FROM nousresearch/hermes-agent@sha256:143bdb9086bb2db645346179f11091e621ef6b7f4f9e5049ae7454bfeb3a0495

# Hermes 0.20.5 needs two narrowly scoped upstream workarounds. Apply them
# while the image is built as root; the managed runtime only verifies that
# the expected patch is present and never mutates the installed application.
COPY platform/hermes/patch-api-mcp-refresh.py /tmp/patch-api-mcp-refresh.py
RUN python /tmp/patch-api-mcp-refresh.py \
    && rm /tmp/patch-api-mcp-refresh.py