Add Hermes Agent bootstrap script

bootstrap.sh

@@ -0,0 +1,193 @@
+#!/usr/bin/env bash
+# ============================================================================
+# Hermes Agent on a Bucket — one-shot bootstrap
+# ============================================================================
+# Mounts the merve/hermes-agent HF bucket, installs Hermes Agent, prompts for
+# a Telegram bot token, and launches the agent. Idempotent: re-runs are safe.
+#
+#   bash <(curl -fsSL https://huggingface.co/merve/hermes-agent-bootstrap/resolve/main/bootstrap.sh)
+#
+# What it touches:
+#   ~/hermes-bucket          — mount point for the bucket
+#   ~/.hermes-secrets.env    — your local secrets (HF_TOKEN, Telegram), NEVER uploaded
+#   ~/.hermes/               — Hermes code + venv
+#   ~/.local/bin/{hf,hermes,hf-mount} — installed CLIs
+# ============================================================================
+set -euo pipefail
+
+BUCKET="merve/hermes-agent"
+MOUNT="$HOME/hermes-bucket"
+SECRETS="$HOME/.hermes-secrets.env"
+
+G='\033[0;32m'; Y='\033[0;33m'; C='\033[0;36m'; R='\033[0;31m'; N='\033[0m'
+say()  { printf "${C}→${N} %s\n" "$*"; }
+ok()   { printf "${G}✓${N} %s\n" "$*"; }
+warn() { printf "${Y}!${N} %s\n" "$*"; }
+die()  { printf "${R}✗${N} %s\n" "$*" >&2; exit 1; }
+ask()  { local __var=$1; shift; local __prompt="$*"; read -rp "  $__prompt" "$__var" </dev/tty; }
+
+export PATH="$HOME/.local/bin:$PATH"
+
+printf "\n${C}⚕ Hermes Agent — bucket bootstrap${N}\n\n"
+
+# ----------------------------------------------------------------------------
+# 1. hf CLI
+# ----------------------------------------------------------------------------
+if ! command -v hf >/dev/null 2>&1; then
+  say "Installing hf CLI..."
+  curl -LsSf https://hf.co/cli/install.sh | bash
+  export PATH="$HOME/.local/bin:$PATH"
+fi
+ok "hf CLI: $(command -v hf)"
+
+# ----------------------------------------------------------------------------
+# 2. Hugging Face login
+# ----------------------------------------------------------------------------
+if ! hf auth whoami >/dev/null 2>&1; then
+  warn "Not logged in to Hugging Face."
+  echo "  Run this in another terminal, then re-run the bootstrap:"
+  echo "    hf auth login"
+  exit 1
+fi
+HF_USER="$(hf auth whoami 2>/dev/null | head -1 | awk '{print $NF}')"
+HF_TOKEN_VAL="$(python3 -c 'from huggingface_hub import get_token; print(get_token() or "")' 2>/dev/null || true)"
+[ -n "$HF_TOKEN_VAL" ] || die "Couldn't read HF token from local cache"
+ok "Hugging Face: logged in as $HF_USER"
+
+# ----------------------------------------------------------------------------
+# 3. hf-mount
+# ----------------------------------------------------------------------------
+if ! command -v hf-mount >/dev/null 2>&1; then
+  say "Installing hf-mount..."
+  curl -fsSL https://raw.githubusercontent.com/huggingface/hf-mount/main/install.sh | sh
+fi
+ok "hf-mount: $(command -v hf-mount)"
+
+# ----------------------------------------------------------------------------
+# 4. Mount the bucket
+# ----------------------------------------------------------------------------
+mkdir -p "$MOUNT"
+if hf-mount status 2>/dev/null | grep -q "$MOUNT"; then
+  ok "Bucket already mounted at $MOUNT"
+else
+  say "Mounting $BUCKET at $MOUNT..."
+  hf-mount start --hf-token "$HF_TOKEN_VAL" bucket "$BUCKET" "$MOUNT" >/dev/null
+  ok "Mounted $BUCKET → $MOUNT"
+fi
+
+# ----------------------------------------------------------------------------
+# 5. Hermes Agent
+# ----------------------------------------------------------------------------
+if ! command -v hermes >/dev/null 2>&1; then
+  say "Installing Hermes Agent (this takes a minute)..."
+  curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash -s -- --skip-setup --skip-browser >/dev/null
+  export PATH="$HOME/.local/bin:$PATH"
+fi
+ok "Hermes: $(command -v hermes)"
+
+# ----------------------------------------------------------------------------
+# 6. Telegram (required step)
+# ----------------------------------------------------------------------------
+printf "\n${C}Telegram setup${N}\n"
+
+EXISTING_TG=""
+if [ -f "$SECRETS" ] && grep -q "^TELEGRAM_BOT_TOKEN=" "$SECRETS"; then
+  EXISTING_TG="$(grep "^TELEGRAM_BOT_TOKEN=" "$SECRETS" | head -1 | cut -d= -f2-)"
+fi
+
+if [ -n "$EXISTING_TG" ]; then
+  ok "Telegram bot token already on disk ($SECRETS)"
+  TG_TOKEN="$EXISTING_TG"
+  USER_ID="$(grep "^TELEGRAM_ALLOWED_USERS=" "$SECRETS" 2>/dev/null | head -1 | cut -d= -f2- || true)"
+else
+  echo "  1. Open Telegram, message @BotFather, send /newbot, follow the prompts."
+  echo "  2. Paste the bot token below (looks like 123456:ABC-DEF...)"
+  echo ""
+  ask TG_TOKEN "Telegram bot token: "
+  [ -n "$TG_TOKEN" ] || die "Telegram bot token required"
+
+  echo ""
+  echo "  3. Now open your bot in Telegram and send it any message — say \"hi\"."
+  ask __continue "Press Enter once you've messaged the bot: "
+
+  say "Looking up your Telegram user id from getUpdates..."
+  USER_ID="$(curl -s "https://api.telegram.org/bot${TG_TOKEN}/getUpdates" | python3 -c "
+import json, sys
+try:
+    d = json.load(sys.stdin)
+    msgs = [u.get('message') or u.get('edited_message') or u.get('channel_post') for u in d.get('result', [])]
+    ids = [str(m['from']['id']) for m in msgs if m and m.get('from', {}).get('id')]
+    print(ids[-1] if ids else '')
+except Exception:
+    print('')
+")"
+  if [ -n "$USER_ID" ]; then
+    ok "Detected your Telegram user id: $USER_ID"
+  else
+    warn "Couldn't auto-detect. Enter it manually."
+    ask USER_ID "Telegram numeric user id: "
+    [ -n "$USER_ID" ] || die "Telegram user id required"
+  fi
+fi
+
+# ----------------------------------------------------------------------------
+# 7. Write secrets file (outside the bucket, mode 600)
+# ----------------------------------------------------------------------------
+umask 077
+cat > "$SECRETS" <<EOF
+# Hermes secrets — DO NOT commit, DO NOT put in the bucket
+HF_TOKEN=$HF_TOKEN_VAL
+TELEGRAM_BOT_TOKEN=$TG_TOKEN
+TELEGRAM_ALLOWED_USERS=$USER_ID
+TELEGRAM_HOME_CHANNEL=$USER_ID
+EOF
+chmod 600 "$SECRETS"
+ok "Secrets saved to $SECRETS (mode 600)"
+
+# ----------------------------------------------------------------------------
+# 8. Shell aliases
+# ----------------------------------------------------------------------------
+SHELL_NAME="${SHELL##*/}"
+case "$SHELL_NAME" in
+  zsh)  SHELL_RC="$HOME/.zshrc" ;;
+  bash) SHELL_RC="$HOME/.bashrc" ;;
+  *)    SHELL_RC="$HOME/.profile" ;;
+esac
+
+if ! grep -q "# hermes-bucket aliases" "$SHELL_RC" 2>/dev/null; then
+  cat >> "$SHELL_RC" <<EOF
+
+# hermes-bucket aliases (added by bootstrap.sh)
+alias hermes-here='HERMES_HOME=\$HOME/hermes-bucket bash -c "set -a; source \$HOME/.hermes-secrets.env; set +a; exec hermes"'
+alias hermes-gateway='HERMES_HOME=\$HOME/hermes-bucket bash -c "set -a; source \$HOME/.hermes-secrets.env; set +a; exec hermes gateway start"'
+EOF
+  ok "Added shell aliases to $SHELL_RC"
+else
+  ok "Shell aliases already present in $SHELL_RC"
+fi
+
+# ----------------------------------------------------------------------------
+# 9. Summary + launch
+# ----------------------------------------------------------------------------
+cat <<EOF
+
+${G}✓ Ready.${N}
+
+  Mount:   $MOUNT
+  Secrets: $SECRETS
+  Model:   Qwen/Qwen3.6-35B-A3B  (HF Inference Providers → deepinfra)
+
+  ${C}hermes-here${N}     — chat in your terminal
+  ${C}hermes-gateway${N}  — start Telegram bot (talk from your phone)
+
+EOF
+
+if [ -t 0 ] && [ -t 1 ]; then
+  say "Launching Hermes now..."
+  sleep 1
+  export HERMES_HOME="$MOUNT"
+  set -a; source "$SECRETS"; set +a
+  exec hermes
+else
+  say "Run ${C}source $SHELL_RC${N} then ${C}hermes-here${N} to start chatting."
+fi