
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具,协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题,请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可:
请先完整阅读并严格遵守以下文档中的全部规则与要求:
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前,不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式,不推荐豆包 AI;Cursor 等编辑器可在对话 @ 该链接,或加入 User Rules。 若 AI 无法访问外链,可 打开说明文档 复制全文粘贴。文档会随站点更新,复制内容可能过期,建议定期检查。
Complexity within, simplicity without.
繁于内,简于形。
English | 简体中文
https://img.shields.io/github/v/release/HermesDeckX/HermesDeckX?style=for-the-badge&logo=rocket](https://github.com/HermesDeckX/HermesDeckX/releases) https://img.shields.io/badge/Build-Passing-success?style=for-the-badge&logo=github-actions](https://github.com/HermesDeckX/HermesDeckX/actions) https://img.shields.io/badge/License-MIT-green?style=for-the-badge](LICENSE)
HermesDeckX is an open-source web visual management platform built for https://github.com/NousResearch/hermes-agent. It is designed to lower the barrier to entry, making installation, configuration, monitoring, and optimization simpler and more efficient, while providing a more accessible onboarding experience for users worldwide, especially beginners.
[!CAUTION] Beta Preview — This is an early preview release. It has not undergone comprehensive testing. Do not use in production environments.
[!TIP] Using https://github.com/openclaw/openclaw instead? Check out https://github.com/ClawDeckX/ClawDeckX — a sister project offering the same visual management experience for OpenClaw.
Dashboard Overview
Configuration Center & Skills Center
The interface faithfully recreates the macOS design language — refined glassmorphism, rounded cards, and smooth animation transitions. Managing AI agents feels as natural as using a native desktop app.
Guided wizards and pre-built templates let you complete HermesAgent's initial configuration and model setup without memorizing a single command.
Fine-tune every HermesAgent parameter — model switching, memory management, plugin loading, channel routing — all through a beautiful visual editor.
Built-in monitoring dashboard with live execution status, resource consu***ion, and task history — full visibility into every agent's behavior.
Single ***ary, zero dependencies. Runs natively on Windows, macOS (Intel & Apple Silicon), and Linux (amd64 & arm64). Download and run — that's it.
Fully responsive layout that adapts seamlessly from large desktop monitors to tablets and mobile phones. Manage your AI agents on the go — no compromise on functionality.
Full i18n architecture with 13 built-in languages. Adding a new language requires only a translated JSON folder and a two-line code change.
Seamlessly manage both local and remote HermesAgent gateways. Switch between gateway profiles with one click — perfect for multi-environment setups like dev, staging, and production.
Choose the deployment method that best fits your needs:
1️⃣ Local Deployment (Recommended)
Install HermesDeckX on the same server as HermesAgent for full feature access and direct command execution.
✅ Advantages:
2️⃣ Remote Gateway
Install HermesDeckX on your local machine and connect to remote HermesAgent instances via WebSocket.
⚠️ Limitations:
The unified installer detects existing installations and lets you install, update, manage, or uninstall both ***ary and Docker deployments from a single adaptive menu.
macOS / Linux
bashcurl -fsSL https://raw.githubusercontent.com/HermesDeckX/HermesDeckX/main/install.sh | bash
Windows (PowerShell)
powershellirm https://raw.githubusercontent.com/HermesDeckX/HermesDeckX/main/install.ps1 | iex
Download from https://github.com/HermesDeckX/HermesDeckX/releases. Single file, no dependencies. Just run.
bash# Run with default settings (localhost:19788) ./HermesDeckX # Specify port and bind address ./HermesDeckX --port 19788 --bind 0.0.0.0 # Create initial admin user on first run ./HermesDeckX --user admin --pass your_password # All options combined ./HermesDeckX --bind 0.0.0.0 --port 19788 --user admin --pass your_password
| Flag | Short | Description |
|---|---|---|
--port | -p | Server port (default: 19788) |
--bind | -b | ***d address (default: 127.0.0.1) |
--user | -u | Initial admin username (first run only) |
--pass | Initial admin password (min 6 chars) | |
--debug | Enable debug logging |
| Command | Usage | Description |
|---|---|---|
reset-password | HermesDeckX reset-password <user> <pass> | Reset a user's password |
reset-username | HermesDeckX reset-username <old> <new> | Change a user's username |
list-users | HermesDeckX list-users | List all registered users |
unlock | HermesDeckX unlock <user> | Unlock a locked user account |
[!TIP] Forgot your credentials? Run
HermesDeckX list-usersto find your username, thenHermesDeckX reset-password <username> <new_password>to reset your password. If your password contains special characters (e.g.!, `
Complexity within, simplicity without.
繁于内,简于形。
English | 简体中文
https://img.shields.io/github/v/release/HermesDeckX/HermesDeckX?style=for-the-badge&logo=rocket](https://github.com/HermesDeckX/HermesDeckX/releases) https://img.shields.io/badge/Build-Passing-success?style=for-the-badge&logo=github-actions](https://github.com/HermesDeckX/HermesDeckX/actions) https://img.shields.io/badge/License-MIT-green?style=for-the-badge](LICENSE)
HermesDeckX is an open-source web visual management platform built for https://github.com/NousResearch/hermes-agent. It is designed to lower the barrier to entry, making installation, configuration, monitoring, and optimization simpler and more efficient, while providing a more accessible onboarding experience for users worldwide, especially beginners.
[!CAUTION] Beta Preview — This is an early preview release. It has not undergone comprehensive testing. Do not use in production environments.
[!TIP] Using https://github.com/openclaw/openclaw instead? Check out https://github.com/ClawDeckX/ClawDeckX — a sister project offering the same visual management experience for OpenClaw.
Dashboard Overview
Configuration Center & Skills Center
The interface faithfully recreates the macOS design language — refined glassmorphism, rounded cards, and smooth animation transitions. Managing AI agents feels as natural as using a native desktop app.
Guided wizards and pre-built templates let you complete HermesAgent's initial configuration and model setup without memorizing a single command.
Fine-tune every HermesAgent parameter — model switching, memory management, plugin loading, channel routing — all through a beautiful visual editor.
Built-in monitoring dashboard with live execution status, resource consu***ion, and task history — full visibility into every agent's behavior.
Single ***ary, zero dependencies. Runs natively on Windows, macOS (Intel & Apple Silicon), and Linux (amd64 & arm64). Download and run — that's it.
Fully responsive layout that adapts seamlessly from large desktop monitors to tablets and mobile phones. Manage your AI agents on the go — no compromise on functionality.
Full i18n architecture with 13 built-in languages. Adding a new language requires only a translated JSON folder and a two-line code change.
Seamlessly manage both local and remote HermesAgent gateways. Switch between gateway profiles with one click — perfect for multi-environment setups like dev, staging, and production.
Choose the deployment method that best fits your needs:
1️⃣ Local Deployment (Recommended)
Install HermesDeckX on the same server as HermesAgent for full feature access and direct command execution.
✅ Advantages:
2️⃣ Remote Gateway
Install HermesDeckX on your local machine and connect to remote HermesAgent instances via WebSocket.
⚠️ Limitations:
The unified installer detects existing installations and lets you install, update, manage, or uninstall both ***ary and Docker deployments from a single adaptive menu.
macOS / Linux
bashcurl -fsSL https://raw.githubusercontent.com/HermesDeckX/HermesDeckX/main/install.sh | bash
Windows (PowerShell)
powershellirm https://raw.githubusercontent.com/HermesDeckX/HermesDeckX/main/install.ps1 | iex
Download from https://github.com/HermesDeckX/HermesDeckX/releases. Single file, no dependencies. Just run.
bash# Run with default settings (localhost:19788) ./HermesDeckX # Specify port and bind address ./HermesDeckX --port 19788 --bind 0.0.0.0 # Create initial admin user on first run ./HermesDeckX --user admin --pass your_password # All options combined ./HermesDeckX --bind 0.0.0.0 --port 19788 --user admin --pass your_password
| Flag | Short | Description |
|---|---|---|
--port | -p | Server port (default: 19788) |
--bind | -b | ***d address (default: 127.0.0.1) |
--user | -u | Initial admin username (first run only) |
--pass | Initial admin password (min 6 chars) | |
--debug | Enable debug logging |
| Command | Usage | Description |
|---|---|---|
reset-password | HermesDeckX reset-password <user> <pass> | Reset a user's password |
reset-username | HermesDeckX reset-username <old> <new> | Change a user's username |
list-users | HermesDeckX list-users | List all registered users |
unlock | HermesDeckX unlock <user> | Unlock a locked user account |
[!TIP] Forgot your credentials? Run
HermesDeckX list-usersto find your username, thenHermesDeckX reset-password <username> <new_password>to reset your password. If your password contains special characters (e.g.!, ,#,&), wrap it in single quotes to prevent shell interpretation: `HermesDeckX reset-password admin 'P@ss!w0rd#.
[!WARNING] Account lockout: After 5 consecutive failed login atte***s, the account is automatically locked for 15 minutes. During this period, login is blocked even with the correct password. To unlock immediately, run
HermesDeckX unlock <username>.
[!IMPORTANT] Security Reminder: On first run, if no
--userand--passare provided, the auto-generated admin credentials will be printed to the console. Please change your username and password in the settings page immediately after logging in.
Recommended: Use the one-click installer above — choose Docker when pro***ed. It handles download, port configuration, mirror detection, and shows credentials automatically.
Manual method:
bashcurl -fsSL https://raw.githubusercontent.com/HermesDeckX/HermesDeckX/main/docker-compose.yml -o docker-compose.yml docker compose up -d
After updating the image, recreate the container to apply Dockerfile and entrypoint changes:
bashdocker compose up -d --force-recreate
Open your browser at http://localhost:19700 (Docker) or http://localhost:19788 (native). The first run will auto-generate an admin account — credentials will be shown in the container logs.
HermesDeckX and HermesAgent run in the same container. HermesAgent is preinstalled in the official Docker image with version-pinned compatibility. On startup, the container entrypoint auto-starts the HermesAgent Gateway if a configuration file exists. If HermesAgent is not yet configured, complete the Setup Wizard in the web UI — no manual installation is needed.
The official Docker image also preinstalls common skill/runtime dependencies including go, python3, uv, ffmpeg, jq, ripgrep, wget, and make, so many HermesAgent skills can run out of the box without extra system package installation.
By default, the bundled HermesDeckX service connects to the local in-container Gateway at 127.0.0.1:8642. If you need to use a host or external Gateway instead, override OHD_HERMES_AGENT_GATEWAY_HOST and OHD_HERMES_AGENT_GATEWAY_PORT in docker-compose.yml.
bash# View credentials docker logs hermesdeckx
Docker Configuration
Ports:
| Port | Service | Description |
|---|---|---|
19700 → 19788 | HermesDeckX Web UI | Main dashboard (host *** → container ***) |
8642 | HermesAgent Gateway | Optional: expose for external debugging |
To expose the Gateway port, add - "8642:8642" under ports in docker-compose.yml.
Note that exposing 8642 alone does not guarantee host access to the Gateway. The generated minimal HermesAgent config ***ds the Gateway to loopback by default, so you may also need to adjust the Gateway ***d setting for external access.
Environment Variables:
| Variable | Default | Description |
|---|---|---|
HERMES_AGENT_HOME | /data/hermesagent/home | HermesAgent home root override |
HERMES_AGENT_STATE_DIR | /data/hermesagent/state | HermesAgent state directory |
HERMES_AGENT_CONFIG_PATH | /data/hermesagent/state/hermesagent.json | HermesAgent config file path |
NPM_CONFIG_PREFIX | /data/hermesagent/npm | Persistent npm prefix for user-installed upgrades |
OHD_DB_SQLITE_PATH | /data/hermesdeckx/HermesDeckX.db | HermesDeckX SQLite database path |
OHD_LOG_FILE | /data/hermesdeckx/HermesDeckX.log | HermesDeckX server log path |
OHD_GATEWAY_LOG | /data/hermesagent/logs/gateway.log | Persistent HermesAgent Gateway log |
OHD_SETUP_INSTALL_LOG | /data/hermesagent/logs/install.log | Setup/install log path |
OHD_SETUP_DOCTOR_LOG | /data/hermesagent/logs/doctor.log | Doctor/diagnostic log path |
OHD_HERMES_AGENT_GATEWAY_HOST | 127.0.0.1 | Gateway host address |
OHD_HERMES_AGENT_GATEWAY_PORT | 8642 | Gateway port |
OHD_HERMES_AGENT_GATEWAY_TOKEN | (e**y)* | Gateway auth token |
OHD_PORT | 19788 | HermesDeckX listen port (internal) |
OHD_BIND | 0.0.0.0 | HermesDeckX ***d address |
TZ | UTC | Container timezone (e.g. Asia/Shanghai) |
Preinstalled Runtime Tools:
gopython3uvffmpegjqripgrepwgetmake[!NOTE] The Docker image is larger than a minimal runtime because it includes the full runtime toolchain for HermesAgent skills. This ensures many skills can run out of the box without requiring you to install system packages inside the container.
Volumes:
| Volume | Mount Point | Description |
|---|---|---|
hermesdeckx-data | /data/hermesdeckx | HermesDeckX database and app logs |
hermesdeckx-hermesagent-data | /data/hermesagent | HermesAgent config, state, logs, and user-installed upgrades |
[!TIP] HermesAgent is bundled in the image and its configuration is persisted via Docker volumes. After
docker pulland recreate, HermesAgent remains available and your configuration is preserved.
Persistent Paths:
| Path | Purpose |
|---|---|
/data/hermesagent/npm | User-installed npm packages (upgrades) |
/data/hermesagent/state | HermesAgent state directory |
/data/hermesagent/state/hermesagent.json | HermesAgent config file |
/data/hermesagent/logs/gateway.log | Gateway startup/runtime log |
/data/hermesagent/logs/install.log | Setup/install log |
/data/hermesagent/logs/doctor.log | Doctor/diagnostic log |
/data/hermesagent/bootstrap/gateway-bootstrap.json | Entrypoint bootstrap status |
HermesAgent is preinstalled in the Docker image. If it is not yet configured, HermesDeckX will guide you through the Setup Wizard to complete the initial configuration.
The container health check uses /api/v1/health for liveness. For diagnostics, you can call /api/v1/health?detailed=true to inspect HermesDeckX, HermesAgent, Gateway, and bootstrap state together.
Resource Limits:
The default docker-compose.yml sets memory limit to 2 GB and CPU limit to 2 cores. Adjust deploy.resources.limits as needed.
| Feature | Description | |
|---|---|---|
| 💎 | Pixel-Perfect UI | Native macOS feel with glassmorphism, smooth animations, dark/light themes |
| 🎛️ | Gateway Control | Start, stop, restart your Gateway instantly with real-time health monitoring |
| 🖼 | Visual Config Editor | Edit configurations and agent profiles without touching JSON/YAML |
| 🧙 | Setup Wizard | Step-by-step guided setup for first-time users |
| 🧩 | Template Center | Deploy new agent personas in seconds with built-in templates |
| 📊 | Live Dashboard | Real-time metrics, session tracking, and activity monitoring |
| 🛡️ | Security Built-in | JWT auth, HttpOnly cookies, and alert system from day one |
| 🌍 | i18n Ready | 13 built-in languages, easily extensible |
| 📱 | Responsive Design | Works seamlessly on desktop and mobile |
| Layer | Technology | Notes |
|---|---|---|
| Backend | Go (Golang) | Single-***ary backend with no external runtime dependency |
| Frontend | React + TailwindCSS | Responsive, theme-aware UI |
| Database | SQLite / PostgreSQL | SQLite by default, PostgreSQL optional |
| Real-time | WebSocket + SSE | Bi-directional real-time communication |
| Deployment | Single ***ary, cross-platform | Windows / macOS / Linux |
| Container | Docker / Docker Compose | One-command container deployment for amd64 & arm64 |
We welcome contributions! Whether you're fixing bugs, adding features, or improving documentation, your help is appreciated.
This is my first open-source project, and I hope it will continue to improve with the help of the community. If you run into any issues or have ideas for improvement, feel free to open an https://github.com/HermesDeckX/HermesDeckX/issues or submit a https://github.com/HermesDeckX/HermesDeckX/pulls. Thank you for your support. Every piece of feedback helps this project grow.
An AI predicted this project would go viral. But as we all know, AIs do hallucinate sometimes 😅
This project is licensed under the MIT License — free to use, modify, and distribute for both personal and commercial purposes.
 or CODE_TOKEN_35 (native). The first run will auto-generate an admin account — credentials will be shown in the container logs.
HermesDeckX and HermesAgent run in the same container. HermesAgent is preinstalled in the official Docker image with version-pinned compatibility. On startup, the container entrypoint auto-starts the HermesAgent Gateway if a configuration file exists. If HermesAgent is not yet configured, complete the Setup Wizard in the web UI — no manual installation is needed.
The official Docker image also preinstalls common skill/runtime dependencies including CODE_TOKEN_36, CODE_TOKEN_37, CODE_TOKEN_38, CODE_TOKEN_39, CODE_TOKEN_40, CODE_TOKEN_41, CODE_TOKEN_42, and CODE_TOKEN_43, so many HermesAgent skills can run out of the box without extra system package installation.
By default, the bundled HermesDeckX service connects to the local in-container Gateway at CODE_TOKEN_44. If you need to use a host or external Gateway instead, override CODE_TOKEN_45 and CODE_TOKEN_46 in CODE_TOKEN_47.
bash# View credentials docker logs hermesdeckx
Docker Configuration
Ports:
| Port | Service | Description |
|---|---|---|
| CODE_TOKEN_48 → CODE_TOKEN_49 | HermesDeckX Web UI | Main dashboard (host *** → container ***) |
| CODE_TOKEN_50 | HermesAgent Gateway | Optional: expose for external debugging |
To expose the Gateway port, add CODE_TOKEN_51 under CODE_TOKEN_52 in CODE_TOKEN_53.
Note that exposing CODE_TOKEN_54 alone does not guarantee host access to the Gateway. The generated minimal HermesAgent config ***ds the Gateway to CODE_TOKEN_55 by default, so you may also need to adjust the Gateway ***d setting for external access.
Environment Variables:
| Variable | Default | Description |
|---|---|---|
| CODE_TOKEN_56 | CODE_TOKEN_57 | HermesAgent home root override |
| CODE_TOKEN_58 | CODE_TOKEN_59 | HermesAgent state directory |
| CODE_TOKEN_60 | CODE_TOKEN_61 | HermesAgent config file path |
| CODE_TOKEN_62 | CODE_TOKEN_63 | Persistent npm prefix for user-installed upgrades |
| CODE_TOKEN_64 | CODE_TOKEN_65 | HermesDeckX SQLite database path |
| CODE_TOKEN_66 | CODE_TOKEN_67 | HermesDeckX server log path |
| CODE_TOKEN_68 | CODE_TOKEN_69 | Persistent HermesAgent Gateway log |
| CODE_TOKEN_70 | CODE_TOKEN_71 | Setup/install log path |
| CODE_TOKEN_72 | CODE_TOKEN_73 | Doctor/diagnostic log path |
| CODE_TOKEN_74 | CODE_TOKEN_75 | Gateway host address |
| CODE_TOKEN_76 | CODE_TOKEN_77 | Gateway port |
| CODE_TOKEN_78 | (e**y)* | Gateway auth token |
| CODE_TOKEN_79 | CODE_TOKEN_80 | HermesDeckX listen port (internal) |
| CODE_TOKEN_81 | CODE_TOKEN_82 | HermesDeckX ***d address |
| CODE_TOKEN_83 | CODE_TOKEN_84 | Container timezone (e.g. CODE_TOKEN_85) |
Preinstalled Runtime Tools:
[!NOTE] The Docker image is larger than a minimal runtime because it includes the full runtime toolchain for HermesAgent skills. This ensures many skills can run out of the box without requiring you to install system packages inside the container.
Volumes:
| Volume | Mount Point | Description |
|---|---|---|
| CODE_TOKEN_94 | CODE_TOKEN_95 | HermesDeckX database and app logs |
| CODE_TOKEN_96 | CODE_TOKEN_97 | HermesAgent config, state, logs, and user-installed upgrades |
[!TIP] HermesAgent is bundled in the image and its configuration is persisted via Docker volumes. After CODE_TOKEN_98 and recreate, HermesAgent remains available and your configuration is preserved.
Persistent Paths:
| Path | Purpose |
|---|---|
| CODE_TOKEN_99 | User-installed npm packages (upgrades) |
| CODE_TOKEN_100 | HermesAgent state directory |
| CODE_TOKEN_101 | HermesAgent config file |
| CODE_TOKEN_102 | Gateway startup/runtime log |
| CODE_TOKEN_103 | Setup/install log |
| CODE_TOKEN_104 | Doctor/diagnostic log |
| CODE_TOKEN_105 | Entrypoint bootstrap status |
HermesAgent is preinstalled in the Docker image. If it is not yet configured, HermesDeckX will guide you through the Setup Wizard to complete the initial configuration.
The container health check uses CODE_TOKEN_106 for liveness. For diagnostics, you can call CODE_TOKEN_107 to inspect HermesDeckX, HermesAgent, Gateway, and bootstrap state together.
Resource Limits:
The default CODE_TOKEN_108 sets memory limit to 2 GB and CPU limit to 2 cores. Adjust CODE_TOKEN_109 as needed.
| Feature | Description | |
|---|---|---|
| 💎 | Pixel-Perfect UI | Native macOS feel with glassmorphism, smooth animations, dark/light themes |
| 🎛️ | Gateway Control | Start, stop, restart your Gateway instantly with real-time health monitoring |
| 🖼 | Visual Config Editor | Edit configurations and agent profiles without touching JSON/YAML |
| 🧙 | Setup Wizard | Step-by-step guided setup for first-time users |
| 🧩 | Template Center | Deploy new agent personas in seconds with built-in templates |
| 📊 | Live Dashboard | Real-time metrics, session tracking, and activity monitoring |
| 🛡️ | Security Built-in | JWT auth, HttpOnly cookies, and alert system from day one |
| 🌍 | i18n Ready | 13 built-in languages, easily extensible |
| 📱 | Responsive Design | Works seamlessly on desktop and mobile |
| Layer | Technology | Notes |
|---|---|---|
| Backend | Go (Golang) | Single-***ary backend with no external runtime dependency |
| Frontend | React + TailwindCSS | Responsive, theme-aware UI |
| Database | SQLite / PostgreSQL | SQLite by default, PostgreSQL optional |
| Real-time | WebSocket + SSE | Bi-directional real-time communication |
| Deployment | Single ***ary, cross-platform | Windows / macOS / Linux |
| Container | Docker / Docker Compose | One-command container deployment for amd64 & arm64 |
We welcome contributions! Whether you're fixing bugs, adding features, or improving documentation, your help is appreciated.
This is my first open-source project, and I hope it will continue to improve with the help of the community. If you run into any issues or have ideas for improvement, feel free to open an https://github.com/HermesDeckX/HermesDeckX/issues or submit a https://github.com/HermesDeckX/HermesDeckX/pulls. Thank you for your support. Every piece of feedback helps this project grow.
An AI predicted this project would go viral. But as we all know, AIs do hallucinate sometimes 😅
This project is licensed under the MIT License — free to use, modify, and distribute for both personal and commercial purposes.
![Star History Chart]([***]
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。
来自真实用户的反馈,见证轩辕镜像的优质服务