Deploy Hermes Workspace + Agent single container

- Dockerfile: Multi-stage build (Python agent + Node.js workspace)
- start.sh: Process supervision (agent → health-check → workspace)
- app.yaml: HF Spaces Docker SDK configuration
- .dockerignore: Optimized build context

Architecture: Single container with Hermes Agent (port 8642) and
Hermes Workspace (port 7860) communicating via localhost.

.dockerignore

@@ -0,0 +1,103 @@
+# =============================================================================
+# HuggingMes — Docker Build Context Filter
+# =============================================================================
+# Excludes files that are not needed inside the HF Spaces container,
+# reducing build context size and speeding up uploads.
+# =============================================================================
+
+# Build artefacts (regenerated inside container)
+node_modules
+dist
+.next
+.venv
+venv
+__pycache__
+*.pyc
+*.pyo
+
+# Version control
+.git
+.gitignore
+.gitattributes
+
+# IDE / editor
+.vscode
+.idea
+*.swp
+*.swo
+*~
+
+# Environment / secrets (must be set via HF Spaces secrets, never baked in)
+.env
+.env.local
+.env.*.local
+.envrc
+
+# Documentation (not needed at runtime)
+docs/
+*.md
+CHANGELOG*
+LICENSE
+SECURITY*
+CONTRIBUTING*
+FEATURES*
+FUTURE*
+screenshots/
+infographic/
+
+# Dev tooling config
+eslint.config.js
+prettier.config.js
+tsconfig.json
+vite.config.ts
+wrangler.jsonc
+flake.lock
+flake.nix
+nix/
+
+# CI / GitHub
+.github/
+
+# Dev containers
+.devcontainer/
+docker-compose*.yml
+docker/
+
+# Tests
+e2e/
+tests/
+playground-ws-worker/
+
+# Nix / packaging
+nix/
+packaging/
+setup.py
+MANIFEST.in
+
+# OS artefacts
+.DS_Store
+Thumbs.db
+
+# Large assets not needed at runtime
+assets/
+plans/
+*.plans/
+
+# Hermes Agent source (installed via pip, not copied)
+agent/
+gateway/
+hermes_cli/
+hermes*.py
+acp_adapter/
+cron/
+plugins/
+providers/
+tools/
+toolsets.py
+skills/
+uv.lock
+
+# This Dockerfile is for reference only; Dockerfile.hf is used for builds
+Dockerfile.hf
+start.sh
+app.yaml

Dockerfile

@@ -0,0 +1,106 @@
+# syntax=docker/dockerfile:1.6
+# =============================================================================
+# HuggingFace Spaces — Single-Container Deployment
+# =============================================================================
+# Multi-stage build bundling Hermes Agent (Python) + Hermes Workspace (Node.js)
+# into one container for HF Spaces (free tier: 2 vCPU / 16 GB).
+#
+# Stage 1: Install hermes-agent + dependencies (Python 3.12)
+# Stage 2: Build Hermes Workspace (Node.js 22 via nodesource)
+# Stage 3: Runtime — both installed, supervised by start.sh
+#
+# Build:
+#   docker build -f Dockerfile.hf -t huggingmes .
+#
+# HF Spaces auto-builds from this file when present in the repo root or
+# specified via the SDK configuration.
+# =============================================================================
+
+# ─── Stage 1: Python — install hermes-agent ────────────────────────────────
+FROM python:3.12-slim-bookworm AS agent-install
+
+# Install build essentials (needed for some pip wheels)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      build-essential curl ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install hermes-agent with the "web" extras for the API server (fastapi/uvicorn/aiohttp)
+RUN pip install --no-cache-dir --prefix=/install hermes-agent[web]
+
+# ─── Stage 2: Node.js — build Hermes Workspace ─────────────────────────────
+FROM node:22-slim AS workspace-build
+
+RUN corepack enable && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates && \
+    rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Install deps (cache-friendly: copy only manifests first)
+COPY package.json pnpm-lock.yaml* ./
+RUN pnpm install --frozen-lockfile
+
+# Copy sources and build
+COPY . .
+RUN pnpm build
+
+# ─── Stage 3: Runtime — unified container ──────────────────────────────────
+FROM python:3.12-slim-bookworm
+
+# --- Install Node.js 22 via nodesource ---
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      ca-certificates curl gnupg tini python3 \
+    && mkdir -p /etc/apt/keyrings \
+    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
+       | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+    && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" \
+       > /etc/apt/sources.list.d/nodesource.list \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends nodejs \
+    && rm -rf /var/lib/apt/lists/* \
+    && corepack enable \
+    && groupadd -r workspace && useradd -r -g workspace -u 1001 -m workspace
+
+# --- Copy Python (hermes-agent) from Stage 1 ---
+COPY --from=agent-install /install /usr/local
+
+# --- Copy workspace build artefacts from Stage 2 ---
+WORKDIR /app
+COPY --from=workspace-build --chown=workspace:workspace /app/dist ./dist
+COPY --from=workspace-build --chown=workspace:workspace /app/node_modules ./node_modules
+COPY --from=workspace-build --chown=workspace:workspace /app/package.json ./package.json
+COPY --from=workspace-build --chown=workspace:workspace /app/server-entry.js ./server-entry.js
+COPY --from=workspace-build --chown=workspace:workspace /app/skills ./skills
+
+# --- Copy startup script ---
+COPY --chown=workspace:workspace start.sh /usr/local/bin/start.sh
+RUN chmod +x /usr/local/bin/start.sh
+
+# --- Create hermes config dir for the agent ---
+RUN mkdir -p /home/workspace/.hermes && chown -R workspace:workspace /home/workspace/.hermes
+
+# --- Environment variables ---
+# HF Spaces sets $PORT automatically; we default to 7860 (the workspace port)
+# The agent API always runs on 8642 internally
+ENV NODE_ENV=production \
+    HERMES_API_URL=http://localhost:8642 \
+    PORT=7860 \
+    HOST=0.0.0.0 \
+    API_SERVER_ENABLED=true \
+    API_SERVER_HOST=127.0.0.1 \
+    API_SERVER_PORT=8642 \
+    PYTHONUNBUFFERED=1
+
+# HF Spaces default port
+EXPOSE 7860
+
+# Health check: verify the workspace HTTP server is responding
+HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
+  CMD curl -fsS http://127.0.0.1:7860/ >/dev/null || exit 1
+
+# Run as non-root user
+USER workspace
+
+# Entrypoint: start agent → health-check → start workspace → supervise
+ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/start.sh"]

app.yaml

@@ -0,0 +1,14 @@
+title: HuggingMes
+emoji: 🤖
+colorFrom: indigo
+colorTo: purple
+sdk: docker
+pinned: false
+license: mit
+short_description: Hermes Workspace — AI agent chat and multi-agent coding pipelines
+tags:
+  - agent
+  - ai
+  - coding
+  - workspace
+  - hermes

start.sh

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# =============================================================================
+# HuggingMes — Startup Script for HF Spaces
+# =============================================================================
+# Sequence:
+#   1. Launch Hermes Agent gateway with API server enabled (port 8642)
+#   2. Health-check the agent API endpoint
+#   3. Launch Hermes Workspace HTTP server (port $PORT, default 7860)
+#   4. Supervise both processes — restart workspace if it crashes;
+#      exit if the agent dies (it's the core dependency)
+# =============================================================================
+set -euo pipefail
+
+# --- Configuration ---
+AGENT_PORT="${API_SERVER_PORT:-8642}"
+WORKSPACE_PORT="${PORT:-7860}"
+WORKSPACE_HOST="${HOST:-0.0.0.0}"
+AGENT_HEALTH_URL="http://127.0.0.1:${AGENT_PORT}/health"
+HEALTH_RETRIES=30
+HEALTH_INTERVAL=2
+
+# --- Color output helpers ---
+log()  { echo "[$(date -u +%H:%M:%S)] $*"; }
+ok()   { log "✅ $*"; }
+fail() { log "❌ $*"; }
+info() { log "ℹ️  $*"; }
+
+# =============================================================================
+# Step 1: Configure and launch Hermes Agent gateway
+# =============================================================================
+log "─────────────────────────────────────────────"
+log "Starting Hermes Agent (API server on :${AGENT_PORT})..."
+log "─────────────────────────────────────────────"
+
+# Ensure API server is enabled in the agent config
+export API_SERVER_ENABLED=true
+export API_SERVER_HOST=127.0.0.1
+export API_SERVER_PORT="${AGENT_PORT}"
+
+# Launch the agent gateway in background
+# The gateway will start the api_server platform on port 8642 because
+# API_SERVER_ENABLED=true is set
+hermes gateway run --quiet &
+AGENT_PID=$!
+log "Agent PID: ${AGENT_PID}"
+
+# =============================================================================
+# Step 2: Health-check the agent API
+# =============================================================================
+log "Waiting for agent API to become healthy..."
+
+attempt=0
+while [ $attempt -lt $HEALTH_RETRIES ]; do
+    attempt=$((attempt + 1))
+    if curl -fsS "${AGENT_HEALTH_URL}" >/dev/null 2>&1; then
+        ok "Agent API is healthy (attempt ${attempt})"
+        break
+    fi
+    # Check if agent process is still alive
+    if ! kill -0 "$AGENT_PID" 2>/dev/null; then
+        fail "Agent process died during startup (PID ${AGENT_PID})"
+        exit 1
+    fi
+    info "Agent not ready yet (attempt ${attempt}/${HEALTH_RETRIES})..."
+    sleep "$HEALTH_INTERVAL"
+done
+
+if [ $attempt -ge $HEALTH_RETRIES ]; then
+    fail "Agent API failed to become healthy after $((HEALTH_RETRIES * HEALTH_INTERVAL))s"
+    # Print agent logs for debugging
+    kill -0 "$AGENT_PID" 2>/dev/null && kill "$AGENT_PID" 2>/dev/null || true
+    exit 1
+fi
+
+# =============================================================================
+# Step 3: Launch Hermes Workspace HTTP server
+# =============================================================================
+log "─────────────────────────────────────────────"
+log "Starting Hermes Workspace (port :${WORKSPACE_PORT})..."
+log "─────────────────────────────────────────────"
+
+# Workspace needs these env vars
+export NODE_ENV=production
+export HERMES_API_URL="http://localhost:${AGENT_PORT}"
+export PORT="${WORKSPACE_PORT}"
+export HOST="${WORKSPACE_HOST}"
+
+# Launch workspace in background
+node --max-old-space-size=2048 /app/server-entry.js &
+WORKSPACE_PID=$!
+log "Workspace PID: ${WORKSPACE_PID}"
+
+# =============================================================================
+# Step 4: Supervise both processes
+# =============================================================================
+log "─────────────────────────────────────────────"
+log "Supervising: Agent(${AGENT_PID}) + Workspace(${WORKSPACE_PID})"
+log "─────────────────────────────────────────────"
+
+# Trap signals for clean shutdown
+cleanup() {
+    log "Shutting down..."
+    kill "$WORKSPACE_PID" 2>/dev/null || true
+    kill "$AGENT_PID" 2>/dev/null || true
+    wait "$WORKSPACE_PID" 2>/dev/null || true
+    wait "$AGENT_PID" 2>/dev/null || true
+    log "All processes stopped."
+    exit 0
+}
+trap cleanup SIGTERM SIGINT SIGHUP
+
+# Main supervision loop
+while true; do
+    # Check if agent is still alive
+    if ! kill -0 "$AGENT_PID" 2>/dev/null; then
+        wait "$AGENT_PID" 2>/dev/null || true
+        fail "Agent process exited. Shutting down workspace."
+        kill "$WORKSPACE_PID" 2>/dev/null || true
+        exit 1
+    fi
+
+    # Check if workspace is still alive
+    if ! kill -0 "$WORKSPACE_PID" 2>/dev/null; then
+        wait "$WORKSPACE_PID" 2>/dev/null || true
+        log "⚠️  Workspace process exited. Restarting..."
+        node --max-old-space-size=2048 /app/server-entry.js &
+        WORKSPACE_PID=$!
+        log "Workspace restarted (PID: ${WORKSPACE_PID})"
+    fi
+
+    sleep 5
+done