Initial commit: Hermes Agent 多实例管理与 Web 控制台
基于官方 nousresearch/hermes-agent 镜像的 CLI、Docker Compose 与 Web 管理界面，支持多实例部署；敏感配置与实例数据由 .gitignore 排除。 Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
carl
@@ -0,0 +1,14 @@
|
|||||||
|
# 复制为 .env 后填写（本文件可提交，.env 已在 .gitignore）
|
||||||
|
|
||||||
|
# 官方预构建镜像（推荐，无需 clone 源码、无需 docker build）
|
||||||
|
HERMES_IMAGE=nousresearch/hermes-agent:latest
|
||||||
|
|
||||||
|
# 可选：实例数据父目录
|
||||||
|
# HERMES_HOME_DATA_DIR=/path/to/parent
|
||||||
|
|
||||||
|
# 可选：从源码本地构建（耗时长；需 clone 仓库并设置 HERMES_SOURCE）
|
||||||
|
# HERMES_USE_LOCAL_BUILD=1
|
||||||
|
# HERMES_SOURCE=/absolute/path/to/hermes-agent
|
||||||
|
|
||||||
|
# HERMES_CONTAINER_UID / HERMES_CONTAINER_GID
|
||||||
|
# HERMES_AGENT_WEB_ADMIN_PASSWORD=你的强密码
|
||||||
+184
@@ -0,0 +1,184 @@
|
|||||||
|
# ---> Python
|
||||||
|
# Byte-compiled / optimized / DLL files
|
||||||
|
__pycache__/
|
||||||
|
*.py[cod]
|
||||||
|
*$py.class
|
||||||
|
|
||||||
|
# C extensions
|
||||||
|
*.so
|
||||||
|
|
||||||
|
# Distribution / packaging
|
||||||
|
.Python
|
||||||
|
build/
|
||||||
|
develop-eggs/
|
||||||
|
dist/
|
||||||
|
downloads/
|
||||||
|
eggs/
|
||||||
|
.eggs/
|
||||||
|
lib/
|
||||||
|
lib64/
|
||||||
|
parts/
|
||||||
|
sdist/
|
||||||
|
var/
|
||||||
|
wheels/
|
||||||
|
share/python-wheels/
|
||||||
|
*.egg-info/
|
||||||
|
.installed.cfg
|
||||||
|
*.egg
|
||||||
|
MANIFEST
|
||||||
|
|
||||||
|
# PyInstaller
|
||||||
|
# Usually these files are written by a python script from a template
|
||||||
|
# before PyInstaller builds the exe, so as to inject date/other infos into it.
|
||||||
|
*.manifest
|
||||||
|
*.spec
|
||||||
|
|
||||||
|
# Installer logs
|
||||||
|
pip-log.txt
|
||||||
|
pip-delete-this-directory.txt
|
||||||
|
|
||||||
|
# Unit test / coverage reports
|
||||||
|
htmlcov/
|
||||||
|
.tox/
|
||||||
|
.nox/
|
||||||
|
.coverage
|
||||||
|
.coverage.*
|
||||||
|
.cache
|
||||||
|
nosetests.xml
|
||||||
|
coverage.xml
|
||||||
|
*.cover
|
||||||
|
*.py,cover
|
||||||
|
.hypothesis/
|
||||||
|
.pytest_cache/
|
||||||
|
cover/
|
||||||
|
|
||||||
|
# Translations
|
||||||
|
*.mo
|
||||||
|
*.pot
|
||||||
|
|
||||||
|
# Django stuff:
|
||||||
|
*.log
|
||||||
|
local_settings.py
|
||||||
|
db.sqlite3
|
||||||
|
db.sqlite3-journal
|
||||||
|
|
||||||
|
# Flask stuff:
|
||||||
|
instance/
|
||||||
|
.webassets-cache
|
||||||
|
|
||||||
|
# Scrapy stuff:
|
||||||
|
.scrapy
|
||||||
|
|
||||||
|
# Sphinx documentation
|
||||||
|
docs/_build/
|
||||||
|
|
||||||
|
# PyBuilder
|
||||||
|
.pybuilder/
|
||||||
|
target/
|
||||||
|
|
||||||
|
# Jupyter Notebook
|
||||||
|
.ipynb_checkpoints
|
||||||
|
|
||||||
|
# IPython
|
||||||
|
profile_default/
|
||||||
|
ipython_config.py
|
||||||
|
|
||||||
|
# pyenv
|
||||||
|
# For a library or package, you might want to ignore these files since the code is
|
||||||
|
# intended to run in multiple environments; otherwise, check them in:
|
||||||
|
# .python-version
|
||||||
|
|
||||||
|
# pipenv
|
||||||
|
# According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
|
||||||
|
# However, in case of collaboration, if having platform-specific dependencies or dependencies
|
||||||
|
# having no cross-platform support, pipenv may install dependencies that don't work, or not
|
||||||
|
# install all needed dependencies.
|
||||||
|
#Pipfile.lock
|
||||||
|
|
||||||
|
# UV
|
||||||
|
# Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
|
||||||
|
# This is especially recommended for binary packages to ensure reproducibility, and is more
|
||||||
|
# commonly ignored for libraries.
|
||||||
|
#uv.lock
|
||||||
|
|
||||||
|
# poetry
|
||||||
|
# Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
|
||||||
|
# This is especially recommended for binary packages to ensure reproducibility, and is more
|
||||||
|
# commonly ignored for libraries.
|
||||||
|
# https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
|
||||||
|
#poetry.lock
|
||||||
|
|
||||||
|
# pdm
|
||||||
|
# Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
|
||||||
|
#pdm.lock
|
||||||
|
# pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
|
||||||
|
# in version control.
|
||||||
|
# https://pdm.fming.dev/latest/usage/project/#working-with-version-control
|
||||||
|
.pdm.toml
|
||||||
|
.pdm-python
|
||||||
|
.pdm-build/
|
||||||
|
|
||||||
|
# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
|
||||||
|
__pypackages__/
|
||||||
|
|
||||||
|
# Celery stuff
|
||||||
|
celerybeat-schedule
|
||||||
|
celerybeat.pid
|
||||||
|
|
||||||
|
# SageMath parsed files
|
||||||
|
*.sage.py
|
||||||
|
|
||||||
|
# Environments
|
||||||
|
.env
|
||||||
|
.venv
|
||||||
|
env/
|
||||||
|
venv/
|
||||||
|
ENV/
|
||||||
|
env.bak/
|
||||||
|
venv.bak/
|
||||||
|
|
||||||
|
# Spyder project settings
|
||||||
|
.spyderproject
|
||||||
|
.spyproject
|
||||||
|
|
||||||
|
# Rope project settings
|
||||||
|
.ropeproject
|
||||||
|
|
||||||
|
# mkdocs documentation
|
||||||
|
/site
|
||||||
|
|
||||||
|
# mypy
|
||||||
|
.mypy_cache/
|
||||||
|
.dmypy.json
|
||||||
|
dmypy.json
|
||||||
|
|
||||||
|
# Pyre type checker
|
||||||
|
.pyre/
|
||||||
|
|
||||||
|
# pytype static type analyzer
|
||||||
|
.pytype/
|
||||||
|
|
||||||
|
# Cython debug symbols
|
||||||
|
cython_debug/
|
||||||
|
|
||||||
|
# PyCharm
|
||||||
|
# JetBrains specific template is maintained in a separate JetBrains.gitignore that can
|
||||||
|
# be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
|
||||||
|
# and can be added to the global gitignore or merged into this file. For a more nuclear
|
||||||
|
# option (not recommended) you can uncomment the following to ignore the entire idea folder.
|
||||||
|
#.idea/
|
||||||
|
|
||||||
|
# Ruff stuff:
|
||||||
|
.ruff_cache/
|
||||||
|
|
||||||
|
# PyPI configuration file
|
||||||
|
.pypirc
|
||||||
|
|
||||||
|
.env
|
||||||
|
.DS_Store
|
||||||
|
|
||||||
|
# 本地实例数据（默认 hermes-agent-instances/，也可由 OPENCLAW_HOME_DATA_DIR 指向其它路径）
|
||||||
|
hermes-agent-instances/
|
||||||
|
.venv/
|
||||||
|
__pycache__/
|
||||||
|
*.py[cod]
|
||||||
@@ -0,0 +1,41 @@
|
|||||||
|
# hermes-agent-home
|
||||||
|
|
||||||
|
在本机用 **Docker Compose** 管理多个 **[NousResearch Hermes Agent](https://github.com/NousResearch/hermes-agent)** 实例：CLI + 可选 Web 管理台。
|
||||||
|
|
||||||
|
**不是 OpenClaw。** 底层镜像与服务来自官方 `hermes-agent` 仓库；每实例独立数据目录挂载到容器 `/opt/data`（`config.yaml`、`.env`、`sessions/` 等）。
|
||||||
|
|
||||||
|
## 与 openclaw-home 的区别
|
||||||
|
|
||||||
|
| 项目 | openclaw-home | hermes-agent-home（本仓库） |
|
||||||
|
|------|---------------|---------------------------|
|
||||||
|
| 上游仓库 | OpenClaw | **NousResearch/hermes-agent** |
|
||||||
|
| Compose 服务 | `openclaw-gateway` | **`gateway`** |
|
||||||
|
| 配置 | `config/openclaw.json` | **`data/config.yaml`** |
|
||||||
|
| 网关/Dashboard 端口 | 18780+N / 18790+N | **8641+N / 9118+N**（实例 1 → 8642 / 9119） |
|
||||||
|
| Compose 项目名 | `claw-<N>` | `hermes-<N>` |
|
||||||
|
|
||||||
|
## 快速开始
|
||||||
|
|
||||||
|
```bash
|
||||||
|
git clone https://github.com/NousResearch/hermes-agent.git /path/to/hermes-agent
|
||||||
|
|
||||||
|
cd /path/to/hermes-agent-home
|
||||||
|
cp .env.example .env # 设置 HERMES_SOURCE=/path/to/hermes-agent
|
||||||
|
|
||||||
|
./hermes-agent-cli.sh check
|
||||||
|
./hermes-agent-cli.sh compose-build 1 # 首次构建镜像（较久）
|
||||||
|
./hermes-agent-cli.sh setup 1 # 交互配置 API 密钥等（或 Web「Hermes 引导」）
|
||||||
|
./hermes-agent-cli.sh run 1
|
||||||
|
|
||||||
|
# 实例 1：API http://127.0.0.1:8642 · Dashboard http://127.0.0.1:9119
|
||||||
|
```
|
||||||
|
|
||||||
|
## Web
|
||||||
|
|
||||||
|
见 [hermes-agent-web/README.md](hermes-agent-web/README.md)。默认 http://127.0.0.1:8781
|
||||||
|
|
||||||
|
## 从旧版（OpenClaw 兼容层）迁移
|
||||||
|
|
||||||
|
若此前用 `OPENCLAW_SOURCE` 跑过实例，请**销毁旧实例**后按上表重建；旧目录 `hermes-agent-instances/<N>/config/` 与 Hermes 的 `data/` 布局不兼容。
|
||||||
|
|
||||||
|
文档：https://hermes-agent.nousresearch.com/docs/user-guide/docker
|
||||||
+96
@@ -0,0 +1,96 @@
|
|||||||
|
mkdir -p ~/.openclaw && python3 - <<'PY'
|
||||||
|
import json, os, pathlib, copy
|
||||||
|
|
||||||
|
base = pathlib.Path(os.path.expanduser("~/.openclaw"))
|
||||||
|
openclaw_path = base / "openclaw.json"
|
||||||
|
approvals_path = base / "exec-approvals.json"
|
||||||
|
|
||||||
|
def load_json(path, default):
|
||||||
|
if not path.exists():
|
||||||
|
return copy.deepcopy(default)
|
||||||
|
try:
|
||||||
|
return json.loads(path.read_text(encoding="utf-8"))
|
||||||
|
except Exception:
|
||||||
|
return copy.deepcopy(default)
|
||||||
|
|
||||||
|
# 1) 修 openclaw.json
|
||||||
|
cfg = load_json(openclaw_path, {})
|
||||||
|
cfg.setdefault("tools", {})
|
||||||
|
cfg["tools"].setdefault("exec", {})
|
||||||
|
cfg["tools"]["exec"]["security"] = "full"
|
||||||
|
cfg["tools"]["exec"]["ask"] = "off"
|
||||||
|
|
||||||
|
# 可选但实用：把常见会挡住 skill 的 deny 清掉
|
||||||
|
agents = cfg.get("agents", {}).get("list", [])
|
||||||
|
if isinstance(agents, list):
|
||||||
|
for agent in agents:
|
||||||
|
if not isinstance(agent, dict):
|
||||||
|
continue
|
||||||
|
tools = agent.setdefault("tools", {})
|
||||||
|
deny = tools.get("deny", [])
|
||||||
|
if isinstance(deny, list):
|
||||||
|
tools["deny"] = []
|
||||||
|
|
||||||
|
openclaw_path.write_text(json.dumps(cfg, ensure_ascii=False, indent=2), encoding="utf-8")
|
||||||
|
|
||||||
|
# 2) 修 exec-approvals.json
|
||||||
|
default_approvals = {
|
||||||
|
"version": 1,
|
||||||
|
"socket": {
|
||||||
|
"path": str(base / "exec-approvals.sock"),
|
||||||
|
"token": ""
|
||||||
|
},
|
||||||
|
"defaults": {
|
||||||
|
"security": "full",
|
||||||
|
"ask": "off",
|
||||||
|
"askFallback": "full",
|
||||||
|
"autoAllowSkills": True
|
||||||
|
},
|
||||||
|
"agents": {}
|
||||||
|
}
|
||||||
|
|
||||||
|
ap = load_json(approvals_path, default_approvals)
|
||||||
|
|
||||||
|
# 保留已有 socket，避免你本机原来的 socket/token 被抹掉
|
||||||
|
if not isinstance(ap, dict):
|
||||||
|
ap = copy.deepcopy(default_approvals)
|
||||||
|
|
||||||
|
ap["version"] = 1
|
||||||
|
ap.setdefault("socket", {})
|
||||||
|
ap["socket"].setdefault("path", str(base / "exec-approvals.sock"))
|
||||||
|
ap["socket"].setdefault("token", "")
|
||||||
|
|
||||||
|
ap.setdefault("defaults", {})
|
||||||
|
ap["defaults"]["security"] = "full"
|
||||||
|
ap["defaults"]["ask"] = "off"
|
||||||
|
ap["defaults"]["askFallback"] = "full"
|
||||||
|
ap["defaults"]["autoAllowSkills"] = True
|
||||||
|
|
||||||
|
ap.setdefault("agents", {})
|
||||||
|
if isinstance(ap["agents"], dict):
|
||||||
|
for agent_name, agent_cfg in list(ap["agents"].items()):
|
||||||
|
if isinstance(agent_cfg, dict):
|
||||||
|
agent_cfg["security"] = "full"
|
||||||
|
agent_cfg["ask"] = "off"
|
||||||
|
agent_cfg["askFallback"] = "full"
|
||||||
|
agent_cfg["autoAllowSkills"] = True
|
||||||
|
|
||||||
|
approvals_path.write_text(json.dumps(ap, ensure_ascii=False, indent=2), encoding="utf-8")
|
||||||
|
|
||||||
|
print("DONE")
|
||||||
|
print(openclaw_path)
|
||||||
|
print(approvals_path)
|
||||||
|
PY
|
||||||
|
|
||||||
|
openclaw gateway start
|
||||||
|
echo '----- GATEWAY STATUS -----'
|
||||||
|
openclaw gateway status
|
||||||
|
echo '----- APPROVALS EFFECTIVE -----'
|
||||||
|
openclaw approvals get --gateway || true
|
||||||
|
echo '----- OPENCLAW EXEC CONFIG -----'
|
||||||
|
python3 - <<'PY'
|
||||||
|
import json, os, pathlib
|
||||||
|
p = pathlib.Path(os.path.expanduser("~/.openclaw/openclaw.json"))
|
||||||
|
cfg = json.loads(p.read_text(encoding="utf-8"))
|
||||||
|
print(json.dumps(cfg.get("tools", {}).get("exec", {}), ensure_ascii=False, indent=2))
|
||||||
|
PY
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
# 可选：HERMES_USE_LOCAL_BUILD=1 时叠加，从 HERMES_SOURCE 源码构建
|
||||||
|
services:
|
||||||
|
gateway:
|
||||||
|
build:
|
||||||
|
context: ${HERMES_BUILD_CONTEXT}
|
||||||
|
dockerfile: Dockerfile
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
# 多实例：默认使用 Docker Hub 官方镜像（无需本地 build）
|
||||||
|
services:
|
||||||
|
gateway:
|
||||||
|
image: ${HERMES_IMAGE:-nousresearch/hermes-agent:latest}
|
||||||
|
pull_policy: if_not_present
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "${HERMES_GATEWAY_PORT}:8642"
|
||||||
|
- "${HERMES_DASHBOARD_PORT}:9119"
|
||||||
|
volumes:
|
||||||
|
- "${HERMES_DATA_DIR}:/opt/data"
|
||||||
|
environment:
|
||||||
|
HERMES_UID: "${HERMES_UID:-10000}"
|
||||||
|
HERMES_GID: "${HERMES_GID:-10000}"
|
||||||
|
HERMES_DASHBOARD: "${HERMES_DASHBOARD:-1}"
|
||||||
|
HERMES_DASHBOARD_HOST: "0.0.0.0"
|
||||||
|
HERMES_DASHBOARD_PORT: "9119"
|
||||||
|
shm_size: 1gb
|
||||||
|
command: ["gateway", "run"]
|
||||||
Executable
+490
@@ -0,0 +1,490 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# NousResearch Hermes Agent 多实例管理（Docker Compose）
|
||||||
|
# 用法: ./hermes-agent-cli.sh help
|
||||||
|
#
|
||||||
|
# 默认拉取官方镜像 nousresearch/hermes-agent:latest，无需本地 build。
|
||||||
|
# 仅当 HERMES_USE_LOCAL_BUILD=1 时需设置 HERMES_SOURCE 指向源码仓库。
|
||||||
|
|
||||||
|
if [ -z "${BASH_VERSION-}" ]; then
|
||||||
|
exec /usr/bin/env bash "$0" "$@"
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
cd "$SCRIPT_DIR"
|
||||||
|
|
||||||
|
ENV_FILE="$SCRIPT_DIR/.env"
|
||||||
|
if [ -f "$ENV_FILE" ]; then
|
||||||
|
set -a
|
||||||
|
# shellcheck disable=SC1090
|
||||||
|
. "$ENV_FILE"
|
||||||
|
set +a
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "${hermes_source:-}" ] && [ -z "${HERMES_SOURCE:-}" ]; then
|
||||||
|
HERMES_SOURCE="$hermes_source"
|
||||||
|
export HERMES_SOURCE
|
||||||
|
fi
|
||||||
|
|
||||||
|
# 宿主机 UID/GID，供容器 entrypoint 映射（默认当前用户）
|
||||||
|
HERMES_CONTAINER_UID="${HERMES_CONTAINER_UID:-$(id -u)}"
|
||||||
|
HERMES_CONTAINER_GID="${HERMES_CONTAINER_GID:-$(id -g)}"
|
||||||
|
HERMES_IMAGE="${HERMES_IMAGE:-nousresearch/hermes-agent:latest}"
|
||||||
|
HERMES_DASHBOARD="${HERMES_DASHBOARD:-1}"
|
||||||
|
HERMES_USE_LOCAL_BUILD="${HERMES_USE_LOCAL_BUILD:-0}"
|
||||||
|
|
||||||
|
HM_DATA_ROOT="${HERMES_HOME_DATA_DIR:-$SCRIPT_DIR/hermes-agent-instances}"
|
||||||
|
COMPOSE_INSTANCE_FILE="$SCRIPT_DIR/docker-compose.instance.yml"
|
||||||
|
COMPOSE_BUILD_FILE="$SCRIPT_DIR/docker-compose.instance.build.yml"
|
||||||
|
COMPOSE_FILES=()
|
||||||
|
COMPOSE_INIT_DONE=
|
||||||
|
|
||||||
|
if [[ "${1:-}" =~ ^[0-9]+$ ]] && [ "${2:-}" = "" ]; then
|
||||||
|
set -- run "$1"
|
||||||
|
fi
|
||||||
|
|
||||||
|
MARK_BOOTSTRAP_STUB=".hermes-bootstrap-stub"
|
||||||
|
MARK_SETUP_DONE=".hermes-setup-completed"
|
||||||
|
MARK_SETUP_DECLINED=".hermes-setup-declined"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<'EOF'
|
||||||
|
用法: hermes-agent-cli.sh <子命令> [参数]
|
||||||
|
|
||||||
|
run [--quick|--wizard|--build] <序号> 启动 gateway；--build 缺镜像时先构建再启动（耗时长）
|
||||||
|
bootstrap <序号> 创建数据目录（首次由 entrypoint 初始化 config）
|
||||||
|
setup <序号> 交互运行 hermes setup 向导（写入 API 密钥等）
|
||||||
|
restart <序号> 重启 gateway
|
||||||
|
stop <序号> 停止 gateway
|
||||||
|
status <序号> 输出 gateway 的 docker compose ps --format json
|
||||||
|
check Docker 可用 + compose 配置可解析
|
||||||
|
compose-build|image-build|pull <序号> 拉取官方镜像（默认）；HERMES_USE_LOCAL_BUILD=1 时为本地 build
|
||||||
|
list-ids|instances 列出实例序号（数据目录 ∪ Docker 项目 hermes-<N>）
|
||||||
|
destroy|destory <序号> compose down 并删除宿主机该实例 data 目录
|
||||||
|
exec <序号> 进入运行中 gateway 容器的 shell
|
||||||
|
log|logs <序号> 跟踪 gateway 日志
|
||||||
|
cli <序号> [参数...] 在容器内执行 hermes（如 channels、config 子命令）
|
||||||
|
config <序号> [参数...] 同 cli config …
|
||||||
|
help, --help, -h 本说明
|
||||||
|
|
||||||
|
说明:
|
||||||
|
- 默认镜像: nousresearch/hermes-agent:latest（docker pull，无需 clone 源码）
|
||||||
|
- 本地构建: .env 设 HERMES_USE_LOCAL_BUILD=1 且 HERMES_SOURCE 指向源码仓库
|
||||||
|
- 每实例数据: HERMES_HOME_DATA_DIR/<序号>/data → 容器 /opt/data（config.yaml、.env、sessions/…）
|
||||||
|
- Compose 项目名: hermes-<序号>；服务名: gateway；容器名如 hermes-<序号>-gateway-1
|
||||||
|
- 端口: 网关 API 8641+<序号>（实例 1 → 8642）；Dashboard 9118+<序号>（实例 1 → 9119）
|
||||||
|
- 文档: https://hermes-agent.nousresearch.com/docs/user-guide/docker
|
||||||
|
EOF
|
||||||
|
}
|
||||||
|
|
||||||
|
instance_paths() {
|
||||||
|
_I_ID="$1"
|
||||||
|
_I_GATE=$((8641 + _I_ID))
|
||||||
|
_I_DASH=$((9118 + _I_ID))
|
||||||
|
_I_DATA="$HM_DATA_ROOT/$_I_ID/data"
|
||||||
|
mkdir -p "$_I_DATA"
|
||||||
|
instance_bind_mounts_chown "$_I_DATA"
|
||||||
|
}
|
||||||
|
|
||||||
|
instance_bind_mounts_chown() {
|
||||||
|
local d="$1"
|
||||||
|
if [ "${HERMES_SKIP_BIND_CHOWN:-}" = 1 ]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
if [ "$(id -u)" -eq 0 ]; then
|
||||||
|
chown -R "${HERMES_CONTAINER_UID}:${HERMES_CONTAINER_GID}" "$d"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
instance_has_config() {
|
||||||
|
local data="$1"
|
||||||
|
[ -f "$data/config.yaml" ] || [ -f "$data/.env" ]
|
||||||
|
}
|
||||||
|
|
||||||
|
compose_ensure() {
|
||||||
|
if [ -n "$COMPOSE_INIT_DONE" ]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
if [ ! -f "$COMPOSE_INSTANCE_FILE" ]; then
|
||||||
|
echo "缺少 $COMPOSE_INSTANCE_FILE" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
COMPOSE_FILES=(-f "$COMPOSE_INSTANCE_FILE")
|
||||||
|
if [ "$HERMES_USE_LOCAL_BUILD" = 1 ] || [ "$HERMES_USE_LOCAL_BUILD" = true ]; then
|
||||||
|
local root="${HERMES_SOURCE:-}"
|
||||||
|
if [ -z "$root" ]; then
|
||||||
|
echo "HERMES_USE_LOCAL_BUILD=1 时请在 $ENV_FILE 设置 HERMES_SOURCE（源码仓库根目录）。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if [ ! -d "$root" ]; then
|
||||||
|
echo "HERMES_SOURCE 不是目录: $root" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
root="$(cd "$root" && pwd)"
|
||||||
|
if [ ! -f "$root/Dockerfile" ]; then
|
||||||
|
echo "HERMES_SOURCE 下未找到 Dockerfile。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if [ ! -f "$COMPOSE_BUILD_FILE" ]; then
|
||||||
|
echo "缺少 $COMPOSE_BUILD_FILE" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
export HERMES_SOURCE="$root"
|
||||||
|
export HERMES_BUILD_CONTEXT="$root"
|
||||||
|
COMPOSE_FILES+=(-f "$COMPOSE_BUILD_FILE")
|
||||||
|
fi
|
||||||
|
COMPOSE_INIT_DONE=1
|
||||||
|
}
|
||||||
|
|
||||||
|
require_id() {
|
||||||
|
local id="${1:-}"
|
||||||
|
if [ -z "$id" ] || ! [[ "$id" =~ ^[0-9]+$ ]]; then
|
||||||
|
echo "请提供数字序号，例如：$0 ${2:-run} 1" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
compose_project() {
|
||||||
|
printf 'hermes-%s' "$1"
|
||||||
|
}
|
||||||
|
|
||||||
|
compose_for_instance() {
|
||||||
|
local id="$1"
|
||||||
|
shift
|
||||||
|
instance_paths "$id"
|
||||||
|
HERMES_DATA_DIR="$_I_DATA" \
|
||||||
|
HERMES_GATEWAY_PORT="$_I_GATE" \
|
||||||
|
HERMES_DASHBOARD_PORT="$_I_DASH" \
|
||||||
|
HERMES_UID="$HERMES_CONTAINER_UID" \
|
||||||
|
HERMES_GID="$HERMES_CONTAINER_GID" \
|
||||||
|
HERMES_IMAGE="$HERMES_IMAGE" \
|
||||||
|
HERMES_DASHBOARD="$HERMES_DASHBOARD" \
|
||||||
|
HERMES_BUILD_CONTEXT="${HERMES_BUILD_CONTEXT:-${HERMES_SOURCE:-}}" \
|
||||||
|
docker compose \
|
||||||
|
"${COMPOSE_FILES[@]}" \
|
||||||
|
--project-directory "$SCRIPT_DIR" \
|
||||||
|
-p "$(compose_project "$id")" \
|
||||||
|
"$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
compose_service_container_id() {
|
||||||
|
local id="$1"
|
||||||
|
local svc="${2:-gateway}"
|
||||||
|
compose_for_instance "$id" ps -q "$svc" 2>/dev/null | head -n1
|
||||||
|
}
|
||||||
|
|
||||||
|
hermes_image_ready() {
|
||||||
|
docker image inspect "${HERMES_IMAGE}" >/dev/null 2>&1
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_bootstrap() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
instance_paths "$ID"
|
||||||
|
echo "实例 #${ID}: 已创建数据目录 ${_I_DATA}（首次启动时 entrypoint 会写入默认 config.yaml / .env）。"
|
||||||
|
touch "$_I_DATA/$MARK_BOOTSTRAP_STUB"
|
||||||
|
rm -f "$_I_DATA/$MARK_SETUP_DONE" "$_I_DATA/$MARK_SETUP_DECLINED"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_setup() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
instance_paths "$ID"
|
||||||
|
if [ "${2:-}" = "--from-run" ]; then
|
||||||
|
echo "实例 #${ID}: 进入 Hermes 官方 setup 向导…"
|
||||||
|
else
|
||||||
|
echo "实例 #${ID}: hermes setup（完成后可 $0 run ${ID}）"
|
||||||
|
fi
|
||||||
|
local run_opts=(run --rm --no-deps)
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
run_opts+=(-it)
|
||||||
|
else
|
||||||
|
run_opts+=(-T)
|
||||||
|
fi
|
||||||
|
compose_for_instance "$ID" "${run_opts[@]}" gateway setup
|
||||||
|
touch "$_I_DATA/$MARK_SETUP_DONE"
|
||||||
|
rm -f "$_I_DATA/$MARK_BOOTSTRAP_STUB" "$_I_DATA/$MARK_SETUP_DECLINED"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_run() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
local RUN_MODE="${2:-}"
|
||||||
|
instance_paths "$ID"
|
||||||
|
local MY_DATA="$_I_DATA"
|
||||||
|
|
||||||
|
run_setup_first() {
|
||||||
|
cmd_setup "$ID" --from-run || exit $?
|
||||||
|
}
|
||||||
|
|
||||||
|
if [ "$RUN_MODE" = wizard ]; then
|
||||||
|
if [ ! -t 1 ]; then
|
||||||
|
echo "实例 #${ID}: --wizard 需要 TTY。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
run_setup_first
|
||||||
|
elif ! instance_has_config "$MY_DATA"; then
|
||||||
|
if [ "$RUN_MODE" = quick ]; then
|
||||||
|
echo "实例 #${ID}: 尚无 config，--quick 仅创建目录并启动（entrypoint 会初始化）。" >&2
|
||||||
|
cmd_bootstrap "$ID" || exit $?
|
||||||
|
elif [ -t 1 ]; then
|
||||||
|
run_setup_first
|
||||||
|
else
|
||||||
|
echo "实例 #${ID}: 无 TTY，已 bootstrap 后启动；请在终端执行 $0 setup ${ID}。" >&2
|
||||||
|
cmd_bootstrap "$ID" || exit $?
|
||||||
|
fi
|
||||||
|
elif \
|
||||||
|
[ -f "$MY_DATA/$MARK_BOOTSTRAP_STUB" ] && \
|
||||||
|
[ ! -f "$MY_DATA/$MARK_SETUP_DONE" ] && \
|
||||||
|
[ "$RUN_MODE" != quick ] && \
|
||||||
|
[ -t 1 ]; then
|
||||||
|
run_setup_first
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "正在启动实例 #${ID}（Nous Hermes Agent gateway）…"
|
||||||
|
echo "数据目录: $MY_DATA"
|
||||||
|
echo "端口: API http://127.0.0.1:$((8641 + ID)):8642 · Dashboard http://127.0.0.1:$((9118 + ID)):9119"
|
||||||
|
|
||||||
|
if [ "$RUN_MODE" = build ]; then
|
||||||
|
if ! hermes_image_ready; then
|
||||||
|
echo "实例 #${ID}: 镜像 ${HERMES_IMAGE} 不存在，开始构建（可能需 10–30 分钟）…" >&2
|
||||||
|
cmd_compose_build "$ID"
|
||||||
|
fi
|
||||||
|
compose_for_instance "$ID" up -d --no-build gateway
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! hermes_image_ready; then
|
||||||
|
echo "本地尚无镜像 ${HERMES_IMAGE}。" >&2
|
||||||
|
echo "请先执行: $0 compose-build ${ID} # 默认从 Docker Hub 拉取官方镜像" >&2
|
||||||
|
echo "或在 Web 点「拉取镜像」；完成后再点「启动」。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
compose_for_instance "$ID" up -d --no-build gateway
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_restart() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
compose_for_instance "$ID" restart gateway
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_stop() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
compose_for_instance "$ID" stop gateway
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_status() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
compose_for_instance "$ID" ps -a --format json gateway
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_check() {
|
||||||
|
compose_ensure
|
||||||
|
if ! docker info >/dev/null 2>&1; then
|
||||||
|
echo "无法连接 Docker 守护进程（请启动 Docker Desktop、Colima 或 dockerd）。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
local _chk_td _chk_pr
|
||||||
|
_chk_td="$(mktemp -d "${TMPDIR:-/tmp}/hermes-agent-compose-check.XXXXXX")"
|
||||||
|
mkdir -p "$_chk_td/data"
|
||||||
|
_chk_pr="hermes-agent-preflight-$$"
|
||||||
|
if ! \
|
||||||
|
HERMES_DATA_DIR="$_chk_td/data" \
|
||||||
|
HERMES_GATEWAY_PORT=8642 \
|
||||||
|
HERMES_DASHBOARD_PORT=9119 \
|
||||||
|
HERMES_UID="$HERMES_CONTAINER_UID" \
|
||||||
|
HERMES_GID="$HERMES_CONTAINER_GID" \
|
||||||
|
HERMES_IMAGE="$HERMES_IMAGE" \
|
||||||
|
HERMES_DASHBOARD="$HERMES_DASHBOARD" \
|
||||||
|
docker compose "${COMPOSE_FILES[@]}" --project-directory "$SCRIPT_DIR" -p "$_chk_pr" config >/dev/null 2>&1
|
||||||
|
then
|
||||||
|
echo "docker compose config 解析失败。" >&2
|
||||||
|
HERMES_DATA_DIR="$_chk_td/data" \
|
||||||
|
HERMES_GATEWAY_PORT=8642 \
|
||||||
|
HERMES_DASHBOARD_PORT=9119 \
|
||||||
|
HERMES_UID="$HERMES_CONTAINER_UID" \
|
||||||
|
HERMES_GID="$HERMES_CONTAINER_GID" \
|
||||||
|
HERMES_IMAGE="$HERMES_IMAGE" \
|
||||||
|
HERMES_DASHBOARD="$HERMES_DASHBOARD" \
|
||||||
|
docker compose "${COMPOSE_FILES[@]}" --project-directory "$SCRIPT_DIR" -p "$_chk_pr" config || true
|
||||||
|
rm -rf "$_chk_td"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
rm -rf "$_chk_td"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_list_ids() {
|
||||||
|
local -a ids=()
|
||||||
|
local d n line proj
|
||||||
|
if [ -d "$HM_DATA_ROOT" ]; then
|
||||||
|
shopt -s nullglob
|
||||||
|
for d in "$HM_DATA_ROOT"/*; do
|
||||||
|
[ -d "$d" ] || continue
|
||||||
|
n="$(basename "$d")"
|
||||||
|
if [[ "$n" =~ ^[0-9]+$ ]]; then
|
||||||
|
ids+=("$n")
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
shopt -u nullglob
|
||||||
|
fi
|
||||||
|
while IFS= read -r line; do
|
||||||
|
[ -z "$line" ] && continue
|
||||||
|
if [[ "$line" =~ ^hermes-([0-9]+)-gateway ]]; then
|
||||||
|
ids+=("${BASH_REMATCH[1]}")
|
||||||
|
fi
|
||||||
|
done < <(docker ps -a --no-trunc --format '{{.Names}}' 2>/dev/null || true)
|
||||||
|
while IFS= read -r proj; do
|
||||||
|
[ -z "$proj" ] && continue
|
||||||
|
if [[ "$proj" =~ ^hermes-([0-9]+)$ ]]; then
|
||||||
|
ids+=("${BASH_REMATCH[1]}")
|
||||||
|
fi
|
||||||
|
done < <(docker compose ls -a --format '{{.Name}}' 2>/dev/null || true)
|
||||||
|
if [ "${#ids[@]}" -eq 0 ]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
printf '%s\n' "${ids[@]}" | sort -nu
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_destroy() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
local INSTANCE_DIR="$HM_DATA_ROOT/$ID"
|
||||||
|
echo "实例 #${ID}: docker compose down …" >&2
|
||||||
|
compose_for_instance "$ID" down --remove-orphans
|
||||||
|
if [ -d "$INSTANCE_DIR" ]; then
|
||||||
|
echo "实例 #${ID}: 删除 ${INSTANCE_DIR} …" >&2
|
||||||
|
rm -rf "$INSTANCE_DIR"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_exec() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
local cid
|
||||||
|
cid="$(compose_service_container_id "$ID" gateway)"
|
||||||
|
if [ -z "$cid" ]; then
|
||||||
|
echo "实例 #${ID}: gateway 未运行（先 $0 run ${ID}）。" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
docker exec -it -w /opt/data "$cid" /bin/sh
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_log() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
compose_for_instance "$ID" logs -f --tail 200 gateway
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_compose_build() {
|
||||||
|
compose_ensure
|
||||||
|
local ID="$1"
|
||||||
|
require_id "$ID" compose-build
|
||||||
|
if [ "$HERMES_USE_LOCAL_BUILD" = 1 ] || [ "$HERMES_USE_LOCAL_BUILD" = true ]; then
|
||||||
|
echo "在 ${HERMES_SOURCE} 本地构建镜像 ${HERMES_IMAGE}（可能需 10–30 分钟）…" >&2
|
||||||
|
compose_for_instance "$ID" build
|
||||||
|
else
|
||||||
|
if hermes_image_ready; then
|
||||||
|
echo "镜像 ${HERMES_IMAGE} 已存在于本机，跳过拉取（如需更新可: docker pull ${HERMES_IMAGE}）。" >&2
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
echo "从 Docker Hub 拉取官方镜像 ${HERMES_IMAGE} …" >&2
|
||||||
|
docker pull "${HERMES_IMAGE}"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
hermes_in_container() {
|
||||||
|
local ID="$1"
|
||||||
|
shift
|
||||||
|
compose_ensure
|
||||||
|
instance_paths "$ID"
|
||||||
|
local cid
|
||||||
|
cid="$(compose_service_container_id "$ID" gateway)"
|
||||||
|
if [ -n "$cid" ]; then
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
docker exec -it -w /opt/data "$cid" hermes "$@"
|
||||||
|
else
|
||||||
|
docker exec -i -w /opt/data "$cid" hermes "$@"
|
||||||
|
fi
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
local run_opts=(run --rm --no-deps)
|
||||||
|
if [ -t 1 ]; then
|
||||||
|
run_opts+=(-it)
|
||||||
|
else
|
||||||
|
run_opts+=(-T)
|
||||||
|
fi
|
||||||
|
compose_for_instance "$ID" "${run_opts[@]}" gateway "$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_cli() {
|
||||||
|
local ID="$1"
|
||||||
|
shift
|
||||||
|
if [ $# -eq 0 ]; then
|
||||||
|
echo "用法: $0 cli <序号> <子命令> [参数…]" >&2
|
||||||
|
echo "示例: $0 cli 1 config" >&2
|
||||||
|
echo " $0 setup 1 # 首次配置向导" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
hermes_in_container "$ID" "$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
cmd_config() {
|
||||||
|
local ID="$1"
|
||||||
|
shift
|
||||||
|
if [ $# -eq 0 ]; then
|
||||||
|
hermes_in_container "$ID" config
|
||||||
|
else
|
||||||
|
hermes_in_container "$ID" config "$@"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
CMD="${1:-}"
|
||||||
|
case "$CMD" in
|
||||||
|
help|--help|-h) usage ;;
|
||||||
|
"") usage >&2; exit 1 ;;
|
||||||
|
run)
|
||||||
|
case "${2:-}" in
|
||||||
|
--quick) require_id "${3:-}" run; cmd_run "$3" quick ;;
|
||||||
|
--wizard) require_id "${3:-}" run; cmd_run "$3" wizard ;;
|
||||||
|
--build) require_id "${3:-}" run; cmd_run "$3" build ;;
|
||||||
|
*) require_id "${2:-}" run; cmd_run "$2" ;;
|
||||||
|
esac
|
||||||
|
;;
|
||||||
|
bootstrap) require_id "${2:-}" bootstrap; cmd_bootstrap "$2" ;;
|
||||||
|
setup) require_id "${2:-}" setup; cmd_setup "$2" ;;
|
||||||
|
restart) require_id "${2:-}" restart; cmd_restart "$2" ;;
|
||||||
|
stop) require_id "${2:-}" stop; cmd_stop "$2" ;;
|
||||||
|
status) require_id "${2:-}" status; cmd_status "$2" ;;
|
||||||
|
check) cmd_check ;;
|
||||||
|
compose-build|image-build|pull) require_id "${2:-}" compose-build; cmd_compose_build "$2" ;;
|
||||||
|
list-ids|instances) cmd_list_ids ;;
|
||||||
|
destroy|destory) require_id "${2:-}" destroy; cmd_destroy "$2" ;;
|
||||||
|
exec) require_id "${2:-}" exec; cmd_exec "$2" ;;
|
||||||
|
log|logs) require_id "${2:-}" log; cmd_log "$2" ;;
|
||||||
|
cli)
|
||||||
|
require_id "${2:-}" cli
|
||||||
|
_id="$2"
|
||||||
|
shift 2
|
||||||
|
cmd_cli "$_id" "$@"
|
||||||
|
;;
|
||||||
|
config)
|
||||||
|
require_id "${2:-}" config
|
||||||
|
_id="$2"
|
||||||
|
shift 2
|
||||||
|
cmd_config "$_id" "$@"
|
||||||
|
;;
|
||||||
|
channels|channel|devices|allowall)
|
||||||
|
echo "子命令 $CMD 为旧版 OpenClaw 专用；请使用: $0 cli <序号> … 或查阅 Hermes 文档。" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "未知子命令: $CMD" >&2
|
||||||
|
echo "运行 $0 help 查看说明。" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
@@ -0,0 +1,63 @@
|
|||||||
|
# Hermes Agent Web
|
||||||
|
|
||||||
|
在浏览器里管理本机多个 Hermes Agent（OpenClaw 兼容）实例：**列表与状态、新建、bootstrap 后启动、停止、重启、销毁**；**引导**在 **「Hermes 引导」** 页用浏览器内终端（PTY + xterm.js）完成 `setup`、`run`、`onboard`、`config`、`channels` 等。服务端用 **Flask + Jinja2**，**单进程 Python** 即可运行。
|
||||||
|
|
||||||
|
所有与 Docker Compose / 实例生命周期相关的操作都通过上级目录的 [`hermes-agent-cli.sh`](../hermes-agent-cli.sh) 完成（含 `check`、`status`、`stop`、`run`、`restart`、`destroy`、`bootstrap`、`cli` 透传容器内 `openclaw-cli`）。实例配置可通过 **`/instance/<序号>/config`** 编辑宿主机上的 `hermes-agent-instances/<序号>/config/openclaw.json`（保存前 JSON 校验并备份 `.bak`）。**销毁**会同时删除该序号下整份实例数据目录。
|
||||||
|
|
||||||
|
## 前置条件
|
||||||
|
|
||||||
|
- 本机已安装 **Docker**，且 `docker compose` 可用。
|
||||||
|
- 已配置 **`hermes-agent-home/.env`**（与 CLI 相同），至少设置 **`HERMES_SOURCE`** 或 **`OPENCLAW_SOURCE`**（OpenClaw 仓库根目录，内含 `docker-compose.yml`）。
|
||||||
|
- 可选 **`HERMES_HOME_DATA_DIR`**：实例数据父目录；不设置时默认使用 `hermes-agent-home/hermes-agent-instances/`。
|
||||||
|
|
||||||
|
## 安装与启动
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd /path/to/hermes-agent-home/hermes-agent-web
|
||||||
|
python3 -m venv .venv
|
||||||
|
.venv/bin/pip install -r requirements.txt
|
||||||
|
export HERMES_AGENT_WEB_ADMIN_PASSWORD='你的强密码'
|
||||||
|
.venv/bin/python app.py
|
||||||
|
```
|
||||||
|
|
||||||
|
浏览器访问终端中打印的地址（默认 **http://127.0.0.1:8781**）。
|
||||||
|
|
||||||
|
默认监听 **`127.0.0.1`**，仅本机可访问；若需局域网访问，设置 `HERMES_AGENT_WEB_HOST=0.0.0.0` 并自行做好访问控制。
|
||||||
|
|
||||||
|
## 环境变量
|
||||||
|
|
||||||
|
| 变量 | 说明 |
|
||||||
|
|------|------|
|
||||||
|
| `HERMES_AGENT_WEB_ADMIN_PASSWORD` | 登录密码（建议必填）。也可设为 Werkzeug 生成的哈希串（以 `pbkdf2:` / `scrypt:` 开头） |
|
||||||
|
| `HERMES_AGENT_WEB_ADMIN_USER` | 登录用户名，默认 `hermes` |
|
||||||
|
| `HERMES_AGENT_WEB_SECRET_KEY` | Flask session 签名密钥；不设置则每次进程启动随机，**重启后已登录 session 会失效** |
|
||||||
|
| `HERMES_AGENT_WEB_HOST` | 监听地址，默认 `127.0.0.1` |
|
||||||
|
| `HERMES_AGENT_WEB_PORT` | 端口，默认 `8781` |
|
||||||
|
| `HERMES_AGENT_WEB_LOG_CLI` | 是否在终端打印每次执行的 `hermes-agent-cli.sh` 命令、`exit` 码与 stdout/stderr（默认开启；`0` / `false` 关闭）。单条输出超过约 64KB 会截断 |
|
||||||
|
|
||||||
|
应用会加载 **`hermes-agent-home/.env`**（与 `HERMES_SOURCE` 等共用），无需在 `hermes-agent-web` 目录再复制一份，除非你希望单独覆盖。
|
||||||
|
|
||||||
|
## 功能简述
|
||||||
|
|
||||||
|
- **实例列表**：序号为 **数据目录下数字文件夹** 与 **Docker 里仍存在的 `hermes-<N>` 项目 / `hermes-<N>-openclaw-gateway-*` 容器** 的并集（**已停止的容器**也会出现在列表里）。与同目录 `./hermes-agent-cli.sh list-ids` 一致。
|
||||||
|
- **新建实例**：分配新序号、创建目录并执行脚本的 `bootstrap`。
|
||||||
|
- **启动**：`run --quick <序号>`。
|
||||||
|
- **停止 / 重启 / 销毁**：分别对应脚本的 `stop`、`restart`、`destroy`（**销毁**会先 `compose down`，再 **`rm -rf` 宿主上该实例目录**，不可恢复）。
|
||||||
|
- **Hermes 引导**：在实例行点 **「Hermes 引导」** 打开 **`/instance/<序号>/guide`**。进入后工作目录为 **hermes-agent-home**，可执行 `./hermes-agent-cli.sh setup`、`cli <序号> onboard` 等；旧链接 **`/instance/<N>/channels`** 会重定向到本引导页。
|
||||||
|
|
||||||
|
## CLI 对照（调试）
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd /path/to/hermes-agent-home
|
||||||
|
./hermes-agent-cli.sh check
|
||||||
|
./hermes-agent-cli.sh status 1
|
||||||
|
./hermes-agent-cli.sh stop 1
|
||||||
|
./hermes-agent-cli.sh cli 1 --help
|
||||||
|
docker ps -a --filter name=openclaw-gateway
|
||||||
|
```
|
||||||
|
|
||||||
|
更多子命令见脚本内 `help`。
|
||||||
|
|
||||||
|
## Docker 里找不到网关？
|
||||||
|
|
||||||
|
本仓库脚本为**每个实例**创建独立 Compose **项目名** `hermes-<序号>`，网关服务名为 **`openclaw-gateway`**，容器名大致为 **`hermes-<序号>-openclaw-gateway-1`**。在 Docker Desktop 可搜 **`hermes-1`**（或你的序号）或 **`openclaw-gateway`**。执行 `docker ps -a --filter name=hermes-1-openclaw-gateway` 核对。
|
||||||
@@ -0,0 +1,927 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
"""
|
||||||
|
Hermes Agent Web 管理端：单进程 Flask（模板渲染）。对实例的启停、状态、compose 校验等均只调用
|
||||||
|
hermes-agent-home/hermes-agent-cli.sh；config.yaml 编辑为直接写宿主机 data 卷；destroy 会删除该实例整目录。
|
||||||
|
|
||||||
|
实例目录下可有 ``web-meta.json``（与 ``data/`` 同级），由本管理台维护，用于所属人等标注，
|
||||||
|
不写入 ``config.yaml``，避免与网关配置混杂。
|
||||||
|
|
||||||
|
环境变量（可选，见文件顶注释）：
|
||||||
|
HERMES_AGENT_WEB_SECRET_KEY Flask session 密钥
|
||||||
|
HERMES_AGENT_WEB_ADMIN_USER 登录用户名（默认 hermes）
|
||||||
|
HERMES_AGENT_WEB_ADMIN_PASSWORD 登录密码（必填）
|
||||||
|
HERMES_AGENT_WEB_HOST / HERMES_AGENT_WEB_PORT 监听地址（默认 127.0.0.1:8781）
|
||||||
|
HERMES_AGENT_WEB_LOG_CLI 是否打印执行的 hermes-agent-cli.sh 与输出（默认 1；0/false 关闭）
|
||||||
|
|
||||||
|
启动参数（与 df-report ``run.py`` 类似，便于本地一行起服务）：
|
||||||
|
python app.py --admin-password '你的密码'
|
||||||
|
python app.py --host 0.0.0.0 --port 8781 --admin-password secret
|
||||||
|
|
||||||
|
依赖补充：交互式频道终端需要 flask-sock、pexpect；仅 macOS/Linux。
|
||||||
|
"""
|
||||||
|
|
||||||
|
from __future__ import annotations
|
||||||
|
|
||||||
|
import argparse
|
||||||
|
import json
|
||||||
|
import logging
|
||||||
|
import os
|
||||||
|
import re
|
||||||
|
import shlex
|
||||||
|
import shutil
|
||||||
|
import subprocess
|
||||||
|
import secrets
|
||||||
|
import sys
|
||||||
|
import threading
|
||||||
|
import time
|
||||||
|
from datetime import timedelta
|
||||||
|
from pathlib import Path
|
||||||
|
|
||||||
|
from dotenv import load_dotenv
|
||||||
|
from flask import (
|
||||||
|
Flask,
|
||||||
|
abort,
|
||||||
|
flash,
|
||||||
|
redirect,
|
||||||
|
render_template,
|
||||||
|
request,
|
||||||
|
session,
|
||||||
|
url_for,
|
||||||
|
)
|
||||||
|
from itsdangerous import BadSignature, SignatureExpired, URLSafeTimedSerializer
|
||||||
|
from werkzeug.security import check_password_hash, generate_password_hash
|
||||||
|
|
||||||
|
try:
|
||||||
|
import pexpect
|
||||||
|
except ImportError:
|
||||||
|
pexpect = None # type: ignore
|
||||||
|
|
||||||
|
from flask_sock import Sock
|
||||||
|
|
||||||
|
# hermes-agent-web/ 的父目录应为 hermes-agent-home
|
||||||
|
HERMES_AGENT_HOME = Path(__file__).resolve().parent.parent
|
||||||
|
ENV_FILE = HERMES_AGENT_HOME / ".env"
|
||||||
|
load_dotenv(ENV_FILE)
|
||||||
|
|
||||||
|
DEFAULT_ADMIN_USER = os.environ.get("HERMES_AGENT_WEB_ADMIN_USER", "hermes")
|
||||||
|
# 显式 pbkdf2：部分环境 Python 未编译 hashlib.scrypt，Werkzeug 默认 scrypt 会 AttributeError
|
||||||
|
_PASSWORD_HASH_METHOD = "pbkdf2:sha256"
|
||||||
|
_raw_pw = ""
|
||||||
|
ADMIN_PASSWORD_HASH = ""
|
||||||
|
|
||||||
|
|
||||||
|
def _reload_admin_password_config() -> None:
|
||||||
|
"""从环境变量 HERMES_AGENT_WEB_ADMIN_PASSWORD 刷新哈希（支持启动参数先写入 env 再调用）。"""
|
||||||
|
global _raw_pw, ADMIN_PASSWORD_HASH
|
||||||
|
_raw_pw = os.environ.get("HERMES_AGENT_WEB_ADMIN_PASSWORD", "")
|
||||||
|
if _raw_pw.startswith("pbkdf2:") or _raw_pw.startswith("scrypt:"):
|
||||||
|
ADMIN_PASSWORD_HASH = _raw_pw
|
||||||
|
else:
|
||||||
|
ADMIN_PASSWORD_HASH = (
|
||||||
|
generate_password_hash(_raw_pw, method=_PASSWORD_HASH_METHOD)
|
||||||
|
if _raw_pw
|
||||||
|
else ""
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
_reload_admin_password_config()
|
||||||
|
|
||||||
|
SECRET_KEY = os.environ.get(
|
||||||
|
"HERMES_AGENT_WEB_SECRET_KEY",
|
||||||
|
secrets.token_hex(32),
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
def _pty_ws_serializer() -> URLSafeTimedSerializer:
|
||||||
|
return URLSafeTimedSerializer(SECRET_KEY, salt="hermes-agent-web-pty-v1")
|
||||||
|
|
||||||
|
|
||||||
|
def make_pty_token(iid: int, purpose: str) -> str:
|
||||||
|
return _pty_ws_serializer().dumps({"iid": int(iid), "purpose": str(purpose)})
|
||||||
|
|
||||||
|
|
||||||
|
def verify_pty_token(token: str | None, iid: int, purpose: str) -> bool:
|
||||||
|
if not token:
|
||||||
|
return False
|
||||||
|
try:
|
||||||
|
data = _pty_ws_serializer().loads(token, max_age=900)
|
||||||
|
return int(data["iid"]) == int(iid) and str(data["purpose"]) == str(purpose)
|
||||||
|
except (BadSignature, SignatureExpired, TypeError, KeyError, ValueError):
|
||||||
|
return False
|
||||||
|
|
||||||
|
|
||||||
|
def make_guide_pty_token(iid: int) -> str:
|
||||||
|
return make_pty_token(iid, "guide")
|
||||||
|
|
||||||
|
|
||||||
|
def make_docker_pty_token(iid: int) -> str:
|
||||||
|
return make_pty_token(iid, "docker")
|
||||||
|
|
||||||
|
|
||||||
|
def verify_guide_pty_token(token: str | None, iid: int) -> bool:
|
||||||
|
return verify_pty_token(token, iid, "guide")
|
||||||
|
|
||||||
|
|
||||||
|
def verify_docker_pty_token(token: str | None, iid: int) -> bool:
|
||||||
|
return verify_pty_token(token, iid, "docker")
|
||||||
|
|
||||||
|
DATA_ROOT = Path(
|
||||||
|
os.environ.get("HERMES_HOME_DATA_DIR", "")
|
||||||
|
or (HERMES_AGENT_HOME / "hermes-agent-instances")
|
||||||
|
).resolve()
|
||||||
|
CLI_SCRIPT = HERMES_AGENT_HOME / "hermes-agent-cli.sh"
|
||||||
|
# 与 hermes-agent-cli.sh 中标记文件名一致
|
||||||
|
MARK_SETUP_DONE = ".hermes-setup-completed"
|
||||||
|
MARK_SETUP_DECLINED = ".hermes-setup-declined"
|
||||||
|
WEB_META_FILENAME = "web-meta.json"
|
||||||
|
_OWNER_MAX_LEN = 128
|
||||||
|
|
||||||
|
_LOG = logging.getLogger(__name__)
|
||||||
|
_CLI_LOG_ENABLED = os.environ.get("HERMES_AGENT_WEB_LOG_CLI", "1").lower() not in (
|
||||||
|
"0",
|
||||||
|
"false",
|
||||||
|
"no",
|
||||||
|
"off",
|
||||||
|
)
|
||||||
|
_CLI_OUT_MAX = 64_000
|
||||||
|
_CLI_TIMEOUT_DEFAULT = int(os.environ.get("HERMES_AGENT_WEB_CLI_TIMEOUT", "300"))
|
||||||
|
_CLI_TIMEOUT_LONG = int(os.environ.get("HERMES_AGENT_WEB_CLI_TIMEOUT_LONG", "3600"))
|
||||||
|
|
||||||
|
|
||||||
|
def _truncate_out(s: str) -> str:
|
||||||
|
if len(s) <= _CLI_OUT_MAX:
|
||||||
|
return s
|
||||||
|
return s[:_CLI_OUT_MAX] + f"\n... [stdout/stderr 已截断，原长度 {len(s)} 字符]"
|
||||||
|
|
||||||
|
|
||||||
|
def _data_root() -> Path:
|
||||||
|
DATA_ROOT.mkdir(parents=True, exist_ok=True)
|
||||||
|
return DATA_ROOT
|
||||||
|
|
||||||
|
|
||||||
|
def _run_cli(
|
||||||
|
*cli_args: str, timeout: int | None = None
|
||||||
|
) -> subprocess.CompletedProcess[str]:
|
||||||
|
"""所有实例生命周期与 Compose 操作均通过 hermes-agent-home/hermes-agent-cli.sh。"""
|
||||||
|
if not CLI_SCRIPT.is_file():
|
||||||
|
raise RuntimeError(f"找不到 CLI: {CLI_SCRIPT}")
|
||||||
|
if timeout is None:
|
||||||
|
timeout = _CLI_TIMEOUT_DEFAULT
|
||||||
|
env = os.environ.copy()
|
||||||
|
if os.environ.get("HERMES_HOME_DATA_DIR"):
|
||||||
|
env["HERMES_HOME_DATA_DIR"] = os.environ["HERMES_HOME_DATA_DIR"]
|
||||||
|
cmd = ["/usr/bin/env", "bash", str(CLI_SCRIPT), *cli_args]
|
||||||
|
try:
|
||||||
|
cp = subprocess.run(
|
||||||
|
cmd,
|
||||||
|
cwd=str(HERMES_AGENT_HOME),
|
||||||
|
capture_output=True,
|
||||||
|
text=True,
|
||||||
|
encoding="utf-8",
|
||||||
|
errors="replace",
|
||||||
|
timeout=timeout,
|
||||||
|
env=env,
|
||||||
|
)
|
||||||
|
except subprocess.TimeoutExpired as e:
|
||||||
|
out = (e.stdout or "") if isinstance(e.stdout, str) else (e.stdout or b"").decode("utf-8", errors="replace")
|
||||||
|
err = (e.stderr or "") if isinstance(e.stderr, str) else (e.stderr or b"").decode("utf-8", errors="replace")
|
||||||
|
msg = f"命令执行超过 {timeout} 秒已中止。"
|
||||||
|
if "compose-build" in cli_args or "run" in cli_args:
|
||||||
|
msg += " 首次构建 Hermes 镜像较久，请用终端执行 ./hermes-agent-cli.sh compose-build 1，或 Web「构建镜像」。"
|
||||||
|
_LOG.error("hermes-agent-cli 超时: %s", " ".join(shlex.quote(x) for x in cmd))
|
||||||
|
cp = subprocess.CompletedProcess(cmd, 124, out, err + "\n" + msg)
|
||||||
|
if _CLI_LOG_ENABLED:
|
||||||
|
line = " ".join(shlex.quote(x) for x in cmd)
|
||||||
|
_LOG.info("hermes-agent-cli: %s", line)
|
||||||
|
_LOG.info("hermes-agent-cli exit=%s", cp.returncode)
|
||||||
|
out = cp.stdout or ""
|
||||||
|
err = cp.stderr or ""
|
||||||
|
if out.strip():
|
||||||
|
_LOG.info("hermes-agent-cli stdout:\n%s", _truncate_out(out))
|
||||||
|
if err.strip():
|
||||||
|
_LOG.info("hermes-agent-cli stderr:\n%s", _truncate_out(err))
|
||||||
|
if not out.strip() and not err.strip():
|
||||||
|
_LOG.info("hermes-agent-cli (无 stdout/stderr)")
|
||||||
|
return cp
|
||||||
|
|
||||||
|
|
||||||
|
def _cli_compose_check() -> str | None:
|
||||||
|
"""通过脚本的 check 子命令校验 Docker、HERMES_SOURCE 与 compose（含 docker compose config）。"""
|
||||||
|
cp = _run_cli("check", timeout=60)
|
||||||
|
if cp.returncode != 0:
|
||||||
|
return (cp.stderr or cp.stdout or "check 失败").strip()
|
||||||
|
return None
|
||||||
|
|
||||||
|
|
||||||
|
def _list_instance_ids_from_dirs_only() -> list[int]:
|
||||||
|
root = _data_root()
|
||||||
|
ids: list[int] = []
|
||||||
|
for p in root.iterdir():
|
||||||
|
if p.is_dir() and re.fullmatch(r"[0-9]+", p.name):
|
||||||
|
ids.append(int(p.name))
|
||||||
|
return sorted(ids)
|
||||||
|
|
||||||
|
|
||||||
|
def list_instance_ids() -> list[int]:
|
||||||
|
"""数据目录序号 ∪ hermes-agent-cli.sh list-ids（Docker 中 hermes-<N>，含已停止容器）。"""
|
||||||
|
cp = _run_cli("list-ids", timeout=60)
|
||||||
|
if cp.returncode != 0:
|
||||||
|
return _list_instance_ids_from_dirs_only()
|
||||||
|
seen: set[int] = set()
|
||||||
|
for line in (cp.stdout or "").splitlines():
|
||||||
|
s = line.strip()
|
||||||
|
if s.isdigit():
|
||||||
|
seen.add(int(s))
|
||||||
|
return sorted(seen)
|
||||||
|
|
||||||
|
|
||||||
|
def next_instance_id() -> int:
|
||||||
|
ids = list_instance_ids()
|
||||||
|
return max(ids) + 1 if ids else 1
|
||||||
|
|
||||||
|
|
||||||
|
def instance_status(instance_id: int) -> dict:
|
||||||
|
"""gateway 容器状态摘要（经 hermes-agent-cli.sh status）。"""
|
||||||
|
try:
|
||||||
|
cp = _run_cli("status", str(instance_id), timeout=120)
|
||||||
|
except Exception as e:
|
||||||
|
return {"running": False, "state": "error", "detail": str(e)}
|
||||||
|
if cp.returncode != 0:
|
||||||
|
return {
|
||||||
|
"running": False,
|
||||||
|
"state": "compose_error",
|
||||||
|
"detail": (cp.stderr or cp.stdout or "").strip(),
|
||||||
|
}
|
||||||
|
raw = (cp.stdout or "").strip()
|
||||||
|
if not raw:
|
||||||
|
return {"running": False, "state": "not_created", "detail": ""}
|
||||||
|
row = None
|
||||||
|
for line in raw.splitlines():
|
||||||
|
line = line.strip()
|
||||||
|
if not line:
|
||||||
|
continue
|
||||||
|
try:
|
||||||
|
obj = json.loads(line)
|
||||||
|
except json.JSONDecodeError:
|
||||||
|
continue
|
||||||
|
if isinstance(obj, list):
|
||||||
|
row = obj[0] if obj else None
|
||||||
|
else:
|
||||||
|
row = obj
|
||||||
|
break
|
||||||
|
if row is None:
|
||||||
|
try:
|
||||||
|
obj = json.loads(raw)
|
||||||
|
if isinstance(obj, list) and obj:
|
||||||
|
row = obj[0]
|
||||||
|
elif isinstance(obj, dict):
|
||||||
|
row = obj
|
||||||
|
except json.JSONDecodeError:
|
||||||
|
pass
|
||||||
|
if row is None:
|
||||||
|
return {"running": False, "state": "unknown", "detail": raw[:500]}
|
||||||
|
st = (row.get("State") or row.get("state") or "").lower()
|
||||||
|
running = st == "running"
|
||||||
|
status_line = (row.get("Status") or row.get("status") or "").strip()
|
||||||
|
exit_code = row.get("ExitCode")
|
||||||
|
health = (row.get("Health") or row.get("health") or "").strip()
|
||||||
|
detail_parts: list[str] = []
|
||||||
|
if status_line:
|
||||||
|
detail_parts.append(status_line)
|
||||||
|
if health and health not in status_line.lower():
|
||||||
|
detail_parts.append(f"Health: {health}")
|
||||||
|
if exit_code is not None and str(exit_code) not in ("0", "") and not running:
|
||||||
|
detail_parts.append(f"ExitCode: {exit_code}")
|
||||||
|
return {
|
||||||
|
"running": running,
|
||||||
|
"state": st or "unknown",
|
||||||
|
"name": (row.get("Name") or row.get("Names") or "").strip(),
|
||||||
|
"status_text": status_line,
|
||||||
|
"exit_code": exit_code,
|
||||||
|
"health": health,
|
||||||
|
"detail": " · ".join(detail_parts) if detail_parts else "",
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
def instance_ports(instance_id: int) -> tuple[int, int]:
|
||||||
|
"""网关 API 端口、Dashboard 端口（与 hermes-agent-cli.sh 一致）。"""
|
||||||
|
return 8641 + instance_id, 9118 + instance_id
|
||||||
|
|
||||||
|
|
||||||
|
def instance_data_dir(instance_id: int) -> Path:
|
||||||
|
return _data_root() / str(instance_id) / "data"
|
||||||
|
|
||||||
|
|
||||||
|
def config_path(instance_id: int) -> Path:
|
||||||
|
return instance_data_dir(instance_id) / "config.yaml"
|
||||||
|
|
||||||
|
|
||||||
|
def instance_has_config(instance_id: int) -> bool:
|
||||||
|
data = instance_data_dir(instance_id)
|
||||||
|
return (data / "config.yaml").is_file() or (data / ".env").is_file()
|
||||||
|
|
||||||
|
|
||||||
|
def _instance_web_meta_path(instance_id: int) -> Path:
|
||||||
|
return _data_root() / str(instance_id) / WEB_META_FILENAME
|
||||||
|
|
||||||
|
|
||||||
|
def _read_instance_web_meta(instance_id: int) -> dict:
|
||||||
|
path = _instance_web_meta_path(instance_id)
|
||||||
|
if not path.is_file():
|
||||||
|
return {}
|
||||||
|
try:
|
||||||
|
data = json.loads(path.read_text(encoding="utf-8"))
|
||||||
|
return data if isinstance(data, dict) else {}
|
||||||
|
except (json.JSONDecodeError, OSError):
|
||||||
|
return {}
|
||||||
|
|
||||||
|
|
||||||
|
def get_instance_owner(instance_id: int) -> str:
|
||||||
|
raw = _read_instance_web_meta(instance_id).get("owner")
|
||||||
|
if raw is None:
|
||||||
|
return ""
|
||||||
|
return str(raw).strip()
|
||||||
|
|
||||||
|
|
||||||
|
def set_instance_owner(instance_id: int, owner: str) -> None:
|
||||||
|
owner = (owner or "").strip()[:_OWNER_MAX_LEN]
|
||||||
|
path = _instance_web_meta_path(instance_id)
|
||||||
|
path.parent.mkdir(parents=True, exist_ok=True)
|
||||||
|
meta = _read_instance_web_meta(instance_id)
|
||||||
|
if not owner:
|
||||||
|
meta.pop("owner", None)
|
||||||
|
if not meta:
|
||||||
|
if path.is_file():
|
||||||
|
path.unlink()
|
||||||
|
return
|
||||||
|
else:
|
||||||
|
meta["owner"] = owner
|
||||||
|
path.write_text(json.dumps(meta, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
|
||||||
|
|
||||||
|
|
||||||
|
def ensure_instance_dirs(instance_id: int) -> Path:
|
||||||
|
data = instance_data_dir(instance_id)
|
||||||
|
data.mkdir(parents=True, exist_ok=True)
|
||||||
|
return data
|
||||||
|
|
||||||
|
|
||||||
|
def _instance_data_dir(instance_id: int) -> Path:
|
||||||
|
return instance_data_dir(instance_id)
|
||||||
|
|
||||||
|
|
||||||
|
def _guide_include_setup_wizard(instance_id: int) -> bool:
|
||||||
|
"""是否在本页自动跑 hermes setup（与脚本标记一致）。"""
|
||||||
|
data = _instance_data_dir(instance_id)
|
||||||
|
if (data / MARK_SETUP_DONE).is_file():
|
||||||
|
return False
|
||||||
|
if (data / MARK_SETUP_DECLINED).is_file():
|
||||||
|
return False
|
||||||
|
return True
|
||||||
|
|
||||||
|
|
||||||
|
def _guide_shell_command(instance_id: int) -> tuple[str, str]:
|
||||||
|
"""返回 bash -c 的一条命令串，以及发给浏览器的说明文案。"""
|
||||||
|
q_home = shlex.quote(str(HERMES_AGENT_HOME))
|
||||||
|
nid = int(instance_id)
|
||||||
|
if _guide_include_setup_wizard(instance_id):
|
||||||
|
inner = (
|
||||||
|
f"set -euo pipefail; cd {q_home} && "
|
||||||
|
f"./hermes-agent-cli.sh setup {nid} && "
|
||||||
|
f"./hermes-agent-cli.sh run --quick {nid} && "
|
||||||
|
f"exec ./hermes-agent-cli.sh exec {nid}"
|
||||||
|
)
|
||||||
|
hint = (
|
||||||
|
"正在自动执行：hermes setup 向导 → 启动 gateway → 进入容器 shell。"
|
||||||
|
"按向导提示填写 API 密钥与频道配置。"
|
||||||
|
)
|
||||||
|
else:
|
||||||
|
inner = (
|
||||||
|
f"set -euo pipefail; cd {q_home} && "
|
||||||
|
f"./hermes-agent-cli.sh run --quick {nid} && "
|
||||||
|
f"exec ./hermes-agent-cli.sh exec {nid}"
|
||||||
|
)
|
||||||
|
hint = (
|
||||||
|
"将启动 gateway 并进入容器 shell（工作目录 /opt/data）。"
|
||||||
|
"可运行 hermes 子命令或 exit 退出。"
|
||||||
|
)
|
||||||
|
return inner, hint
|
||||||
|
|
||||||
|
|
||||||
|
def _docker_shell_command(instance_id: int) -> tuple[str, str]:
|
||||||
|
"""返回进入实例 gateway 容器 shell 的宿主机命令，以及浏览器提示。"""
|
||||||
|
q_home = shlex.quote(str(HERMES_AGENT_HOME))
|
||||||
|
nid = int(instance_id)
|
||||||
|
inner = (
|
||||||
|
f"set -euo pipefail; cd {q_home} && exec ./hermes-agent-cli.sh exec {nid}"
|
||||||
|
)
|
||||||
|
hint = (
|
||||||
|
"将连接到当前实例运行中的 Hermes gateway 容器（/opt/data）。"
|
||||||
|
"若未启动，请先回列表页点「启动」。"
|
||||||
|
)
|
||||||
|
return inner, hint
|
||||||
|
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
app.secret_key = SECRET_KEY
|
||||||
|
app.permanent_session_lifetime = timedelta(days=7)
|
||||||
|
sock = Sock(app)
|
||||||
|
|
||||||
|
|
||||||
|
def login_required(view):
|
||||||
|
from functools import wraps
|
||||||
|
|
||||||
|
@wraps(view)
|
||||||
|
def wrapped(*args, **kwargs):
|
||||||
|
if not session.get("logged_in"):
|
||||||
|
return redirect(url_for("login", next=request.path))
|
||||||
|
return view(*args, **kwargs)
|
||||||
|
|
||||||
|
return wrapped
|
||||||
|
|
||||||
|
|
||||||
|
@app.context_processor
|
||||||
|
def inject_csrf():
|
||||||
|
tok = session.get("csrf_token")
|
||||||
|
if not tok:
|
||||||
|
tok = secrets.token_hex(16)
|
||||||
|
session["csrf_token"] = tok
|
||||||
|
return dict(csrf_token=tok)
|
||||||
|
|
||||||
|
|
||||||
|
def _check_csrf():
|
||||||
|
if request.form.get("csrf_token") != session.get("csrf_token"):
|
||||||
|
abort(403)
|
||||||
|
|
||||||
|
|
||||||
|
def _safe_login_next(url: str) -> str:
|
||||||
|
"""登录后仅跳转到可 GET 的页面，避免重放 POST 路由导致 405。"""
|
||||||
|
u = (url or "").strip()
|
||||||
|
if not u.startswith("/") or u.startswith("//"):
|
||||||
|
return url_for("index")
|
||||||
|
# POST-only 或易误用的路径
|
||||||
|
blocked = ("/instance/create",)
|
||||||
|
if u in blocked or "/run" in u or "/stop" in u or "/destroy" in u:
|
||||||
|
return url_for("index")
|
||||||
|
return u
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/login", methods=["GET", "POST"])
|
||||||
|
def login():
|
||||||
|
if not ADMIN_PASSWORD_HASH and _raw_pw == "":
|
||||||
|
flash(
|
||||||
|
"未设置 HERMES_AGENT_WEB_ADMIN_PASSWORD，请在环境变量、部署配置中设置，"
|
||||||
|
"或使用 python app.py --admin-password 指定后再登录。",
|
||||||
|
"error",
|
||||||
|
)
|
||||||
|
if request.method == "POST":
|
||||||
|
_check_csrf()
|
||||||
|
user = request.form.get("username", "").strip()
|
||||||
|
pw = request.form.get("password", "")
|
||||||
|
next_url = _safe_login_next(request.form.get("next") or "")
|
||||||
|
if not ADMIN_PASSWORD_HASH:
|
||||||
|
flash("管理员密码未配置。", "error")
|
||||||
|
elif user == DEFAULT_ADMIN_USER and check_password_hash(ADMIN_PASSWORD_HASH, pw):
|
||||||
|
session.clear()
|
||||||
|
session.permanent = True
|
||||||
|
session["logged_in"] = True
|
||||||
|
session["csrf_token"] = secrets.token_hex(16)
|
||||||
|
if (request.form.get("next") or "").strip() in ("/instance/create",):
|
||||||
|
flash("已登录。请再次点击「新建实例」。", "success")
|
||||||
|
return redirect(next_url)
|
||||||
|
flash("用户名或密码错误。", "error")
|
||||||
|
next_raw = (request.args.get("next") or request.form.get("next") or "")[:512]
|
||||||
|
return render_template(
|
||||||
|
"login.html",
|
||||||
|
next_url=next_raw,
|
||||||
|
default_admin_username=DEFAULT_ADMIN_USER,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/logout", methods=["POST"])
|
||||||
|
def logout():
|
||||||
|
_check_csrf()
|
||||||
|
session.clear()
|
||||||
|
return redirect(url_for("login"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/")
|
||||||
|
@login_required
|
||||||
|
def index():
|
||||||
|
err_msg = _cli_compose_check()
|
||||||
|
ids = list_instance_ids()
|
||||||
|
rows = []
|
||||||
|
running_n = 0
|
||||||
|
for iid in ids:
|
||||||
|
st = instance_status(iid)
|
||||||
|
if st.get("running"):
|
||||||
|
running_n += 1
|
||||||
|
gpt, dpt = instance_ports(iid)
|
||||||
|
has_cfg = instance_has_config(iid)
|
||||||
|
rows.append(
|
||||||
|
{
|
||||||
|
"id": iid,
|
||||||
|
"status": st,
|
||||||
|
"metadata_owner": get_instance_owner(iid),
|
||||||
|
"gateway_port": gpt,
|
||||||
|
"dashboard_port": dpt,
|
||||||
|
"has_config": has_cfg,
|
||||||
|
}
|
||||||
|
)
|
||||||
|
return render_template(
|
||||||
|
"index.html",
|
||||||
|
rows=rows,
|
||||||
|
total=len(ids),
|
||||||
|
running_n=running_n,
|
||||||
|
data_root=str(DATA_ROOT),
|
||||||
|
compose_error=err_msg,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/owner", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_set_owner(iid):
|
||||||
|
_check_csrf()
|
||||||
|
raw = (request.form.get("owner") or "").strip()[:_OWNER_MAX_LEN]
|
||||||
|
set_instance_owner(iid, raw)
|
||||||
|
if raw:
|
||||||
|
flash(f"实例 #{iid} 所属人已保存。", "success")
|
||||||
|
else:
|
||||||
|
flash(f"实例 #{iid} 所属人已清空。", "success")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/create", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_create():
|
||||||
|
_check_csrf()
|
||||||
|
nid = next_instance_id()
|
||||||
|
ensure_instance_dirs(nid)
|
||||||
|
cp = _run_cli("bootstrap", str(nid))
|
||||||
|
if cp.returncode != 0:
|
||||||
|
flash(
|
||||||
|
f"创建实例 #{nid} 目录成功，但 bootstrap 失败：\n"
|
||||||
|
f"{cp.stderr or cp.stdout}",
|
||||||
|
"error",
|
||||||
|
)
|
||||||
|
else:
|
||||||
|
flash(f"已新建实例 #{nid} 并完成 bootstrap。可点击「启动」。", "success")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/run", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_run(iid):
|
||||||
|
_check_csrf()
|
||||||
|
ensure_instance_dirs(iid)
|
||||||
|
cp = _run_cli("run", "--quick", str(iid), timeout=_CLI_TIMEOUT_LONG)
|
||||||
|
if cp.returncode != 0:
|
||||||
|
err = (cp.stderr or cp.stdout or "").strip()
|
||||||
|
if "尚无镜像" in err or "compose-build" in err or "拉取" in err:
|
||||||
|
flash(
|
||||||
|
f"启动 #{iid} 失败：本地尚无镜像。\n"
|
||||||
|
f"请先点「拉取镜像」（或终端：./hermes-agent-cli.sh compose-build {iid}），完成后再点「启动」。",
|
||||||
|
"error",
|
||||||
|
)
|
||||||
|
elif cp.returncode == 124:
|
||||||
|
flash(f"启动 #{iid} 超时：\n{err}", "error")
|
||||||
|
else:
|
||||||
|
flash(f"启动 #{iid} 失败：\n{err}", "error")
|
||||||
|
else:
|
||||||
|
st = instance_status(iid)
|
||||||
|
if st.get("running"):
|
||||||
|
hint = st.get("status_text") or "running"
|
||||||
|
gpt, dpt = instance_ports(iid)
|
||||||
|
flash(
|
||||||
|
f"实例 #{iid} 已在运行（Hermes gateway）。Docker 状态：{hint}。"
|
||||||
|
f" API http://127.0.0.1:{gpt} · Dashboard http://127.0.0.1:{dpt}"
|
||||||
|
f" · 容器名一般为 hermes-{iid}-gateway-1。",
|
||||||
|
"success",
|
||||||
|
)
|
||||||
|
elif st.get("state") == "not_created":
|
||||||
|
flash(
|
||||||
|
f"compose 返回成功，但未查到网关容器（可能仍在创建）。"
|
||||||
|
f" 请在 Docker 中搜索 hermes-{iid} 或执行："
|
||||||
|
f" docker ps -a --filter name=hermes-{iid}-gateway",
|
||||||
|
"warning",
|
||||||
|
)
|
||||||
|
else:
|
||||||
|
flash(
|
||||||
|
f"compose 已执行，当前探测状态：{st.get('state')}。"
|
||||||
|
f" {st.get('detail') or ''}"
|
||||||
|
f" 若容器已退出，查看日志："
|
||||||
|
f" hermes-agent-cli.sh log {iid}",
|
||||||
|
"warning",
|
||||||
|
)
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/compose-build", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_compose_build(iid):
|
||||||
|
_check_csrf()
|
||||||
|
cp = _run_cli("compose-build", str(iid), timeout=_CLI_TIMEOUT_LONG)
|
||||||
|
if cp.returncode == 124:
|
||||||
|
flash(
|
||||||
|
f"拉取 #{iid} 超过 {_CLI_TIMEOUT_LONG} 秒。可能仍在后台进行，"
|
||||||
|
f"请在终端执行：cd {HERMES_AGENT_HOME} && ./hermes-agent-cli.sh compose-build {iid}",
|
||||||
|
"warning",
|
||||||
|
)
|
||||||
|
elif cp.returncode != 0:
|
||||||
|
flash(f"拉取 #{iid} 失败：\n{cp.stderr or cp.stdout}", "error")
|
||||||
|
else:
|
||||||
|
out = (cp.stdout or "").strip()
|
||||||
|
if "跳过拉取" in out:
|
||||||
|
flash(f"实例 #{iid}：{out.splitlines()[0] if out else '镜像已存在，无需拉取。'} 可直接点「启动」。", "success")
|
||||||
|
else:
|
||||||
|
flash(f"实例 #{iid} 官方镜像已就绪，可点击「启动」。", "success")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/stop", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_stop(iid):
|
||||||
|
_check_csrf()
|
||||||
|
cp = _run_cli("stop", str(iid))
|
||||||
|
if cp.returncode != 0:
|
||||||
|
flash(f"停止 #{iid} 失败：\n{cp.stderr or cp.stdout}", "error")
|
||||||
|
else:
|
||||||
|
flash(f"实例 #{iid} 网关已停止。", "success")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/restart", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_restart(iid):
|
||||||
|
_check_csrf()
|
||||||
|
cp = _run_cli("restart", str(iid))
|
||||||
|
if cp.returncode != 0:
|
||||||
|
flash(f"重启 #{iid} 失败：\n{cp.stderr or cp.stdout}", "error")
|
||||||
|
else:
|
||||||
|
flash(f"实例 #{iid} 已重启。", "success")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/destroy", methods=["POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_destroy(iid):
|
||||||
|
_check_csrf()
|
||||||
|
cp = _run_cli("destroy", str(iid))
|
||||||
|
if cp.returncode != 0:
|
||||||
|
flash(f"销毁 #{iid} 失败：\n{cp.stderr or cp.stdout}", "error")
|
||||||
|
else:
|
||||||
|
flash(
|
||||||
|
f"实例 #{iid} 已销毁：compose 项目已 down，宿主机上该实例目录（含 config/workspace）已删除。",
|
||||||
|
"success",
|
||||||
|
)
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/config", methods=["GET", "POST"])
|
||||||
|
@login_required
|
||||||
|
def instance_config(iid):
|
||||||
|
path = config_path(iid)
|
||||||
|
if request.method == "POST":
|
||||||
|
_check_csrf()
|
||||||
|
text = request.form.get("config_body", "")
|
||||||
|
try:
|
||||||
|
import yaml # type: ignore
|
||||||
|
|
||||||
|
parsed = yaml.safe_load(text)
|
||||||
|
if parsed is not None and not isinstance(parsed, dict):
|
||||||
|
raise ValueError("根节点须为 YAML 映射（mapping）")
|
||||||
|
except ImportError:
|
||||||
|
pass
|
||||||
|
except Exception as e:
|
||||||
|
flash(f"YAML 无效：{e}", "error")
|
||||||
|
return render_template("config_edit.html", iid=iid, text=text)
|
||||||
|
backup = path.with_suffix(".yaml.bak")
|
||||||
|
if path.is_file():
|
||||||
|
shutil.copy2(path, backup)
|
||||||
|
path.parent.mkdir(parents=True, exist_ok=True)
|
||||||
|
path.write_text(text if text.endswith("\n") else text + "\n", encoding="utf-8")
|
||||||
|
flash(
|
||||||
|
"已保存 config.yaml（旧文件已备份为 config.yaml.bak）。修改后请在列表页重启 gateway。",
|
||||||
|
"success",
|
||||||
|
)
|
||||||
|
return redirect(url_for("instance_config", iid=iid))
|
||||||
|
if path.is_file():
|
||||||
|
text = path.read_text(encoding="utf-8")
|
||||||
|
else:
|
||||||
|
text = "# Hermes Agent config.yaml\nmodel:\n provider: anthropic\n"
|
||||||
|
flash("该实例尚无 config.yaml，编辑保存后将创建。", "warning")
|
||||||
|
return render_template("config_edit.html", iid=iid, text=text)
|
||||||
|
|
||||||
|
|
||||||
|
def _command_pty_bridge(ws, iid: int, title: str, command_factory) -> None:
|
||||||
|
"""通用 WebSocket ↔ 伪终端桥接。"""
|
||||||
|
assert pexpect is not None
|
||||||
|
env = os.environ.copy()
|
||||||
|
env.setdefault("TERM", "xterm-256color")
|
||||||
|
env.setdefault("COLORTERM", "truecolor")
|
||||||
|
env.setdefault("BASH_SILENCE_DEPRECATION_WARNING", "1")
|
||||||
|
bash = shutil.which("bash") or "/bin/bash"
|
||||||
|
inner, hint = command_factory(iid)
|
||||||
|
child = pexpect.spawn(
|
||||||
|
bash,
|
||||||
|
["--noprofile", "--norc", "-c", inner],
|
||||||
|
cwd=str(HERMES_AGENT_HOME),
|
||||||
|
env=env,
|
||||||
|
echo=False,
|
||||||
|
encoding="utf-8",
|
||||||
|
codec_errors="replace",
|
||||||
|
timeout=None,
|
||||||
|
)
|
||||||
|
child.setwinsize(24, 100)
|
||||||
|
|
||||||
|
banner = (
|
||||||
|
f"\r\n\x1b[36m══ {title}（实例 {iid}）══\x1b[0m\r\n"
|
||||||
|
f"\x1b[90m{hint}\x1b[0m\r\n\r\n"
|
||||||
|
)
|
||||||
|
try:
|
||||||
|
ws.send(banner)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
|
||||||
|
def forward_pty() -> None:
|
||||||
|
while True:
|
||||||
|
try:
|
||||||
|
chunk = child.read_nonblocking(65536, timeout=0.25)
|
||||||
|
if chunk:
|
||||||
|
ws.send(chunk)
|
||||||
|
except pexpect.TIMEOUT:
|
||||||
|
continue
|
||||||
|
except (pexpect.EOF, OSError):
|
||||||
|
try:
|
||||||
|
ws.send("\r\n\x1b[33m( shell 已退出，可关闭本页 )\x1b[0m\r\n")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
break
|
||||||
|
|
||||||
|
threading.Thread(target=forward_pty, daemon=True).start()
|
||||||
|
|
||||||
|
try:
|
||||||
|
while True:
|
||||||
|
msg = ws.receive()
|
||||||
|
if msg is None:
|
||||||
|
break
|
||||||
|
if isinstance(msg, bytes):
|
||||||
|
msg = msg.decode("utf-8", errors="replace")
|
||||||
|
if len(msg) > 2 and msg[0] == "{" and msg[-1] == "}":
|
||||||
|
try:
|
||||||
|
o = json.loads(msg)
|
||||||
|
if o.get("t") == "resize":
|
||||||
|
rows = max(5, min(int(o["rows"]), 200))
|
||||||
|
cols = max(20, min(int(o["cols"]), 500))
|
||||||
|
child.setwinsize(rows, cols)
|
||||||
|
continue
|
||||||
|
except (json.JSONDecodeError, KeyError, TypeError, ValueError):
|
||||||
|
pass
|
||||||
|
try:
|
||||||
|
child.send(msg)
|
||||||
|
except OSError:
|
||||||
|
break
|
||||||
|
finally:
|
||||||
|
try:
|
||||||
|
child.close(force=True)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
|
||||||
|
|
||||||
|
@sock.route("/ws/instance/<int:iid>/pty")
|
||||||
|
def guide_pty_ws(ws, iid: int):
|
||||||
|
"""引导终端 WebSocket（签名 token，避免 WS 握手丢失 session）。"""
|
||||||
|
tok = request.args.get("token", type=str)
|
||||||
|
if not verify_guide_pty_token(tok, iid):
|
||||||
|
try:
|
||||||
|
ws.send(
|
||||||
|
"\r\n\x1b[31m[未授权：请从首页「Hermes 引导」重新进入"
|
||||||
|
"（链接 15 分钟内有效）]\x1b[0m\r\n"
|
||||||
|
)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
if sys.platform == "win32":
|
||||||
|
try:
|
||||||
|
ws.send("\r\n[网页终端仅支持 macOS / Linux]\r\n")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
if pexpect is None:
|
||||||
|
try:
|
||||||
|
ws.send("\r\n[缺少依赖: pip install pexpect]\r\n")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
_command_pty_bridge(ws, iid, "Hermes 引导", _guide_shell_command)
|
||||||
|
|
||||||
|
|
||||||
|
@sock.route("/ws/instance/<int:iid>/docker-pty")
|
||||||
|
def docker_pty_ws(ws, iid: int):
|
||||||
|
"""Docker 容器终端 WebSocket（签名 token）。"""
|
||||||
|
tok = request.args.get("token", type=str)
|
||||||
|
if not verify_docker_pty_token(tok, iid):
|
||||||
|
try:
|
||||||
|
ws.send(
|
||||||
|
"\r\n\x1b[31m[未授权：请从首页「终端」重新进入"
|
||||||
|
"（链接 15 分钟内有效）]\x1b[0m\r\n"
|
||||||
|
)
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
if sys.platform == "win32":
|
||||||
|
try:
|
||||||
|
ws.send("\r\n[网页终端仅支持 macOS / Linux]\r\n")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
if pexpect is None:
|
||||||
|
try:
|
||||||
|
ws.send("\r\n[缺少依赖: pip install pexpect]\r\n")
|
||||||
|
except Exception:
|
||||||
|
pass
|
||||||
|
return
|
||||||
|
_command_pty_bridge(ws, iid, "Docker 终端", _docker_shell_command)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/guide")
|
||||||
|
@login_required
|
||||||
|
def instance_guide(iid):
|
||||||
|
"""引导终端：自动执行 setup（如需）→ 启动网关 → onboard，用户只应答交互提示。"""
|
||||||
|
if sys.platform == "win32":
|
||||||
|
flash("网页引导终端仅支持 macOS / Linux。", "error")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
if pexpect is None:
|
||||||
|
flash("请安装依赖：pip install -r requirements.txt（含 pexpect、flask-sock）", "error")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
return render_template(
|
||||||
|
"guide_terminal.html",
|
||||||
|
iid=iid,
|
||||||
|
ws_token=make_guide_pty_token(iid),
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/docker")
|
||||||
|
@login_required
|
||||||
|
def instance_docker_terminal(iid):
|
||||||
|
"""运行中实例的 Docker 容器终端。"""
|
||||||
|
if sys.platform == "win32":
|
||||||
|
flash("网页终端仅支持 macOS / Linux。", "error")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
if pexpect is None:
|
||||||
|
flash("请安装依赖：pip install -r requirements.txt（含 pexpect、flask-sock）", "error")
|
||||||
|
return redirect(url_for("index"))
|
||||||
|
return render_template(
|
||||||
|
"docker_terminal.html",
|
||||||
|
iid=iid,
|
||||||
|
ws_token=make_docker_pty_token(iid),
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
@app.route("/instance/<int:iid>/channels")
|
||||||
|
@app.route("/instance/<int:iid>/channels/term")
|
||||||
|
@login_required
|
||||||
|
def legacy_channels_redirect(iid):
|
||||||
|
return redirect(url_for("instance_guide", iid=iid))
|
||||||
|
|
||||||
|
|
||||||
|
def main():
|
||||||
|
logging.basicConfig(
|
||||||
|
level=logging.INFO,
|
||||||
|
format="%(asctime)s %(message)s",
|
||||||
|
datefmt="%Y-%m-%d %H:%M:%S",
|
||||||
|
)
|
||||||
|
ap = argparse.ArgumentParser(description="Hermes Agent Web 管理端")
|
||||||
|
ap.add_argument("--host", default=None, help="监听地址（默认同 HERMES_AGENT_WEB_HOST，127.0.0.1）")
|
||||||
|
ap.add_argument("--port", type=int, default=None, help="端口（默认同 HERMES_AGENT_WEB_PORT，8781）")
|
||||||
|
ap.add_argument(
|
||||||
|
"--admin-password",
|
||||||
|
default="",
|
||||||
|
help="管理员登录密码，写入 HERMES_AGENT_WEB_ADMIN_PASSWORD（与 df-report --admin-password 类似）",
|
||||||
|
)
|
||||||
|
args = ap.parse_args()
|
||||||
|
if args.admin_password:
|
||||||
|
os.environ["HERMES_AGENT_WEB_ADMIN_PASSWORD"] = args.admin_password
|
||||||
|
_reload_admin_password_config()
|
||||||
|
host = (
|
||||||
|
args.host
|
||||||
|
if args.host is not None
|
||||||
|
else os.environ.get("HERMES_AGENT_WEB_HOST", "127.0.0.1")
|
||||||
|
)
|
||||||
|
port = (
|
||||||
|
int(args.port)
|
||||||
|
if args.port is not None
|
||||||
|
else int(os.environ.get("HERMES_AGENT_WEB_PORT", "8781"))
|
||||||
|
)
|
||||||
|
if not ADMIN_PASSWORD_HASH and _raw_pw == "":
|
||||||
|
print(
|
||||||
|
"警告: 未设置 HERMES_AGENT_WEB_ADMIN_PASSWORD，登录将不可用。"
|
||||||
|
" 可: HERMES_AGENT_WEB_ADMIN_PASSWORD=你的密码 python app.py"
|
||||||
|
" 或: python app.py --admin-password 你的密码",
|
||||||
|
flush=True,
|
||||||
|
)
|
||||||
|
print(f"Hermes Agent Web: http://{host}:{port}", flush=True)
|
||||||
|
app.run(host=host, port=port, debug=False, use_reloader=False, threaded=True)
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
main()
|
||||||
@@ -0,0 +1,5 @@
|
|||||||
|
flask>=3.0.0
|
||||||
|
python-dotenv>=1.0.0
|
||||||
|
flask-sock>=0.7.0
|
||||||
|
pexpect>=4.9.0
|
||||||
|
pyyaml>=6.0.0
|
||||||
@@ -0,0 +1,121 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="zh-CN">
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>{% block title %}Hermes Agent Web{% endblock %}</title>
|
||||||
|
<style>
|
||||||
|
:root {
|
||||||
|
--bg: #0f1419;
|
||||||
|
--surface: #1a2332;
|
||||||
|
--border: #2d3a4d;
|
||||||
|
--text: #e7edf4;
|
||||||
|
--muted: #8b9cb3;
|
||||||
|
--accent: #3d9eff;
|
||||||
|
--danger: #f0696a;
|
||||||
|
--ok: #4cc38a;
|
||||||
|
--warn: #e6b35a;
|
||||||
|
}
|
||||||
|
* { box-sizing: border-box; }
|
||||||
|
body {
|
||||||
|
font-family: ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
|
||||||
|
background: var(--bg);
|
||||||
|
color: var(--text);
|
||||||
|
margin: 0;
|
||||||
|
line-height: 1.5;
|
||||||
|
min-height: 100vh;
|
||||||
|
}
|
||||||
|
a { color: var(--accent); text-decoration: none; }
|
||||||
|
a:hover { text-decoration: underline; }
|
||||||
|
header {
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
justify-content: space-between;
|
||||||
|
padding: 1rem 1.25rem;
|
||||||
|
border-bottom: 1px solid var(--border);
|
||||||
|
background: var(--surface);
|
||||||
|
}
|
||||||
|
header h1 { font-size: 1.125rem; margin: 0; font-weight: 600; }
|
||||||
|
main { max-width: 960px; margin: 0 auto; padding: 1.25rem; }
|
||||||
|
.flash {
|
||||||
|
padding: 0.75rem 1rem;
|
||||||
|
border-radius: 8px;
|
||||||
|
margin-bottom: 1rem;
|
||||||
|
border: 1px solid var(--border);
|
||||||
|
}
|
||||||
|
.flash.success { border-color: #2a5c42; background: #15251c; color: #b8e8c8; }
|
||||||
|
.flash.error { border-color: #6b3030; background: #251515; color: #f5c0c0; }
|
||||||
|
.flash.warning { border-color: #6b5a30; background: #252015; color: #f0dfb0; }
|
||||||
|
.muted { color: var(--muted); font-size: 0.875rem; }
|
||||||
|
button, .btn {
|
||||||
|
font: inherit;
|
||||||
|
cursor: pointer;
|
||||||
|
border-radius: 6px;
|
||||||
|
border: 1px solid var(--border);
|
||||||
|
background: var(--surface);
|
||||||
|
color: var(--text);
|
||||||
|
padding: 0.35rem 0.65rem;
|
||||||
|
}
|
||||||
|
button.primary { background: #1a4d7a; border-color: #2563a8; }
|
||||||
|
button.danger { background: #4a2525; border-color: #8b4040; color: #fecaca; }
|
||||||
|
button.linkish {
|
||||||
|
background: transparent;
|
||||||
|
border: none;
|
||||||
|
color: var(--accent);
|
||||||
|
padding: 0;
|
||||||
|
}
|
||||||
|
table {
|
||||||
|
width: 100%;
|
||||||
|
border-collapse: collapse;
|
||||||
|
font-size: 0.9rem;
|
||||||
|
}
|
||||||
|
th, td { text-align: left; padding: 0.5rem 0.6rem; border-bottom: 1px solid var(--border); vertical-align: top; }
|
||||||
|
th { color: var(--muted); font-weight: 500; }
|
||||||
|
code { font-size: 0.85em; background: #0c1017; padding: 0.15rem 0.35rem; border-radius: 4px; }
|
||||||
|
.row-actions { display: flex; flex-wrap: wrap; gap: 0.35rem; align-items: center; }
|
||||||
|
textarea.code {
|
||||||
|
width: 100%;
|
||||||
|
min-height: 420px;
|
||||||
|
font-family: ui-monospace, "SF Mono", Menlo, monospace;
|
||||||
|
font-size: 0.85rem;
|
||||||
|
background: #0c1017;
|
||||||
|
color: var(--text);
|
||||||
|
border: 1px solid var(--border);
|
||||||
|
border-radius: 8px;
|
||||||
|
padding: 0.75rem;
|
||||||
|
resize: vertical;
|
||||||
|
}
|
||||||
|
.badge {
|
||||||
|
display: inline-block;
|
||||||
|
padding: 0.12rem 0.45rem;
|
||||||
|
border-radius: 999px;
|
||||||
|
font-size: 0.75rem;
|
||||||
|
font-weight: 500;
|
||||||
|
}
|
||||||
|
.badge.ok { background: #1a3d2a; color: #8fe3b0; }
|
||||||
|
.badge.off { background: #2a2a2a; color: #aaa; }
|
||||||
|
.badge.err { background: #3d1a1a; color: #f0a0a0; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<header>
|
||||||
|
<h1><a href="{{ url_for('index') }}" style="color:inherit;text-decoration:none;">Hermes Agent Web</a></h1>
|
||||||
|
{% if session.get('logged_in') %}
|
||||||
|
<form method="post" action="{{ url_for('logout') }}" style="margin:0;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit" class="linkish">退出</button>
|
||||||
|
</form>
|
||||||
|
{% endif %}
|
||||||
|
</header>
|
||||||
|
<main>
|
||||||
|
{% with messages = get_flashed_messages(with_categories=true) %}
|
||||||
|
{% if messages %}
|
||||||
|
{% for category, msg in messages %}
|
||||||
|
<div class="flash {{ category }}">{{ msg }}</div>
|
||||||
|
{% endfor %}
|
||||||
|
{% endif %}
|
||||||
|
{% endwith %}
|
||||||
|
{% block body %}{% endblock %}
|
||||||
|
</main>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,15 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% block title %}实例 {{ iid }} 配置 · Hermes Agent Web{% endblock %}
|
||||||
|
{% block body %}
|
||||||
|
<p><a href="{{ url_for('index') }}">← 返回列表</a></p>
|
||||||
|
<h2 style="margin-top:0;">实例 <code>{{ iid }}</code> · config.yaml</h2>
|
||||||
|
<p class="muted">路径：<code>data/config.yaml</code>。保存前会校验 YAML。若文件已存在，将备份为 <code>config.yaml.bak</code>。修改后请在列表页「重启」gateway。</p>
|
||||||
|
<form method="post">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<textarea class="code" name="config_body" spellcheck="false">{{ text }}</textarea>
|
||||||
|
<p>
|
||||||
|
<button type="submit" class="primary">保存</button>
|
||||||
|
<a href="{{ url_for('index') }}">取消</a>
|
||||||
|
</p>
|
||||||
|
</form>
|
||||||
|
{% endblock %}
|
||||||
@@ -0,0 +1,77 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% block title %}实例 {{ iid }} · Docker 终端 · Hermes Agent Web{% endblock %}
|
||||||
|
{% block body %}
|
||||||
|
<p><a href="{{ url_for('index') }}">← 返回实例列表</a></p>
|
||||||
|
<h2 style="margin-top:0;">实例 <code>{{ iid }}</code> · Docker 终端</h2>
|
||||||
|
<p class="muted">打开本页后会连接到该实例<strong>运行中的</strong> Hermes <code>gateway</code> 容器 shell（/opt/data）。
|
||||||
|
若容器尚未启动，请先返回列表页点「启动」；退出终端可输入 <code>exit</code>。</p>
|
||||||
|
<div style="margin:1rem 0 1.1rem;padding:0.9rem 1rem;border:1px solid var(--border);border-radius:10px;background:#111723;">
|
||||||
|
<div style="font-size:0.95rem;font-weight:600;margin-bottom:0.65rem;">常用指令</div>
|
||||||
|
<div style="display:grid;gap:0.65rem;">
|
||||||
|
<div>
|
||||||
|
<div class="muted" style="margin-bottom:0.25rem;">切换到 Codex Provider 登录</div>
|
||||||
|
<code style="display:block;padding:0.65rem 0.8rem;white-space:pre-wrap;">hermes config</code>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div id="term-wrap" style="height:min(75vh,620px);border:1px solid var(--border);border-radius:8px;padding:2px;background:#0c1017;"></div>
|
||||||
|
<p class="muted" style="margin-top:0.75rem;">关闭本页请先退出容器 shell。需联网加载 xterm（CDN）。</p>
|
||||||
|
|
||||||
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/xterm@5.3.0/css/xterm.min.css" crossorigin="anonymous" />
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/xterm@5.3.0/lib/xterm.min.js" crossorigin="anonymous"></script>
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/@xterm/addon-fit@0.11.0/lib/addon-fit.min.js" crossorigin="anonymous"></script>
|
||||||
|
<script>
|
||||||
|
(function () {
|
||||||
|
var wrap = document.getElementById('term-wrap');
|
||||||
|
var term = new Terminal({
|
||||||
|
cursorBlink: true,
|
||||||
|
fontSize: 14,
|
||||||
|
fontFamily: 'ui-monospace, SF Mono, Menlo, Consolas, monospace',
|
||||||
|
theme: { background: '#0c1017', foreground: '#e7edf4' }
|
||||||
|
});
|
||||||
|
var FitCtor = (typeof FitAddon !== 'undefined' && FitAddon.FitAddon) ? FitAddon.FitAddon : FitAddon;
|
||||||
|
var fit = new FitCtor();
|
||||||
|
term.loadAddon(fit);
|
||||||
|
term.open(wrap);
|
||||||
|
fit.fit();
|
||||||
|
term.writeln('\x1b[90m正在连接 Docker 终端…\x1b[0m');
|
||||||
|
|
||||||
|
var proto = (location.protocol === 'https:') ? 'wss:' : 'ws:';
|
||||||
|
var tok = {{ ws_token | tojson }};
|
||||||
|
var ws = new WebSocket(proto + '//' + location.host + '/ws/instance/{{ iid }}/docker-pty?token=' + encodeURIComponent(tok));
|
||||||
|
ws.onopen = function () {
|
||||||
|
term.reset();
|
||||||
|
fit.fit();
|
||||||
|
sendResize();
|
||||||
|
};
|
||||||
|
ws.onmessage = function (ev) {
|
||||||
|
var d = ev.data;
|
||||||
|
if (typeof d === 'string') term.write(d);
|
||||||
|
else term.write(new Uint8Array(d));
|
||||||
|
};
|
||||||
|
ws.onerror = function () {
|
||||||
|
term.write('\r\n\x1b[31m[WebSocket 错误]\x1b[0m\r\n');
|
||||||
|
};
|
||||||
|
ws.onclose = function (ev) {
|
||||||
|
term.write('\r\n\x1b[33m[连接已关闭' + (ev && ev.code ? ' code=' + ev.code : '') + ']\x1b[0m\r\n');
|
||||||
|
};
|
||||||
|
term.onData(function (data) {
|
||||||
|
if (ws.readyState === WebSocket.OPEN) ws.send(data);
|
||||||
|
});
|
||||||
|
|
||||||
|
function sendResize() {
|
||||||
|
if (ws.readyState !== WebSocket.OPEN) return;
|
||||||
|
try {
|
||||||
|
fit.fit();
|
||||||
|
ws.send(JSON.stringify({ t: 'resize', cols: term.cols, rows: term.rows }));
|
||||||
|
} catch (e) {}
|
||||||
|
}
|
||||||
|
window.addEventListener('resize', function () {
|
||||||
|
fit.fit();
|
||||||
|
sendResize();
|
||||||
|
});
|
||||||
|
new ResizeObserver(sendResize).observe(wrap);
|
||||||
|
setTimeout(sendResize, 100);
|
||||||
|
})();
|
||||||
|
</script>
|
||||||
|
{% endblock %}
|
||||||
@@ -0,0 +1,68 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% block title %}实例 {{ iid }} · Hermes 引导 · Hermes Agent Web{% endblock %}
|
||||||
|
{% block body %}
|
||||||
|
<p><a href="{{ url_for('index') }}">← 返回实例列表</a></p>
|
||||||
|
<h2 style="margin-top:0;">实例 <code>{{ iid }}</code> · 引导终端</h2>
|
||||||
|
<p class="muted">打开本页后会<strong>自动</strong>在后台执行官方引导链路（未完成 setup 时先跑向导，再启动网关，再进入 <code>onboard</code>）。
|
||||||
|
你一般<strong>不用输入命令</strong>，只需在终端里按程序提问操作；需要改配置可用「编辑配置」。</p>
|
||||||
|
<div id="term-wrap" style="height:min(75vh,620px);border:1px solid var(--border);border-radius:8px;padding:2px;background:#0c1017;"></div>
|
||||||
|
<p class="muted" style="margin-top:0.75rem;">关闭本页请先 <kbd>Ctrl+C</kbd> 结束当前命令。需联网加载 xterm（CDN）。</p>
|
||||||
|
|
||||||
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/xterm@5.3.0/css/xterm.min.css" crossorigin="anonymous" />
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/xterm@5.3.0/lib/xterm.min.js" crossorigin="anonymous"></script>
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/@xterm/addon-fit@0.11.0/lib/addon-fit.min.js" crossorigin="anonymous"></script>
|
||||||
|
<script>
|
||||||
|
(function () {
|
||||||
|
var wrap = document.getElementById('term-wrap');
|
||||||
|
var term = new Terminal({
|
||||||
|
cursorBlink: true,
|
||||||
|
fontSize: 14,
|
||||||
|
fontFamily: 'ui-monospace, SF Mono, Menlo, Consolas, monospace',
|
||||||
|
theme: { background: '#0c1017', foreground: '#e7edf4' }
|
||||||
|
});
|
||||||
|
var FitCtor = (typeof FitAddon !== 'undefined' && FitAddon.FitAddon) ? FitAddon.FitAddon : FitAddon;
|
||||||
|
var fit = new FitCtor();
|
||||||
|
term.loadAddon(fit);
|
||||||
|
term.open(wrap);
|
||||||
|
fit.fit();
|
||||||
|
term.writeln('\x1b[90m正在连接引导终端…\x1b[0m');
|
||||||
|
|
||||||
|
var proto = (location.protocol === 'https:') ? 'wss:' : 'ws:';
|
||||||
|
var tok = {{ ws_token | tojson }};
|
||||||
|
var ws = new WebSocket(proto + '//' + location.host + '/ws/instance/{{ iid }}/pty?token=' + encodeURIComponent(tok));
|
||||||
|
ws.onopen = function () {
|
||||||
|
term.reset();
|
||||||
|
fit.fit();
|
||||||
|
sendResize();
|
||||||
|
};
|
||||||
|
ws.onmessage = function (ev) {
|
||||||
|
var d = ev.data;
|
||||||
|
if (typeof d === 'string') term.write(d);
|
||||||
|
else term.write(new Uint8Array(d));
|
||||||
|
};
|
||||||
|
ws.onerror = function () {
|
||||||
|
term.write('\r\n\x1b[31m[WebSocket 错误]\x1b[0m\r\n');
|
||||||
|
};
|
||||||
|
ws.onclose = function (ev) {
|
||||||
|
term.write('\r\n\x1b[33m[连接已关闭' + (ev && ev.code ? ' code=' + ev.code : '') + ']\x1b[0m\r\n');
|
||||||
|
};
|
||||||
|
term.onData(function (data) {
|
||||||
|
if (ws.readyState === WebSocket.OPEN) ws.send(data);
|
||||||
|
});
|
||||||
|
|
||||||
|
function sendResize() {
|
||||||
|
if (ws.readyState !== WebSocket.OPEN) return;
|
||||||
|
try {
|
||||||
|
fit.fit();
|
||||||
|
ws.send(JSON.stringify({ t: 'resize', cols: term.cols, rows: term.rows }));
|
||||||
|
} catch (e) {}
|
||||||
|
}
|
||||||
|
window.addEventListener('resize', function () {
|
||||||
|
fit.fit();
|
||||||
|
sendResize();
|
||||||
|
});
|
||||||
|
new ResizeObserver(sendResize).observe(wrap);
|
||||||
|
setTimeout(sendResize, 100);
|
||||||
|
})();
|
||||||
|
</script>
|
||||||
|
{% endblock %}
|
||||||
@@ -0,0 +1,106 @@
|
|||||||
|
{% extends "base.html" %}
|
||||||
|
{% block title %}实例 · Hermes Agent Web{% endblock %}
|
||||||
|
{% block body %}
|
||||||
|
<h2 style="margin-top:0;">实例</h2>
|
||||||
|
<p class="muted">
|
||||||
|
数据目录：<code>{{ data_root }}</code> ·
|
||||||
|
合计 <strong>{{ total }}</strong> 个实例 ·
|
||||||
|
网关运行中 <strong>{{ running_n }}</strong> 个
|
||||||
|
· 列表「所属人」记在每台目录下的 <code>web-meta.json</code>（与 <code>data/config.yaml</code> 分离）
|
||||||
|
</p>
|
||||||
|
<p class="muted" style="max-width:52rem;">
|
||||||
|
首次配置请点 <strong>「Hermes 引导」</strong>（<code>setup</code> → 启动 gateway → 容器 shell）。
|
||||||
|
Docker 项目名 <code>hermes-<序号></code>，服务 <code>gateway</code>（NousResearch/hermes-agent）。
|
||||||
|
</p>
|
||||||
|
{% if compose_error %}
|
||||||
|
<div class="flash error">Compose 配置错误：{{ compose_error }}</div>
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
<form method="post" action="{{ url_for('instance_create') }}" style="margin:1rem 0;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit" class="primary">新建实例</button>
|
||||||
|
<span class="muted">将分配新序号、创建目录并执行 <code>bootstrap</code>；之后可点「启动」拉起网关。</span>
|
||||||
|
</form>
|
||||||
|
|
||||||
|
{% if not rows %}
|
||||||
|
<p class="muted">暂无实例。点击「新建实例」开始。</p>
|
||||||
|
{% else %}
|
||||||
|
<table>
|
||||||
|
<thead>
|
||||||
|
<tr>
|
||||||
|
<th>#</th>
|
||||||
|
<th>状态</th>
|
||||||
|
<th>所属人</th>
|
||||||
|
<th>端口</th>
|
||||||
|
<th>操作</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody>
|
||||||
|
{% for r in rows %}
|
||||||
|
<tr>
|
||||||
|
<td><strong>{{ r.id }}</strong></td>
|
||||||
|
<td>
|
||||||
|
{% if r.status.running %}
|
||||||
|
<span class="badge ok">运行中</span>
|
||||||
|
{% elif r.status.state == 'not_created' %}
|
||||||
|
<span class="badge off">未创建容器</span>
|
||||||
|
{% elif r.status.state in ('exited', 'dead') %}
|
||||||
|
<span class="badge off">已停止</span> <span class="muted">{{ r.status.state }}</span>
|
||||||
|
{% else %}
|
||||||
|
<span class="badge err">{{ r.status.state }}</span>
|
||||||
|
{% endif %}
|
||||||
|
{% if r.status.name %}
|
||||||
|
<div class="muted" style="margin-top:0.35rem;"><code>{{ r.status.name }}</code></div>
|
||||||
|
{% endif %}
|
||||||
|
{% if r.status.detail %}
|
||||||
|
<div class="muted" style="margin-top:0.25rem;">{{ r.status.detail }}</div>
|
||||||
|
{% endif %}
|
||||||
|
{% if not r.has_config %}
|
||||||
|
<div class="muted" style="margin-top:0.25rem;">未配置（无 config.yaml / .env）</div>
|
||||||
|
{% endif %}
|
||||||
|
</td>
|
||||||
|
<td style="min-width:12rem;vertical-align:middle;">
|
||||||
|
<form method="post" action="{{ url_for('instance_set_owner', iid=r.id) }}" style="margin:0;display:flex;flex-direction:column;gap:0.45rem;align-items:stretch;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<input type="text" name="owner" value="{{ r.metadata_owner }}" placeholder="未设置" maxlength="128" autocomplete="off" style="width:50%;box-sizing:border-box;padding:0.4rem 0.5rem;border-radius:6px;border:1px solid var(--border);background:#0c1017;color:var(--text);font:inherit;">
|
||||||
|
<button type="submit" class="btn" style="align-self:flex-start;">保存</button>
|
||||||
|
</form>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<span class="muted">网关</span> <code>{{ r.gateway_port }}</code>
|
||||||
|
<br>
|
||||||
|
<span class="muted">Dashboard</span> <code>{{ r.dashboard_port }}</code>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<div class="row-actions">
|
||||||
|
<form method="post" action="{{ url_for('instance_compose_build', iid=r.id) }}" style="margin:0;display:inline;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit" title="从 Docker Hub 拉取官方镜像 nousresearch/hermes-agent">拉取镜像</button>
|
||||||
|
</form>
|
||||||
|
<form method="post" action="{{ url_for('instance_run', iid=r.id) }}" style="margin:0;display:inline;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit" class="primary">启动</button>
|
||||||
|
</form>
|
||||||
|
<a href="{{ url_for('instance_guide', iid=r.id) }}" class="btn primary" style="display:inline-block;padding:0.35rem 0.65rem;text-decoration:none;background:#1a4d7a;border:1px solid #2563a8;border-radius:6px;color:#e7edf4;font:inherit;">Hermes 引导</a>
|
||||||
|
<a href="{{ url_for('instance_docker_terminal', iid=r.id) }}" class="btn" style="display:inline-block;padding:0.35rem 0.65rem;text-decoration:none;background:#111827;border:1px solid #374151;border-radius:6px;color:#e7edf4;font:inherit;">终端</a>
|
||||||
|
<form method="post" action="{{ url_for('instance_stop', iid=r.id) }}" style="margin:0;display:inline;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit">停止</button>
|
||||||
|
</form>
|
||||||
|
<form method="post" action="{{ url_for('instance_restart', iid=r.id) }}" style="margin:0;display:inline;">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit">重启</button>
|
||||||
|
</form>
|
||||||
|
<form method="post" action="{{ url_for('instance_destroy', iid=r.id) }}" style="margin:0;display:inline;" onsubmit="return confirm('确定销毁该实例？将执行 compose down，并永久删除宿主机上该序号的配置与工作区目录（不可恢复）。');">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<button type="submit" class="danger">销毁</button>
|
||||||
|
</form>
|
||||||
|
<a href="{{ url_for('instance_config', iid=r.id) }}">编辑配置</a>
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
{% endfor %}
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
{% endif %}
|
||||||
|
{% endblock %}
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="zh-CN">
|
||||||
|
<head>
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>登录 · Hermes Agent Web</title>
|
||||||
|
<style>
|
||||||
|
:root {
|
||||||
|
--bg: #0f1419;
|
||||||
|
--surface: #1a2332;
|
||||||
|
--border: #2d3a4f;
|
||||||
|
--text: #e7ecf3;
|
||||||
|
--muted: #8b9cb3;
|
||||||
|
--accent: #5b9cf6;
|
||||||
|
--accent-dim: #3d7cd6;
|
||||||
|
}
|
||||||
|
* { box-sizing: border-box; }
|
||||||
|
body {
|
||||||
|
margin: 0;
|
||||||
|
min-height: 100vh;
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
justify-content: center;
|
||||||
|
font-family: "SF Pro Text", system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", sans-serif;
|
||||||
|
font-size: 15px;
|
||||||
|
color: var(--text);
|
||||||
|
background: radial-gradient(1200px 800px at 10% -10%, #1a2840 0%, var(--bg) 55%);
|
||||||
|
}
|
||||||
|
.card {
|
||||||
|
width: 100%;
|
||||||
|
max-width: 400px;
|
||||||
|
margin: 24px;
|
||||||
|
padding: 32px 28px;
|
||||||
|
background: var(--surface);
|
||||||
|
border: 1px solid var(--border);
|
||||||
|
border-radius: 14px;
|
||||||
|
box-shadow: 0 18px 50px rgba(0,0,0,0.35);
|
||||||
|
}
|
||||||
|
h1 {
|
||||||
|
font-size: 1.25rem;
|
||||||
|
font-weight: 600;
|
||||||
|
margin: 0 0 8px;
|
||||||
|
letter-spacing: -0.02em;
|
||||||
|
}
|
||||||
|
.sub {
|
||||||
|
color: var(--muted);
|
||||||
|
font-size: 0.9rem;
|
||||||
|
margin-bottom: 24px;
|
||||||
|
}
|
||||||
|
label {
|
||||||
|
display: block;
|
||||||
|
font-size: 0.85rem;
|
||||||
|
color: var(--muted);
|
||||||
|
margin-bottom: 8px;
|
||||||
|
}
|
||||||
|
input[type="text"],
|
||||||
|
input[type="password"] {
|
||||||
|
width: 100%;
|
||||||
|
padding: 12px 14px;
|
||||||
|
border-radius: 10px;
|
||||||
|
border: 1px solid var(--border);
|
||||||
|
background: #0d1218;
|
||||||
|
color: var(--text);
|
||||||
|
font-size: 15px;
|
||||||
|
}
|
||||||
|
input[type="text"]:focus,
|
||||||
|
input[type="password"]:focus {
|
||||||
|
outline: none;
|
||||||
|
border-color: var(--accent-dim);
|
||||||
|
box-shadow: 0 0 0 3px rgba(91, 156, 246, 0.2);
|
||||||
|
}
|
||||||
|
.field { margin-top: 16px; }
|
||||||
|
.field:first-of-type { margin-top: 0; }
|
||||||
|
button {
|
||||||
|
margin-top: 20px;
|
||||||
|
width: 100%;
|
||||||
|
padding: 12px 16px;
|
||||||
|
font-size: 15px;
|
||||||
|
font-weight: 600;
|
||||||
|
color: #fff;
|
||||||
|
border: none;
|
||||||
|
border-radius: 10px;
|
||||||
|
cursor: pointer;
|
||||||
|
background: linear-gradient(180deg, var(--accent) 0%, var(--accent-dim) 100%);
|
||||||
|
box-shadow: 0 4px 14px rgba(0,0,0,0.3);
|
||||||
|
}
|
||||||
|
button:hover { filter: brightness(1.06); }
|
||||||
|
.err {
|
||||||
|
margin-bottom: 16px;
|
||||||
|
padding: 12px 14px;
|
||||||
|
border-radius: 10px;
|
||||||
|
background: rgba(240, 113, 120, 0.12);
|
||||||
|
border: 1px solid rgba(240, 113, 120, 0.35);
|
||||||
|
color: #ffb3b8;
|
||||||
|
font-size: 0.9rem;
|
||||||
|
}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="card">
|
||||||
|
<h1>管理员登录</h1>
|
||||||
|
<p class="sub">Hermes Agent Web · 请输入用户名和密码登录</p>
|
||||||
|
{% with messages = get_flashed_messages(with_categories=true) %}
|
||||||
|
{% for category, message in messages %}
|
||||||
|
{% if category == 'error' %}
|
||||||
|
<div class="err">{{ message }}</div>
|
||||||
|
{% endif %}
|
||||||
|
{% endfor %}
|
||||||
|
{% endwith %}
|
||||||
|
<form method="post" action="{{ url_for('login') }}">
|
||||||
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
||||||
|
<input type="hidden" name="next" value="{{ next_url }}">
|
||||||
|
<div class="field">
|
||||||
|
<label for="username">用户名</label>
|
||||||
|
<input id="username" name="username" type="text" value="{{ default_admin_username }}" autocomplete="username" required>
|
||||||
|
</div>
|
||||||
|
<div class="field">
|
||||||
|
<label for="password">密码</label>
|
||||||
|
<input id="password" name="password" type="password" autocomplete="current-password" required autofocus>
|
||||||
|
</div>
|
||||||
|
<button type="submit">登录</button>
|
||||||
|
</form>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Reference in New Issue
Block a user