spatial-workbench-agent (sha256:e7b63f74b1c8fdc7bb53d9134e0f09706755c088dc3598833506fec014f5c111)

Published 2026-10-20 03:59:06 -07:00 by jsvoros in jsvoros/spatial-workbench

Pull the image from the command line:

docker pull forgejo.hybridcloudhq.com/jsvoros/spatial-workbench-agent@sha256:e7b63f74b1c8fdc7bb53d9134e0f09706755c088dc3598833506fec014f5c111

Digest

sha256:e7b63f74b1c8fdc7bb53d9134e0f09706755c088dc3598833506fec014f5c111

For more information on the Container registry, see the documentation.

Hermes Agent gateway + OpenCode + AI Workbench companion API

# debian.sh --arch 'amd64' out/ 'trixie' '@1777939200'

ENV PYTHONUNBUFFERED=1

ENV PYTHONDONTWRITEBYTECODE=1

ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/tools

RUN /bin/sh -c apt-get -o Acquire::Retries=3 update && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl iputils-ping python3 python-is-python3 gcc g++ make cmake python3-dev python3-venv libffi-dev libolm-dev libatomic1 procps git openssh-client docker-cli xz-utils libasound2t64 libatk-bridge2.0-0t64 libatk1.0-0t64 libatspi2.0-0t64 libcairo2 libcups2t64 libdbus-1-3 libgbm1 libglib2.0-0t64 libnspr4 libnss3 libpango-1.0-0 libx11-6 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxkbcommon0 libxrandr2 && rm -rf /var/lib/apt/lists/* # buildkit

ARG HERMES_BOT_DESKTOP=0

RUN |1 HERMES_BOT_DESKTOP=0 /bin/sh -c if [ "$HERMES_BOT_DESKTOP" = "1" ]; then apt-get -o Acquire::Retries=3 update && DEBIAN_FRONTEND=noninteractive apt-get -o Acquire::Retries=3 install -y --no-install-recommends tigervnc-standalone-server xfce4-panel xfwm4 xfdesktop4 xfce4-settings xfce4-terminal dbus-x11 x11-xserver-utils x11-utils x11-xkb-utils xauth fonts-dejavu-core chromium && rm -rf /var/lib/apt/lists/*; fi # buildkit

COPY /opt/sqlite-fixed/lib/libsqlite3.so.3.53.4 /usr/local/lib/ # buildkit

RUN |1 HERMES_BOT_DESKTOP=0 /bin/sh -c ln -sf libsqlite3.so.3.53.4 /usr/local/lib/libsqlite3.so.0 && ln -sf libsqlite3.so.3.53.4 /usr/local/lib/libsqlite3.so && printf '/usr/local/lib\n' > /etc/ld.so.conf.d/000-sqlite-fixed.conf && ldconfig && python3 -c "import sqlite3, sys; v = sqlite3.sqlite_version_info; sys.exit(f'linked SQLite {sqlite3.sqlite_version} still has the WAL-reset bug') if v < (3, 51, 3) else None; db = sqlite3.connect(':memory:'); db.execute(\"CREATE VIRTUAL TABLE docs USING fts5(content, tokenize='trigram')\"); db.execute(\"INSERT INTO docs VALUES ('hermes')\"); sys.exit('SQLite FTS5 trigram self-test failed') if db.execute(\"SELECT count(*) FROM docs WHERE docs MATCH 'erm'\").fetchone()[0] != 1 else None; db.close()" # buildkit

ARG TARGETARCH=amd64

ARG S6_OVERLAY_VERSION=3.2.3.0

ARG S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf

ARG S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563

ARG S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581

ARG S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e

RUN |7 HERMES_BOT_DESKTOP=0 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c set -eu; case "${TARGETARCH:-amd64}" in amd64) s6_arch="x86_64"; s6_arch_sha="${S6_OVERLAY_X86_64_SHA256}" ;; arm64) s6_arch="aarch64"; s6_arch_sha="${S6_OVERLAY_AARCH64_SHA256}" ;; *) echo "Unsupported TARGETARCH=${TARGETARCH} for s6-overlay" >&2; exit 1 ;; esac; base="https://github.com/just-containers/s6-overlay/releases/download/v${S6_OVERLAY_VERSION}"; curl -fsSL --retry 3 -o /tmp/s6-overlay-noarch.tar.xz "${base}/s6-overlay-noarch.tar.xz"; curl -fsSL --retry 3 -o /tmp/s6-overlay-symlinks-noarch.tar.xz "${base}/s6-overlay-symlinks-noarch.tar.xz"; curl -fsSL --retry 3 -o /tmp/s6-overlay-arch.tar.xz "${base}/s6-overlay-${s6_arch}.tar.xz"; { printf '%s %s\n' "${S6_OVERLAY_NOARCH_SHA256}" /tmp/s6-overlay-noarch.tar.xz; printf '%s %s\n' "${s6_arch_sha}" /tmp/s6-overlay-arch.tar.xz; printf '%s %s\n' "${S6_OVERLAY_SYMLINKS_SHA256}" /tmp/s6-overlay-symlinks-noarch.tar.xz; } > /tmp/s6-overlay.sha256; sha256sum -c /tmp/s6-overlay.sha256; tar -C / -Jxpf /tmp/s6-overlay-noarch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-arch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-symlinks-noarch.tar.xz; rm /tmp/s6-overlay-*.tar.xz /tmp/s6-overlay.sha256 # buildkit

COPY --chmod=0755 docker/tini-shim.sh /usr/bin/tini # buildkit

WORKDIR /opt/hermes

ENV HERMES_RUNTIME_DIR=/opt/hermes/tools

COPY pm/ pm/ # buildkit

COPY hermes_constants.py hermes_constants.py # buildkit

COPY hermes_cli/__init__.py hermes_cli/runtime_state.py hermes_cli/ # buildkit

COPY scripts/bundles/payload.py scripts/bundles/payload.py # buildkit

RUN |7 HERMES_BOT_DESKTOP=0 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c set -eu; python3 -c 'from pm import ensure; [ensure(name, explicit=True) for name in ("uv", "chromium", "npm", "ffmpeg", "ripgrep")]'; python3 -c 'from pathlib import Path; from pm import installed_package; [Path("/usr/local/bin", command).symlink_to(installed_package(package).binary) for command, package in (("python3", "python"), ("node", "node"), ("npm", "npm"), ("ffmpeg", "ffmpeg"), ("rg", "ripgrep"))]; Path("/usr/local/bin/ffprobe").symlink_to(installed_package("ffmpeg").binary.with_name("ffprobe"))'; ffmpeg -version >/dev/null; ffprobe -version >/dev/null; rg --version >/dev/null; python3 -c 'import shutil; from pathlib import Path; from pm import env_for; Path("/usr/local/bin/npx").symlink_to(shutil.which("npx", path=env_for("npm", base_env={})["PATH"]))'; node --version; npm --version; browser_bin="$(python3 -c 'from pm import installed_package; print(installed_package("chromium").binary)')"; test -n "$browser_bin"; "$browser_bin" --version; mkdir -p /etc/hermes; printf '%s' "$browser_bin" > /etc/hermes/agent-browser-executable-path # buildkit

ENV HERMES_PYTHON=/usr/local/bin/python3

ENV CC=gcc CXX=g++

COPY pyproject.toml uv.lock ./ # buildkit

COPY /opt/hermes/node_modules/typescript /opt/hermes/node_modules/typescript # buildkit

COPY plugins/platforms/photon/sidecar/package.json plugins/platforms/photon/sidecar/package-lock.json plugins/platforms/photon/sidecar/patch-spectrum-mixed-attachments.mjs plugins/platforms/photon/sidecar/ # buildkit

COPY /opt/products/tui /opt/hermes/ui-tui # buildkit

COPY /opt/products/web /opt/hermes/hermes_cli/web_dist # buildkit

COPY --chmod=a+rX,go-w . . # buildkit

USER root

RUN |7 HERMES_BOT_DESKTOP=0 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c set -eu; if [ ! -f /opt/hermes/install-stamp.json ]; then printf '{"schemaVersion":2,"commit":"0000000000000000000000000000000000000000","distribution":"docker","source":"fallback","updateMechanism":"external"}\n' > /opt/hermes/install-stamp.json; fi; python3 -c 'import json; from pathlib import Path; path = Path("/opt/hermes/install-stamp.json"); stamp = json.loads(path.read_text()); stamp["pmRuntime"] = "/opt/hermes/pm-runtime"; path.write_text(json.dumps(stamp) + "\n")'; mkdir -p /etc/hermes; python3 -c 'import json, pathlib, tomllib; project = tomllib.loads(pathlib.Path("/opt/hermes/pyproject.toml").read_text(encoding="utf-8"))["project"]; stamp = json.loads(pathlib.Path("/opt/hermes/install-stamp.json").read_text(encoding="utf-8")); commit = stamp.get("commit"); revision = commit if commit and set(commit) != {"0"} else None; marker = pathlib.Path("/etc/hermes/image-provenance.json"); marker.write_text(json.dumps({"schema": 1, "deployment_kind": "image", "manager": "docker", "image": "nousresearch/hermes-agent", "version": project["version"], "revision": revision}, sort_keys=True, separators=(",", ":")) + "\n", encoding="utf-8"); marker.chmod(0o444)' # buildkit

COPY docker/s6-rc.d/ /etc/s6-overlay/s6-rc.d/ # buildkit

COPY --chmod=0755 docker/cont-init.d/015-supervise-perms /etc/cont-init.d/015-supervise-perms # buildkit

COPY --chmod=0755 docker/cont-init.d/02-reconcile-profiles /etc/cont-init.d/02-reconcile-profiles # buildkit

ENV HERMES_WEB_DIST=/opt/hermes/hermes_cli/web_dist

ENV HERMES_TUI_DIR=/opt/hermes/ui-tui

ENV HERMES_HOME=/opt/data

ENV HERMES_WRITE_SAFE_ROOT=/opt/data

ENV XDG_RUNTIME_DIR=/tmp/hermes-runtime

COPY --chmod=0755 docker/hermes-exec-shim.sh /opt/hermes/bin/hermes # buildkit

COPY --chmod=0755 docker/entrypoint-dispatch.sh /opt/hermes/docker/entrypoint-dispatch.sh # buildkit

ENV PATH=/opt/hermes/bin:/opt/hermes/.venv/bin:/opt/data/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

ENV HERMES_PYTHON=/opt/hermes/.venv/bin/python

VOLUME [/opt/data]

ENTRYPOINT ["/opt/hermes/docker/entrypoint-dispatch.sh"]

CMD []

ARG OPENCODE_VERSION=latest

ARG WORKBENCH_VERSION=v0.1.70

ARG WORKBENCH_UPDATE_URL=https://forgejo.hybridcloudhq.com/api/v1/repos/jsvoros/spatial-workbench/tags?limit=50

USER root

COPY /uv /usr/local/bin/uv # buildkit

RUN |3 OPENCODE_VERSION=latest WORKBENCH_VERSION=v0.1.70 WORKBENCH_UPDATE_URL=https://forgejo.hybridcloudhq.com/api/v1/repos/jsvoros/spatial-workbench/tags?limit=50 /bin/sh -c uv --version && uv pip install --python /opt/hermes/.venv/bin/python PyYAML==6.0.3 && /opt/hermes/.venv/bin/python -c "import yaml" # buildkit

RUN |3 OPENCODE_VERSION=latest WORKBENCH_VERSION=v0.1.70 WORKBENCH_UPDATE_URL=https://forgejo.hybridcloudhq.com/api/v1/repos/jsvoros/spatial-workbench/tags?limit=50 /bin/sh -c npm install -g --prefix /usr/local --allow-scripts=opencode-ai "opencode-ai@${OPENCODE_VERSION}" && npm cache clean --force && opencode --version # buildkit

COPY --chmod=0755 dashboard_server.py /opt/workbench/dashboard_server.py # buildkit

COPY hermes_live.py /opt/workbench/hermes_live.py # buildkit

COPY jobs_engine.py /opt/workbench/jobs_engine.py # buildkit

COPY opencode_config.py /opt/workbench/opencode_config.py # buildkit

COPY hermes_config.py /opt/workbench/hermes_config.py # buildkit

COPY provider_catalog.py /opt/workbench/provider_catalog.py # buildkit

COPY hermes_runtime.py /opt/workbench/hermes_runtime.py # buildkit

COPY --chmod=0755 deploy/agent/hermes /opt/workbench/bin/hermes # buildkit

COPY free_models.py /opt/workbench/free_models.py # buildkit

COPY speech_services.py /opt/workbench/speech_services.py # buildkit

COPY --chmod=0755 deploy/agent/workbench_mcp.py /opt/workbench/workbench_mcp.py # buildkit

COPY --chmod=0755 deploy/agent/bootstrap.py /opt/workbench/bootstrap.py # buildkit

COPY --chmod=0755 deploy/agent/sandbox_reaper.py /opt/workbench/sandbox_reaper.py # buildkit

COPY --chmod=0755 deploy/agent/cont-init.d/50-workbench-bootstrap /etc/cont-init.d/50-workbench-bootstrap # buildkit

COPY --chmod=0755 deploy/agent/workbench-update /usr/local/bin/workbench-update # buildkit

COPY deploy/agent/s6-rc.d/ /etc/s6-overlay/s6-rc.d/ # buildkit

RUN |3 OPENCODE_VERSION=latest WORKBENCH_VERSION=v0.1.70 WORKBENCH_UPDATE_URL=https://forgejo.hybridcloudhq.com/api/v1/repos/jsvoros/spatial-workbench/tags?limit=50 /bin/sh -c chmod 0755 /etc/s6-overlay/s6-rc.d/workbench-api/run /etc/s6-overlay/s6-rc.d/workbench-api/finish /etc/s6-overlay/s6-rc.d/opencode-server/run /etc/s6-overlay/s6-rc.d/opencode-server/finish /etc/s6-overlay/s6-rc.d/sandbox-reaper/run /etc/s6-overlay/s6-rc.d/hermes-serve/run # buildkit

ENV WORKBENCH_API=1 WORKBENCH_VERSION=v0.1.70 WORKBENCH_UPDATE_URL=https://forgejo.hybridcloudhq.com/api/v1/repos/jsvoros/spatial-workbench/tags?limit=50 NPM_CONFIG_PREFIX=/opt/data/.local WORKBENCH_API_PORT=8080 OPENCODE_SERVER=1 OPENCODE_SERVER_PORT=4096 WORKBENCH_ENV_FILE=/opt/data/workbench.env HERMES_AGENT_DIR=/opt/hermes HERMES_PYTHON=/opt/hermes/.venv/bin/python HERMES_CLI_PATH=/opt/workbench/bin/hermes HERMES_IMAGE_DIR=/opt/hermes HERMES_IMAGE_PYTHON=/opt/hermes/.venv/bin/python WORKBENCH_HERMES_MANAGED=1 PATH=/opt/workbench/bin:/opt/hermes/bin:/opt/hermes/.venv/bin:/opt/data/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin HERMES_WORKDIR=/workspace WORKSPACE_ROOT=/workspace HERMES_WRITE_SAFE_ROOT=/opt/data:/workspace WIKI_ROOT=/workspace/wiki WIKI_PATH=/workspace/wiki API_SERVER_ENABLED=true API_SERVER_HOST=0.0.0.0 API_SERVER_PORT=8642

LABEL org.opencontainers.image.title=spatial-workbench-agent org.opencontainers.image.description=Hermes Agent gateway + OpenCode + AI Workbench companion API org.opencontainers.image.version=v0.1.70

VOLUME [/opt/data /workspace]

EXPOSE [8080/tcp 8642/tcp]

HEALTHCHECK {Test:[CMD-SHELL curl -fsS "http://127.0.0.1:${WORKBENCH_API_PORT}/api/config" >/dev/null || exit 1] Interval:30s Timeout:5s StartPeriod:1m0s StartInterval:0s Retries:3}

CMD ["python3" "/opt/workbench/hermes_runtime.py" "supervise" "gateway"]

Key	Value
com.docker.compose.project	spatial-workbench
com.docker.compose.service	agent
com.docker.compose.version	2.40.3
org.opencontainers.image.description	Hermes Agent gateway + OpenCode + AI Workbench companion API
org.opencontainers.image.title	spatial-workbench-agent
org.opencontainers.image.version	v0.1.70

Details

Container

jsvoros/spatial-workbench

2026-10-20 03:59:06 -07:00

OCI / Docker

linux/amd64

1.2 GiB

Versions (79) View all

latest

2026-10-30

v0.1.81

2026-10-30

v0.1.80

2026-10-28

v0.1.79

2026-10-28

v0.1.78

2026-10-28

Issues

spatial-workbench-agent (sha256:e7b63f74b1c8fdc7bb53d9134e0f09706755c088dc3598833506fec014f5c111)

Installation

About this package

Image layers

Labels