pefontana 5643c29790 feat(docker): bootstrap auth.json from env on first boot ...

Lets orchestrators (e.g. an account-management service provisioning a
Hermes VPS) seed an OAuth refresh credential non-interactively instead of
walking the user through `hermes setup` + the device-flow login dance.
Matches the existing first-boot-only pattern used for .env, config.yaml,
and SOUL.md.

If HERMES_AUTH_JSON_BOOTSTRAP is set and $HERMES_HOME/auth.json doesn't
already exist, write the env var's contents to auth.json with mode 600.
The `[ ! -f ... ]` guard is critical: it ensures that on container
restart the rotated refresh token Hermes wrote back to the persistent
volume is never clobbered by the now-stale value the orchestrator
originally seeded.

Generic name (not Nous-specific) so the feature is reusable by any future
orchestrator.

2026-05-08 06:28:44 -07:00

..

entrypoint.sh

feat(docker): bootstrap auth.json from env on first boot

2026-05-08 06:28:44 -07:00

SOUL.md

feat(docker): add Docker container for the agent (salvage #1841) (#3668)

2026-03-28 22:21:48 -07:00