermes cron status          Scheduler status
+```
+
+### Webhooks
+
+```
+hermes webhook subscribe N  Create route at /webhooks/<name>
+hermes webhook list         List subscriptions
+hermes webhook remove NAME  Remove a subscription
+hermes webhook test NAME    Send a test POST
+```
+
+关于完整的设置、路由配置、payload 模板化以及事件驱动的 agent 运行模式的说明：`skill_view(name="hermes-agent", file_path="references/webhooks.md")`。
+
+### Profiles
+
+```
+hermes profile list         List all profiles
+hermes profile create NAME  Create (--clone, --clone-all, --clone-from)
+hermes profile use NAME     Set sticky default
+hermes profile delete NAME  Delete a profile
+hermes profile show NAME    Show details
+hermes profile alias NAME   Manage wrapper scripts
+hermes profile rename A B   Rename a profile
+hermes profile export NAME  Export to tar.gz
+hermes profile import FILE  Import from archive
+```
+
+### Credential Pools
+
+```
+hermes auth add             Interactive credential wizard
+hermes auth list [PROVIDER] List pooled credentials
+hermes auth remove P INDEX  Remove by provider + index
+hermes auth reset PROVIDER  Clear exhaustion status
+```
+
+### Other
+
+```
+hermes insights [--days N]  Usage analytics
+hermes update               Update to latest version
+hermes pairing list/approve/revoke  DM authorization
+hermes plugins list/install/remove  Plugin management
+hermes honcho setup/status  Honcho memory integration (requires honcho plugin)
+hermes memory setup/status/off  Memory provider config
+hermes completion bash|zsh  Shell completions
+hermes acp                  ACP server (IDE integration)
+hermes claw migrate         Migrate from OpenClaw
+hermes uninstall            Uninstall Hermes
+```
+
+---
+
+## Slash Commands (In-Session)
+
+在交互式聊天会话中输入这些命令。新命令的更新相当频繁；如果下面的列表看起来有些陈旧，请在会话中运行 `/help` 获取权威列表，或查看[实时的 slash 命令参考](https://hermes-agent.nousresearch.com/docs/reference/slash-commands)。权威的注册表记录在 `hermes_cli/commands.py` 中——所有的消费者（自动补全、Telegram 菜单、Slack 映射、`/help`）都是由此派生而来的。
+
+### Session Control
+```
+/new (/reset)        Fresh session
+/clear               Clear screen + new session (CLI)
+/retry               Resend last message
+/undo                Remove last exchange
+/title [name]        Name the session
+/compress            Manually compress context
+/stop                Kill background processes
+/rollback [N]        Restore filesystem checkpoint
+/snapshot [sub]      Create or restore state snapshots of Hermes config/state (CLI)
+/background <prompt> Run prompt in background
+/queue <prompt>      Queue for next turn
+/steer <prompt>      Inject a message after the next tool call without interrupting
+/agents (/tasks)     Show active agents and running tasks
+/resume [name]       Resume a named session
+/goal [text|sub]     Set a standing goal Hermes works on across turns until achieved
+                     (subcommands: status, pause, resume, clear)
+/redraw              Force a full UI repaint (CLI)
+```
+
+### 配置
+```
+/config              Show config (CLI)
+/model [name]        Show or change model
+/personality [name]  Set personality
+/reasoning [level]   Set reasoning (none|minimal|low|medium|high|xhigh|show|hide)
+/verbose             Cycle: off → new → all → verbose
+/voice [on|off|tts]  Voice mode
+/yolo                Toggle approval bypass
+/busy [sub]          Control what Enter does while Hermes is working (CLI)
+                     (subcommands: queue, steer, interrupt, status)
+/indicator [style]   Pick the TUI busy-indicator style (CLI)
+                     (styles: kaomoji, emoji, unicode, ascii)
+/footer [on|off]     Toggle gateway runtime-metadata footer on final replies
+/skin [name]         Change theme (CLI)
+/statusbar           Toggle status bar (CLI)
+```
+
+### 工具 & Skills
+```
+/tools               Manage tools (CLI)
+/toolsets            List toolsets (CLI)
+/skills              Search/install skills (CLI)
+/skill <name>        Load a skill into session
+/reload-skills       Re-scan ~/.hermes/skills/ for added/removed skills
+/reload              Reload .env variables into the running session (CLI)
+/reload-mcp          Reload MCP servers
+/cron                Manage cron jobs (CLI)
+/curator [sub]       Background skill maintenance (status, run, pin, archive, …)
+/kanban [sub]        Multi-profile collaboration board (tasks, links, comments)
+/plugins             List plugins (CLI)
+```
+
+### Gateway
+```
+/approve             Approve a pending command (gateway)
+/deny                Deny a pending command (gateway)
+/restart             Restart gateway (gateway)
+/sethome             Set current chat as home channel (gateway)
+/update              Update Hermes to latest (gateway)
+/topic [sub]         Enable or inspect Telegram DM topic sessions (gateway)
+/platforms (/gateway) Show platform connection status (gateway)
+```
+
+### Utility
+```
+/branch (/fork)      Branch the current session
+/fast                Toggle priority/fast processing
+/browser             Open CDP browser connection
+/history             Show conversation history (CLI)
+/save                Save conversation to file (CLI)
+/copy [N]            Copy the last assistant response to clipboard (CLI)
+/paste               Attach clipboard image (CLI)
+/image               Attach local image file (CLI)
+```
+
+### Info
+```
+/help                Show commands
+/commands [page]     Browse all commands (gateway)
+/usage               Token usage
+/insights [days]     Usage analytics
+/status              Session info (gateway)
+/profile             Active profile info
+/debug               Upload debug report (system info + logs) and get shareable links
+```
+
+### Exit
+```
+/quit (/exit, /q)    Exit CLI
+```
+
+---
+
+## Key 路径 & 配置
+
+```
+~/.hermes/config.yaml       Main configuration
+~/.hermes/.env              API keys and secrets (under $HERMES_HOME if set)
+$HERMES_HOME/skills/        Installed skills
+~/.hermes/sessions/         Gateway routing index, request dumps, *.jsonl transcripts (and optional per-session JSON snapshots when sessions.write_json_snapshots: true)
+~/.hermes/state.db          Canonical session store (SQLite + FTS5)
+~/.hermes/logs/             Gateway and error logs
+~/.hermes/auth.json         OAuth tokens and credential pools
+~/.hermes/hermes-agent/     Source code (if git-installed)
+```
+
+Profiles 使用 `~/.hermes/profiles/<name>/` 目录，并具有相同的目录结构。
+
+### 配置 Sections
+
+使用 `hermes config edit` 或 `hermes config set section.key value` 进行编辑。
+
+| Section | Key options |
+|---------|-------------|
+| `model` | `default`, `provider`, `base_url`, `api_key`, `context_length` |
+| `agent` | `max_turns` (90), `tool_use_enforcement` |
+| `terminal` | `backend` (local/docker/ssh/modal), `cwd`, `timeout` (180) |
+| `compression` | `enabled`, `threshold` (0.50), `target_ratio` (0.20) |
+| `display` | `skin`, `tool_progress`, `show_reasoning`, `show_cost` |
+| `stt` | `enabled`, `provider` (local/groq/openai/mistral) |
+| `tts` | `provider` (edge/elevenlabs/openai/minimax/mistral/neutts) |
+| `memory` | `memory_enabled`, `user_profile_enabled`, `provider` |
+| `security` | `tirith_enabled`, `website_blocklist` |
+| `delegation` | `model`, `provider`, `base_url`, `api_key`, `max_iterations` (50), `reasoning_effort` |
+| `checkpoints` | `enabled`, `max_snapshots` (50) |
+
+完整的配置参考：https://hermes-agent.nousresearch.com/docs/user-guide/configuration
+
+### Providers
+
+支持 20 多个 providers。通过 `hermes model` 或 `hermes setup` 进行设置。
+
+| Provider | Auth | Key env var |
+|----------|------|-------------|
+| OpenRouter | API key | `OPENROUTER_API_KEY` |
+| Anthropic | API key | `ANTHROPIC_API_KEY` |
+| Nous Portal | OAuth | `hermes auth` |
+| OpenAI Codex | OAuth | `hermes auth` |
+| GitHub Copilot | Token | `COPILOT_GITHUB_TOKEN` |
+| Google Gemini | API key | `GOOGLE_API_KEY` or `GEMINI_API_KEY` |
+| DeepSeek | API key | `DEEPSEEK_API_KEY` |
+| xAI / Grok | API key | `XAI_API_KEY` |
+| Hugging Face | Token | `HF_TOKEN` |
+| Z.AI / GLM | API key | `GLM_API_KEY` |
+| MiniMax | API key | `MINIMAX_API_KEY` |
+| MiniMax CN | API key | `MINIMAX_CN_API_KEY` |
+| Kimi / Moonshot | API key | `KIMI_API_KEY` |
+| Alibaba / DashScope | API key | `DASHSCOPE_API_KEY` |
+| Xiaomi MiMo | API key | `XIAOMI_API_KEY` |
+| Kilo Code | API key | `KILOCODE_API_KEY` |
+| OpenCode Zen | API key | `OPENCODE_ZEN_API_KEY` |
+| OpenCode Go | API key | `OPENCODE_GO_API_KEY` |
+| Qwen OAuth | OAuth | `hermes auth add qwen-oauth` |
+| Custom endpoint | Config | `model.base_url` + `model.api_key` in config.yaml |
+| GitHub Copilot ACP | External | `COPILOT_CLI_PATH` or Copilot CLI |
+
+完整的 provider 文档：https://hermes-agent.nousresearch.com/docs/integrations/providers
+
+### Toolsets
+
+通过 `hermes tools`（交互模式）或 `hermes tools enable/disable NAME` 进行启用/禁用。
+
+| Toolset | What it provides |
+|---------|-----------------|
+| `web` | Web search and content extraction |
+| `search` | Web search only (subset of `web`) |
+| `browser` | Browser automation (Browserbase, Camofox, or local Chromium) |
+| `terminal` | Shell commands and process management |
+| `file` | File read/write/search/patch |
+| `code_execution` | Sandboxed Python execution |
+| `vision` | Image analysis |
+| `image_gen` | AI image generation |
+| `video` | Video analysis and generation |
+| `tts` | Text-to-speech |
+| `skills` | Skill browsing and management |
+| `memory` | Persistent cross-session memory |
+| `session_search` | Search past conversations |
+| `delegation` | Subagent task delegation |
+| `cronjob` | Scheduled task management |
+| `clarify` | Ask user clarifying questions |
+| `messaging` | Cross-platform message sending |
+| `todo` | In-session task planning and tracking |
+| `kanban` | Multi-agent work-queue tools (gated to workers) |
+| `debugging` | Extra introspection/debug tools (off by default) |
+| `safe` | Minimal, low-risk toolset for locked-down sessions |
+| `spotify` | Spotify playback and playlist control |
+| `homeassistant` | Smart home control (off by default) |
+| `discord` | Discord integration tools |
+| `discord_admin` | Discord admin/moderation tools |
+| `feishu_doc` | Feishu (Lark) document tools |
+| `feishu_drive` | Feishu (Lark) drive tools |
+| `yuanbao` | Yuanbao integration tools |
+| `rl` | Reinforcement learning tools (off by default) |
+| `moa` | Mixture of Agents (off by default) |
+
+完整的枚举定义位于 `toolsets.py` 中的 `TOOLSETS` 字典；`_HERMES_CORE_TOOLS` 是大多数平台默认继承的工具包。
+
+工具的更改会在 `/reset`（开启新会话）时生效。它们不会在对话中途应用，以保持 prompt caching。
+
+---
+
+## Project Context Files
+
+Hermes 通过从工作目录读取上下文文件，将项目级别的指令注入到系统提示词中。发现顺序是 **第一个匹配到的文件优先** — 每个会话只会加载一个项目上下文来源。
+
+| File (in priority order) | Discovery | Use when |
+|---|---|---|
+| `.hermes.md` / `HERMES.md` | Walks parents up to the git root, stops at git root | You want hierarchical project rules (root + per-package overrides) |
+| `AGENTS.md` / `agents.md` | **Cwd only** — subdirectory and parent copies are ignored | You want portable agent instructions that work the same in Hermes, Claude Code, Codex, etc. |
+| `CLAUDE.md` / `claude.md` | Cwd only | Same as AGENTS.md, Claude-flavored |
+| `.cursorrules` / `.cursor/rules/*.mdc` | Cwd only | Migrating from Cursor |
+
+`SOUL.md`（位于 `$HERMES_HOME` 中）是独立的，只要存在就会被加载——它用于设置 agent 的身份，而不是项目规则。
+
+### Pick the right one
+
+- **使用 `.hermes.md`** 当你希望特定于 Hermes 的行为应用于 cwd 之上（根目录 + 子目录），或者你希望规则从父目录继承时。向父目录的遍历会在 git 根目录处停止，因此 home 级别的 `.hermes.md` 不会泄漏到每个项目中（git 仓库的根目录是边界）。
+- **使用 `AGENTS.md`** 当同一个项目也会被其他 agent（Codex、Claude Code、OpenCode）处理时。这些工具都有它们各自关于 `AGENTS.md` 的约定，并且“仅限当前目录”的契约保证了文件的通用性。
+- **不要把项目规则放在 `~/.hermes/AGENTS.md`**（或任何其他 home 级别的位置）。当 Hermes 以该目录为 cwd 运行时，该文件会被加载——但仅限于那一个目录。对于跨项目的上下文，请使用 `SOUL.md`（位于 `$HERMES_HOME` 中，仅用于身份）或通过 `hermes skills install` 安装一个 skill。
+
+### Size and truncation
+
+每个上下文文件的上限为 20,000 个字符。超过此长度的文件会被执行 **头部 + 尾部** 截断（中间部分会被丢弃，并替换为 `[...truncated...]` 标记）。对于庞大的项目规则，建议将其拆分为多个 skills，而不是全塞进一个文件里。
+
+### 安全
+
+所有的上下文文件在进入系统提示词之前，都会经过威胁模式扫描器的检查。匹配到 prompt injection 或 promptware 模式的内容将被替换为 `[BLOCKED: ...]` 占位符。这意味着包含明显注入尝试的 `AGENTS.md` 文件内容将无法到达模型——扫描器拦截的是内容而不是文件本身，因此文件的其余部分仍会被正常加载。
+
+### Disable for one session
+
+`hermes --ignore-rules` 会跳过所有项目上下文文件（`.hermes.md`、`AGENTS.md`、`CLAUDE.md`、`.cursorrules`）以及 `SOUL.md` 身份、用户配置、插件和 MCP 服务器的自动注入。可使用它来排查某个问题是出在你的设置上还是 Hermes 本身。
+
+### 示例: 一个小型的 `.hermes.md`
+
+```markdown
+# My Project
+
+Hermes: when working in this repo, follow these rules.
+
+## Build
+- Always run `make test` before declaring a change done.
+- Use `uv run` for Python, not `pip install`.
+
+## Style
+- Prefer `pathlib.Path` over `os.path`.
+- No `print()` in production code — use the `logger`.
+```
+
+当 Hermes 在 `/home/me/projects/myrepo` 的任何子目录中运行时，位于 `/home/me/projects/myrepo/.hermes.md` 的该文件会被自动加载；但如果在 `/home/me/other-project` 中运行，则不会被加载。
+
+## 安全 & Privacy Toggles
+
+常见的“为什么 Hermes 会对我的输出/工具调用/命令做 X 操作？”相关的开关——以及改变它们的具体命令。其中大部分操作需要开启一个全新的会话（在聊天中输入 `/reset`，或者开启一个新的 `hermes` 调用），因为它们是在启动时只读取一次的。
+
+### Secret redaction in tool output
+
+Secret redaction（密钥屏蔽）**默认是开启的** —— 工具输出（终端 stdout、`read_file`、网页内容、subagent 摘要等）在进入对话上下文和日志之前，都会被扫描以查找类似 API key、token 和密钥的字符串。在日常使用中请保持启用状态：
+
+```bash
+hermes config set security.redact_secrets true       # keep enabled globally
+```
+
+**需要重启。** `security.redact_secrets` 是在导入时进行快照的——在会话进行中切换它（例如通过工具调用执行 `export HERMES_REDACT_SECRETS=false`）对正在运行的进程是**无效**的。请告诉用户在终端中通过 config 进行更改，然后开启一个新会话。这是刻意设计的安全措施——它防止了 LLM 在任务执行期间自行改变该开关状态。
+
+仅在你出于调试或 redactor 开发的目的，确实需要原始的类凭据字符串时，才予以禁用：
+```bash
+hermes config set security.redact_secrets false
+```
+
+### PII redaction in gateway messages
+
+与 secret redaction 是分开的。启用后，gateway 会对用户 ID 进行哈希处理，并在 session context 到达模型之前剔除其中的电话号码：
+
+```bash
+hermes config set privacy.redact_pii true    # enable
+hermes config set privacy.redact_pii false   # disable (default)
+```
+
+### Command approval prompts
+
+默认情况下（`approvals.mode: manual`），Hermes 在运行被标记为破坏性（`rm -rf`、`git reset --hard` 等）的 shell 命令之前，会提示用户进行确认。模式包括：
+
+- `manual` — 始终提示（默认）
+- `smart` — 使用辅助 LLM 自动批准低风险命令，仅在高风险时提示
+- `off` — 跳过所有批准提示（等同于 `--yolo`）
+
+```bash
+hermes config set approvals.mode smart       # recommended middle ground
+hermes config set approvals.mode off         # bypass everything (not recommended)
+```
+
+在不更改配置的情况下的单次绕过方法：
+- `hermes --yolo …`
+- `export HERMES_YOLO_MODE=1`
+
+注意：YOLO / `approvals.mode: off` **不会**关闭 secret redaction。它们是相互独立的。
+
+### Shell hooks allowlist
+
+某些 shell-hook 集成在触发之前需要显式加入白名单。通过 `~/.hermes/shell-hooks-allowlist.json` 进行管理——首次有 hook 想要运行时会交互式地提示用户。
+
+### Disabling the web/browser/image-gen tools
+
+为了让模型完全远离网络或媒体工具，请打开 `hermes tools` 并按平台进行切换。在下一个会话（`/reset`）生效。请参阅前面的 工具 & Skills 章节。
+
+---
+
+## Voice & Transcription
+
+### STT (Voice → Text)
+
+来自消息平台的语音消息会被自动转录。
+
+Provider 优先级（自动检测）：
+1. **Local faster-whisper** — 免费，无需 API key：`pip install faster-whisper`
+2. **Groq Whisper** — 免费层：设置 `GROQ_API_KEY`
+3. **OpenAI Whisper** — 付费：设置 `VOICE_TOOLS_OPENAI_KEY`
+4. **Mistral Voxtral** — 设置 `MISTRAL_API_KEY`
+
+配置：
+```yaml
+stt:
+  enabled: true
+  provider: local        # local, groq, openai, mistral
+  local:
+    model: base          # tiny, base, small, medium, large-v3
+```
+
+### TTS (Text → Voice)
+
+| Provider | Env var | Free? |
+|----------|---------|-------|
+| Edge TTS | None | Yes (default) |
+| ElevenLabs | `ELEVENLABS_API_KEY` | Free tier |
+| OpenAI | `VOICE_TOOLS_OPENAI_KEY` | Paid |
+| MiniMax | `MINIMAX_API_KEY` | Paid |
+| Mistral (Voxtral) | `MISTRAL_API_KEY` | Paid |
+| NeuTTS (local) | None (`pip install neutts[all]` + `espeak-ng`) | Free |
+
+语音命令：`/voice on` (语音到语音)，`/voice tts` (始终语音回复)，`/voice off`。
+
+---
+
+## Spawning Additional Hermes Instances
+
+将额外的 Hermes 进程作为完全独立的子进程运行——拥有独立的 sessions、工具和运行环境。
+
+### When to Use This vs delegate_task
+
+|  | `delegate_task` | Spawning `hermes` process |
+|-|-----------------|--------------------------|
+| Isolation | Separate conversation, shared process | Fully independent process |
+| Duration | Minutes (bounded by parent loop) | Hours/days |
+| Tool access | Subset of parent's tools | Full tool access |
+| Interactive | No | Yes (PTY mode) |
+| Use case | Quick parallel subtasks | Long autonomous missions |
+
+### One-Shot Mode
+
+```
+terminal(command="hermes chat -q 'Research GRPO papers and write summary to ~/research/grpo.md'", timeout=300)
+
+# Background for long tasks:
+terminal(command="hermes chat -q 'Set up CI/CD for ~/myapp'", background=true)
+```
+
+### Interactive PTY Mode (via tmux)
+
+Hermes 使用 prompt_toolkit，这需要一个真实的终端。使用 tmux 进行交互式生成：
+
+```
+# Start
+terminal(command="tmux new-session -d -s agent1 -x 120 -y 40 'hermes'", timeout=10)
+
+# Wait for startup, then send a message
+terminal(command="sleep 8 && tmux send-keys -t agent1 'Build a FastAPI auth service' Enter", timeout=15)
+
+# Read output
+terminal(command="sleep 20 && tmux capture-pane -t agent1 -p", timeout=5)
+
+# Send follow-up
+terminal(command="tmux send-keys -t agent1 'Add rate limiting middleware' Enter", timeout=5)
+
+# Exit
+terminal(command="tmux send-keys -t agent1 '/exit' Enter && sleep 2 && tmux kill-session -t agent1", timeout=10)
+```
+
+### Multi-Agent Coordination
+
+```
+# Agent A: backend
+terminal(command="tmux new-session -d -s backend -x 120 -y 40 'hermes -w'", timeout=10)
+terminal(command="sleep 8 && tmux send-keys -t backend 'Build REST API for user management' Enter", timeout=15)
+
+# Agent B: frontend
+terminal(command="tmux new-session -d -s frontend -x 120 -y 40 'hermes -w'", timeout=10)
+terminal(command="sleep 8 && tmux send-keys -t frontend 'Build React dashboard for user management' Enter", timeout=15)
+
+# Check progress, relay context between them
+terminal(command="tmux capture-pane -t backend -p | tail -30", timeout=5)
+terminal(command="tmux send-keys -t frontend 'Here is the API schema from the backend agent: ...' Enter", timeout=5)
+```
+
+### Session Resume
+
+```
+# Resume most recent session
+terminal(command="tmux new-session -d -s resumed 'hermes --continue'", timeout=10)
+
+# Resume specific session
+terminal(command="tmux new-session -d -s resumed 'hermes --resume 20260225_143052_a1b2c3'", timeout=10)
+```
+
+### Tips
+
+- **对于快速子任务，优先使用 `delegate_task`** — 比生成一个完整的进程开销更小
+- **使用 `-w`（worktree 模式）** 当生成的 agent 需要编辑代码时 — 可防止 git 冲突
+- **在 One-Shot 模式下设置超时时间** — 复杂任务可能需要 5-10 分钟
+- **使用 `hermes chat -q` 实现即发即弃** — 无需 PTY
+- **对于交互式会话使用 tmux** — 原生的 PTY 模式与 prompt_toolkit 存在 `\r` 与 `\n` 的问题
+- **对于计划任务，请改用 `cronjob` 工具** — 它可以处理消息分发和重试
+
+---
+
+## Durable & Background Systems
+
+四个系统会与主对话循环并行运行。这里是快速参考；完整的开发者文档位于 `AGENTS.md` 中，面向用户的文档位于 `website/docs/user-guide/features/` 目录下。
+
+### Delegation (`delegate_task`)
+
+同步生成 subagent —— 父进程会等待子进程的摘要反馈后，再继续其自身的循环。具备隔离的上下文和 terminal session。
+
+- **Single:** `delegate_task(goal, context, toolsets)`.
+- **Batch:** `delegate_task(tasks=[{goal, ...}, ...])` runs children in
+  parallel, capped by `delegation.max_concurrent_children` (default 3).
+- **Roles:** `leaf` (default; cannot re-delegate) vs `orchestrator`
+  (can spawn its own workers, bounded by `delegation.max_spawn_depth`).
+- **Not durable.** If the parent is interrupted, the child is
+  cancelled. For work that must outlive the turn, use `cronjob` or
+  `terminal(background=True, notify_on_complete=True)`.
+
+配置：位于 `config.yaml` 中的 `delegation.*`。
+
+### Cron (scheduled jobs)
+
+持久化调度器 — `cron/jobs.py` + `cron/scheduler.py`。可通过 `cronjob` 工具、`hermes cron` CLI（`list`、`add`、`edit`、`pause`、`resume`、`run`、`remove`）或 `/cron` slash 命令来驱动。
+
+- **Schedules:** duration (`"30m"`, `"2h"`), "every" phrase
+  (`"every monday 9am"`), 5-field cron (`"0 9 * * *"`), or ISO timestamp.
+- **Per-job knobs:** `skills`, `model`/`provider` override, `script`
+  (pre-run data collection; `no_agent=True` makes the script the whole
+  job), `context_from` (chain job A's output into job B), `workdir`
+  (run in a specific dir with its `AGENTS.md` / `CLAUDE.md` loaded),
+  multi-platform delivery.
+- **Invariants:** 3-minute hard interrupt per run, `.tick.lock` file
+  prevents duplicate ticks across processes, cron sessions pass
+  `skip_memory=True` by default, and cron deliveries are framed with a
+  header/footer instead of being mirrored into the target gateway
+  session (keeps role alternation intact).
+
+用户文档：https://hermes-agent.nousresearch.com/docs/user-guide/features/cron
+
+### Curator (skill lifecycle)
+
+对 agent 创建的 skills 进行后台维护。追踪使用情况，将闲置的 skills 标记为 stale，归档过期的 skills，并保留运行前的 tar.gz 备份以确保数据不丢失。
+
+- **CLI:** `hermes curator <verb>` — `status`, `run`, `pause`, `resume`,
+  `pin`, `unpin`, `archive`, `restore`, `prune`, `backup`, `rollback`.
+- **Slash:** `/curator <subcommand>` mirrors the CLI.
+- **Scope:** only touches skills with `created_by: "agent"` provenance.
+  Bundled + hub-installed skills are off-limits. **Never deletes** —
+  max destructive action is archive. Pinned skills are exempt from
+  every auto-transition and every LLM review pass.
+- **Telemetry:** sidecar at `~/.hermes/skills/.usage.json` holds
+  per-skill `use_count`, `view_count`, `patch_count`,
+  `last_activity_at`, `state`, `pinned`.
+
+配置：`curator.*` (`enabled`, `