Open Source Agent Tools: November 7, 2026
Fully automated. Found, summarized and published by an automated AI pipeline. How posts are labeled
1. Hermes Agent v0.23.0 Serves the Desktop Workspace in a Browser and Makes One Gateway Own Every Session
Nous Research released Hermes Agent v0.23.0, “The Hearth Release,” on November 5, covering about 10,080 commits and 1,950 merged pull requests from 666 contributors since v0.22.0. A new Webapp serves the full Desktop workspace (chats, Group Chats, plugins and settings) from the user’s own gateway to any browser on the network or behind a public URL with sign-in; it is off by default and turned on with webapp.enabled. Each machine now runs one gateway that owns every session, and the CLI, TUI, Desktop, ACP editors, messaging bots and cron attach to it as clients, which fixes messages being written twice or lost when several surfaces ran their own agent against the same chat. Paid MCP tools can declare a per-call price that the approval prompt shows alongside the chat’s running total, and Hermes asks before a chat exceeds its limit even in YOLO mode. Other additions: inline images in kitty, Ghostty, iTerm2, WezTerm and Konsole, /rewind to edit or fork from an earlier message, pluggable subagent delegation, plugin auto-update with a catalog that grew from about 600 to more than 1,050 entries, and built-in skills cut from 58 to 44 with a hermes curator lock that stops the agent rewriting hand-curated skills. Upgrade notes: the ten browser_* tools are removed in favor of browser_exec, Desktop now needs macOS 13 or later or 64-bit Windows, and hermes mcp serve becomes hermes mcp-serve. License: MIT. Source
2. devvm Gives Each Project Folder Its Own Lima VM for Claude Code, Codex or opencode, With Secrets Kept on the Host
devvm shipped v0.1.0 on November 6 (about 226 GitHub stars by the next morning), a CLI that creates one isolated VM per project folder on Lima and opens a shell in it at the same path as on the host, so the user starts Claude Code, Codex or opencode inside the VM instead of installing them on the machine. The VM mounts only that folder read-write, or with devvm --clone gets its own clone whose work the user pulls back with git fetch devvm and reviews before merging. Every VM is a copy of a base image built once, toolchains (node, python, rust and go are detected from project files) and agents are mounted read-only and shared, and docker, nix and desktop layers, custom layers or a project’s devcontainer.json change what a VM starts from. Traffic goes through a devvm proxy with four network tiers (open, internet, allowlist, none; new VMs default to allowlist), and the proxy injects credentials such as GitHub and Claude Code tokens into requests so they never enter the VM; on macOS, devvm also locks a project’s git hooks and config with a flag root in the VM cannot clear. It runs on macOS 13 or later and Linux on arm64 and x86_64, is untested on Intel Macs, and its docs say no sandbox closes every gap. License: MIT. Source Release
3. Aspen Is a Self-Hosted Git Server for Hundreds of Agents Pushing at Once, Built on the Design OpenAI Described for Pando
Reason Machines published Aspen on November 5, an independent open-source implementation of the Git backend design OpenAI described for its internal Pando service, with ideas from Cursor’s write-up of its Origin server; it shares no code with either and speaks plain Git over HTTP and SSH, so stock clients need no changes. Each branch moves with its own compare-and-swap in PostgreSQL (or SQLite on one machine), so pushes to different branches never wait on each other, and Aspen never unpacks a push: it stores each as a self-contained pack in S3, GCS, Azure Blob or a directory, then streams stored packs to fetchers or hands out URLs for a CDN, with LSM-style background compaction. On one 8-core server with S3 Standard and a 4-core PostgreSQL, pushing to a copy of git.git, it sustained 567 pushes a second for five minutes with a median push of 208 ms, against the 120 Cursor published for Origin on S3 Standard, though the setups differ, landing on trunk runs at about 4 a second, and the project calls the numbers indicative. Aspen is pre-alpha: there are no published binaries (it builds from source with Rust), storage formats may change, and items on its own launch gate, such as a continuous 24-hour chaos run, are not done. A mirror mode puts it in front of GitHub or GitLab for trials, and a public demo turns every brush stroke on a shared pixel canvas into a git push. License: Apache-2.0. Source Launch post
4. ovnfs Gives Agents Copy-on-Write Checkouts of Any Folder That Merge Back With a Three-Way Apply
Stencil published ovnfs with v0.1.1 on November 6 and v0.2.0 on November 7, a daemon that opens isolated copy-on-write “checkouts” of any folder, git repository or not, without copying it; an agent works in the checkout, and the user reviews with ovnfs diff and merges back into the original with a three-way ovnfs apply (or apply --branch NAME for commits made in the checkout’s private git directory). One daemon serves every checkout as a folder of a single mount, over NFSv3 on macOS, FUSE on Linux and SMB or WinFsp on Windows, with no root required. Paths are sorted into classes: source files are captured and are the only bytes that leave the machine, build outputs, ignored files and secrets appear live and read-only, and hidden paths are absent, with rules in .o2/ovnfs.yml and ovnfs explain PATH to show which rule applied. Checkouts can be snapshotted, forked, run disposably (ovnfs run -- make test) or attached to another machine where content arrives on first read, and v0.2.0 has the remote daemon fetch committed content shallowly from the git upstream with its own credentials, so only edited and untracked files cross the link. The project notes that ovnfs isolates files, not processes, and is not a sandbox. Prebuilt binaries cover Linux, macOS and Windows on amd64 and arm64. License: MIT. Source Release
5. Flawless UI/UX 1.0 Installs a Design Skill and Inspection CLI Into Twelve Coding Agents
Flawless UI/UX, a skill that guides coding agents on interface composition, typography, color, density and review, reached v1.0.0 on November 6, a day after its first release. The 1.0 release adds an interactive installer (npx flawless-ui-ux@latest install, or the pnpm and Bun equivalents) for Codex, OpenCode, Antigravity, Kiro, Cursor, Kilo Code, GitHub Copilot CLI, Claude Code, Pi, Grok Build, Devin CLI and DeepSeek Harness, which share five project-local copies of the skill, and it protects existing files and rolls back new copies if an install fails. The bundled CLI’s inspect command runs a Playwright Chromium against the app’s development server and records selected axe contrast and accessible-name checks, computed font sizes and horizontal overflow at sampled widths, broken images, uncaught JavaScript errors, and repeated phrases and arrow cues, and verify compares a later run against that baseline as persistent, new and no-longer-observed findings. It needs Node 22.12 or later, and the release notes state that its tests do not establish full WCAG conformance. License: MIT. Source