From d064bfb77072bd43e578e5f6700b45a93564a239 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Tue, 19 May 2026 20:50:15 -0400
Subject: [PATCH 01/10] feat: add combined Hermes Workspace image with Swarm
 support

- Update compose submodule to feat/hermes-workspace-combined
- New ai/hermes-workspace/ Dockerfile combining our Hermes fork
  + workspace web UI + tmux (Swarm workers)
- Hermes dashboard enabled on port 9119
- Existing hermes/ Dockerfile preserved as fallback
---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index d3f2e3b..6b50616 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit d3f2e3b7b9dcb03b0bd7df0278faca6b64ea9272
+Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
-- 
2.49.1


From b85513ade2cffcff433392f0c3416966913c9b86 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Tue, 19 May 2026 21:23:13 -0400
Subject: [PATCH 02/10] =?UTF-8?q?feat(hermes):=20update=20compose=20submod?=
 =?UTF-8?q?ule=20=E2=80=94=20drop=20fork=20overlay=20for=20v0.12.0=20kanba?=
 =?UTF-8?q?n?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 6b50616..d94014f 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
+Subproject commit d94014f19a2126d997def3c5744ecf53e8348793
-- 
2.49.1


From c7a0a4dae48927122be80ca6bfb545bec2677a9f Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Tue, 19 May 2026 21:29:53 -0400
Subject: [PATCH 03/10] =?UTF-8?q?Revert=20"feat(hermes):=20update=20compos?=
 =?UTF-8?q?e=20submodule=20=E2=80=94=20drop=20fork=20overlay=20for=20v0.12?=
 =?UTF-8?q?.0=20kanban"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit b85513ade2cffcff433392f0c3416966913c9b86.
---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index d94014f..6b50616 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit d94014f19a2126d997def3c5744ecf53e8348793
+Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
-- 
2.49.1


From 1898f39d24da18c83af400da2a331d16b235e5d2 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:04:23 -0400
Subject: [PATCH 04/10] fix(compose): update compose submodule to
 feat/hermes-workspace-combined (dashboard + auth)

---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 6b50616..817f1cb 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
+Subproject commit 817f1cbcc2067e857b3002e687172756a6bfef49
-- 
2.49.1


From 8e896e4c0d60d88c8f1adf677a185b02954f2cb0 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:05:44 -0400
Subject: [PATCH 05/10] Revert "fix(compose): update compose submodule to
 feat/hermes-workspace-combined (dashboard + auth)"

This reverts commit 1898f39d24da18c83af400da2a331d16b235e5d2.
---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 817f1cb..6b50616 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 817f1cbcc2067e857b3002e687172756a6bfef49
+Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
-- 
2.49.1


From 146c164c91626403a3427be8ba482d55f8c0b3a3 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:05:58 -0400
Subject: [PATCH 06/10] =?UTF-8?q?fix:=20update=20compose=20submodule=20?=
 =?UTF-8?q?=E2=80=94=20hermes-workspace=20HOST=20fix=20and=20entrypoint=20?=
 =?UTF-8?q?improvements?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 6b50616..5f25c87 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 6b506163e980842fc24947d51928a212eb2f008a
+Subproject commit 5f25c87775aa11635e49162a036d2c10352c4c4e
-- 
2.49.1


From 68b7c40a9e3203412627d7a14023300939b9c042 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:06:32 -0400
Subject: [PATCH 07/10] fix(compose): update submodule to fix/hermes-build
 (dashboard + auth)

---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 5f25c87..ebad994 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 5f25c87775aa11635e49162a036d2c10352c4c4e
+Subproject commit ebad994d6096a720eadfe9b967b21c62644d4b16
-- 
2.49.1


From a322ed08844b24f3a23bdce20da5eea94dfaaf9c Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:06:56 -0400
Subject: [PATCH 08/10] feat(secrets): add HERMES_WORKSPACE_PASSWORD to
 containers.env

---
 lib/keys.nix               |   4 ++++
 secrets/containers.env.age | Bin 2246 -> 1941 bytes
 secrets/secrets.nix        |   1 +
 3 files changed, 5 insertions(+)

diff --git a/lib/keys.nix b/lib/keys.nix
index ab287d6..c2bb907 100644
--- a/lib/keys.nix
+++ b/lib/keys.nix
@@ -9,6 +9,10 @@
     ai-worker = {
       main = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXeGtPPcsP2IYRQNvII41NVWhJsarEk8c4qxs/a5sXf";
     };
+
+    hermes_agent = {
+      age = "age178ypgaxn3fldh2aeqz37ncpk7jrplaxacrca8kkcycre3ahjef4s2dp3rp";
+    };
   };
 
   hosts = {
diff --git a/secrets/containers.env.age b/secrets/containers.env.age
index 90b91ed03200b7f5398899c537c133dbc23b0b20..c7162d468ddb387bd1e7c0ae1ddc48de856f0d3c 100644
GIT binary patch
literal 1941
zcmV;G2Wt3XXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LM`%q%I6)v<
zadKl-aYcG}VKzi>Q%F~1X-z_HSy@MUF?Uj0HdZTQQ#evJD>h6`Yi|lUW=AtuVnS6b
zZgFT~Z$Wu#Q#ffgX-IZacuZ4jW@cwFFfdnDD@RK!cw-7JJ|J^*Xf0)AGBq_ZIUr?1
zHAPN$AT?_>XLVL+G+0teQ8QLia&u%<Z*)R8K~YF~V=r?}OG7b3N@8SCZ!uAG3Nto(
zW;t#%X;M^Tb2fQ&ZBAlWL`*nIF-ul=V?{=GHEmHyXhAnnLv~9v3N1b$STZ#=F*zVo
zH8L`AL}EpBP(gJ$NO?1LOm{XjQCew9Pb*_bdRJ$7XJKnaGczl7F*FKoc}rwDF*ZhI
zOKf;&ZD~kIH*rEwG&Ds|IcPLCbW(ataY#8ZL_;r7W@8F1J|I{!H8n9gAV*A4Q*1U*
zWKwKVa5gzcd3tO#Qe;y~OHfWtMP)BCPEk}!MS5y=FLr7;3PW)#Xl!#hb23m>LTy7>
zI50s&Gh}KpSwt^pHf2gnP<CThRYh@TX?Q_23N0-yAU8=;YfNuJG-*mzOF~vdH%>NX
zcWO;}P%=$rOgAq!ZANrPPgzHLN={m53S%&R>P-s(4Ae56!;3#Ke`|C{J<OGe+O?0l
z^XrT@x}Lt6udXlynmW)>BCLSacdK}(`nPLNX}!R|j(s<eYG};1IpZQc1*FM<TcNp=
z@3a9VOAPwvaa>083mI#dBc+ID&K<TiggP^C&T}+m2#6JEA8m{`uNDt!QYb|y$0gTP
z8M{q88$B)6Nae_tgwO1+O=w$xYiVD@Y%VWG#}w(2tTA1FldZLMsj&3kr6Oxa{y==6
z&I6qlZEQwfR@R4@aY;T`4<bJMZ@4~I4vTbZl#cXEi{Xyd;j|fhqV9w1EeAr5`S^&_
zS7^zfqt(%S%DsSx9-(_fK$XkS6)Q;+Gwg|Q6#dQz>Jfd}^SGOezd&sjHmpA0xSVX1
zi_mw30G*Kt8_Kp#v~`ZAHaE>Rq1I$o*9iql^lZb|f2Ai)$zHcg<=e{)<{}Qdaz)wR
zeE3?uCT%17b;yr4*Eq7i+u8ILYDQb25Z`)7y3-b6>V-x1YxU;j-s@LD-S7_7+4bON
zipEOsQ-z)Zh>kAoqn9<pfPNLJ3hPHWHws5+I_6m<r@o5sXHwn=80+@e>v0_p-=*gj
zJRD@aL_1>exn=+{%9Vdy$-zrc{oUMKn20}P1G7HoHs2{6Y~wE{pp>hF08x#o0BQ^w
z{~}iLgD=0p{&~o_z=;&@Q2|KA)_%`r+BtVX^WWlomj4oOk94XdyShwTUK5(d$b{~*
z2Dk8e%cPpb(;MbYJ<B)B#7qwt63gCUi&uuNP0AmB*bP`njRAw}4Sl1tY*D?usMTri
zC8rN0KFps|Mi{<>sS7h^ttA{3L=yl5BL;vnUkSK=Y4kkl5*UL*Et%~nEe!b%=iQkT
zRnJ*QHk{2If;{gq%Tf9Ug|k{fRMB^9<Z{8?)!#$g?U)5~xaVPo{V>dXi1x6=!;xlH
zFOc`DZ!Le$IdOUf5mDymb{6p`%EL!jXHlI$H&iVDa%e==k9_7?G4IW4;B|5m9>gl7
z-7*1s94?Ib7>_A#0j!}{x<&pVuO02r&-sUlbCphMd-j!60mTb=j}ujJ^Gz`TT5bp7
zG&3muoq+6w)Ek<ftXYe7XtQ+jqcDhdZT)NKrS}h5(%)Vf^+P-8F9Dg<<zO@X+Sg@k
z!!!cDuyFdF=p3|7VH6gYl28{yibvTaS3w~w>Ly0#3UpUKJbuTBFtdzrrwKN4zmO~9
zx%pqdWcbW-c~*k@e$iY^x?s&;PdVxpMLos<>caQRr<B9f<(w%4yV-178Hj}0$TwMJ
zG~TCVqofaUm01*r+F`d7WnT;jBBZEIVG}6V?rJ<I3dR$F3NZ1>Un6>*5p<)ZcANm*
z5Zbi7u1Rp~M@R6leP&;$$s9sD?5HP7ct7cz0zG(#?Ae0sP#Y?5kqg&<3V!>!jCh*U
zp~151`|uxd&P9+?qIaV7`p;j<;zlvF?{1Qqx$o2?u&IGOgdWIOqV~h9r5fa(bV{CS
zHHvbF^Nf@bi{wsj@xhR*UqVo84OD$hUYUFTm)5InT8p*!HY{&Po-34bgPW&UDHCTq
zj=B)IWrL~46v`CA4#P^2W<29e+qS23#pp67<Q>+r>E^UD)FTHyd-li7GOczbB^lG2
zs8i|afXvD`xQV^>#wWPK!9WRrYQ~reqcODgy01=y%RPgsV6*y0`G^r+Kow;@)&1fl
zM@deyq)hxWVLYsJ1i#PMf#TIQpFe{nzjL4fT<o>yYnxB!H~DRwo_WYl<=u$^dw(Ak
zTx==NN?D0zra#a!vW`TnY83)SlkKMzKNJB=vl{oS;XoA7TExc9kju>uGCocdM0V_X
zA`2ls8=n`BjDn@Qgb~rg(5R1AIEr1ICo8bf*41KHp!$^uL=HWCjP9ZCU(VoVyuEF(
bJrRm1ot{|>3jlWX5#5XMiy7?e3auWJyYOl*

literal 2246
zcmZ{mx6XtLvV?P<;^gQE4@0m4-ZOZY;k{>YPk;Zr`F2`Tsnyl`RR8|_H>@Bj=0A)i
z{3Dp06I-6Z|0628@c-JsKpYl>9tOV{Q;A%5mJG#z8KzD;7T;V8gNkgvDTfRRuOOx;
z5Q<RDo^Ru}%Z8?~96&CKW*M+-$~$X@ExIctk{!ZVh6Q6Vv2()hmoN5jHnF-tsj%&t
z8#g#>(D%6G2VbB-X)W#wBKGquo%%EN#4(Wl+YT1qLz6g^o%C<J$ny`|@L^5&@LG%5
z!^ZqQYLN-Z$Dqkkzc#1qjyX089tP4ldsO6uHkldwdP(5R4(dmL=7M;|aKaXXx~Jl@
zXR-<dc|T}5AIP~-goaR9Zof<>EVho1V@^mkekdA6=U}1eIIhU*t~89?U|_jts^MT7
zfG6C2As3M^tBTv3N-7|p=ih#gn10v?ND9+(Df(CzB$pi-n(o4fA~oMU5<OoSTp)c_
z)trQ_^cy4eR5lF~$@Nsr@x|5dgV==;%@IsL2$sa<YwZJm=1DBOZDwc6DF2Qag8PgQ
z-+jejRhzI1&hL>EYovms&wG#!?&laoaOZ~ne2{!DL<~ojx>KxEUu^gSf{<#q8pRxV
zD~cxN47DnH3cKQhrx5=A#a&*bl)MdAQ&T_U;v0J_V7&;05{agI0h0END2tLWWlFK=
z!-1X-YUl|u5^6&4hs+DDa?blPG&7T%_yV~~7N)RnK8Ff|cmqgud74xEGuNXeb31iP
zs{8VlWrn!;iy=3ovUD3%$e>%sE@Gy5bmsLDoncG4^eY~?4!OG@n)efe2<lJ9ehgGq
zecI?}$HU934GLN>IYbJ}VAS@J#;$$b=95D3mh#aKxa5QHyHyZTV|;&hj(qmcOc}Yo
z-cLu)#O<RxWaFSs!PKL;p+q@S5;xd~<~C%TE?{r{6$*aSdZAa3V4w=&=Z~J&gBXqe
zU{mf`K)Vf<-_~6$q5I6kHJdwvMNJGDY#e~!xH&wm2q<9Z%|r$&k3D!=A2Q%UGE`5-
z|Db`$EF!X#uY`&|0x|hF2r2@f(g|9D3fyW}tQc3ex!BDHUzH!>xO8(5h0&A7uP`Cm
z&)0ZJhTrtC>?w!0c<F{44Pdt`0P<l8@Upf9W_lA@x_q~^@A=WvxkmYSRk}6<-PH9`
z=MH6C$mrjD{zb*)u|mk-MF8ragK=0kF^p9X#>-|LY+edh#*f)TLBxYK`Md@xcSxh^
zpw&*ER@Ovc+K#9sopA&8_O|88qSqf(YP~kG)hPauuq;EWQ>{+HsM<w|?|B-nybDNQ
zEw=|q<)s8BhJ14X&miiA8w$f3bsA{1(an^g+LM7jpM<QSNX$n%Nx1}p|NV|L_b7JV
zn~fnJr{MQW1C||7!C^Yx6Z{IwMd=ayUQ77hYcFXgP|XLqLr*+2)mQD+DRI0pKP9U_
zUPmE72M0>xyn{xXRQ^>c<hWCL_<*;I3_m(}Iosdvi1ebza{^rJl<y1IFsXjodSo5;
zRPz*|j3nbo;$GT)fa*tgvbqoI6gz0VumZ4Hl70G=D~Y3&@;I5c4{BMZM_oHK1m&ax
z5GGL#aOGgNY8xylJ6XH1G8*qiR)p%4;pRlTUUDndw$2iCb0mjssR-X1)%Z8r0yyvU
zt~EEtr}`@UWm}a1iZWI{b@l!reImfR*=yMonp!-^+Bly(We&2Jl~?(LSOgeY!MGb9
zSp1?yzi4;DE7pa!YTkSQomX&I*RfAr>X4Dvc6%&vp~M&QH<XK^EY};jc&oXEa<9ao
z(e7r`Vp`cgJq?K>tJyw;NnMD8uEEp<Ga#|>=i6BHsr`a{FIy@ERQ_VF`7ooD8%dMR
z`}RpxfxzY;3D$XU#Z*A&-)j2F6rRw})r&8S$sv{u^OQ=D0nE~<OL?BBr+7R~P3#b}
z<1HC|7)M$7_9_Y5nlQ<XjQn`qRoS);ooj!N>a7yFwggD&>lLLDQd0SK3)R25xvHCC
zUtDNfVdPs=RG>gv8OED(>A%eFQ!+`1<GSd#{$@P@iIQN{VlON!)jr%AyB6~iadJ_$
zb22Q<{oqW<S!3?ya#`cUC0XZAW=DBPtW?Y|F!kKCQdc1p=2VYV=V!y`qaUfBSd88O
z)@W(iz?(La{#MzP;jNRP-vz&yo8F}7yn*pc`a+|V0n(yzBAUHv)KK_IXQTCNwpg?N
zPVa2+XdO<?Vi0{A)Uz<22j2;Vv?u_(JK+SW4F){+ADadHd+kOwl?ef|wEds|0RQbF
Kg315Sit>Nzaop<w

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index d5c44d6..d140213 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -4,6 +4,7 @@ let
     keys.users.gortium.main
     keys.hosts.lazyworkhorse.main
     keys.hosts.lazyworkhorse.bootstrap
+    keys.users.hermes_agent.age
   ];
 in
 {
-- 
2.49.1


From 8025607a53e8c2df5a91fa33828500ae8e3f1ea0 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:08:08 -0400
Subject: [PATCH 09/10] =?UTF-8?q?fix:=20update=20compose=20submodule=20?=
 =?UTF-8?q?=E2=80=94=20hermes-workspace=20HOST=20fix?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index ebad994..62fa78b 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit ebad994d6096a720eadfe9b967b21c62644d4b16
+Subproject commit 62fa78b97faf9c4c831766eabd25654db01070f2
-- 
2.49.1


From ff129019e0e6464b52da1cbdc41115018de7a9b3 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@lazyworkhorse.net>
Date: Wed, 20 May 2026 14:10:11 -0400
Subject: [PATCH 10/10] =?UTF-8?q?Revert=20"fix:=20update=20compose=20submo?=
 =?UTF-8?q?dule=20=E2=80=94=20hermes-workspace=20HOST=20fix"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit 8025607a53e8c2df5a91fa33828500ae8e3f1ea0.
---
 assets/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/compose b/assets/compose
index 62fa78b..ebad994 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit 62fa78b97faf9c4c831766eabd25654db01070f2
+Subproject commit ebad994d6096a720eadfe9b967b21c62644d4b16
-- 
2.49.1