feat: hermes embedded in hub (proxy), Team orchestration (try-merge), auto-update, robust start

- hermes-proxy (:8792): same frame-stripping proxy as openclaw, so hermes' full dashboard +
  settings embed in the hub too. Both openclaw AND hermes are now configurable inside the hub.
- Team target (try-merge): one assistant that plans, delegates subtasks to opencode/crewai/
  claude-code via CALL directives, and synthesizes one answer. New ✦ Team chat chip.
- updates.auto_update: on 'aios start', auto git-pull + reinstall changed deps when the repo
  updated (was check-only). Default on.
- aios start hardened: BrokenPipeError no longer surfaces as a non-zero exit when output is
  piped (the '255' users saw). start/stop already accept multiple services.
- hermes-proxy in config/START_ORDER/interconnect/health; /api/peers exposes hermes-embed.

Verified on Windows: hermes-proxy strips XFO and serves hermes UI; team target routes+synthesizes
(graceful no-key); aios start exits 0; both embeds exposed; dashboard has 6 chat targets.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: ZD Studios

README.md

@@ -157,12 +157,15 @@ Plus two integrations that glue it together:
 | `aios url` | Print the Control Room + service URLs. |
 
 **In the Control Room** (`http://127.0.0.1:8787/`) you can:
-- **Chat** with any agent (Brain, CrewAI, opencode, claude-code) or broadcast to **All**; agents reach each other via the hub.
-- **Open openclaw's full control plane inside the hub** — channels, **connectors**, model providers, **MCP servers**, skills, plugins, **automations/cron**, and sessions — embedded via a frame-stripping proxy (openclaw normally blocks embedding).
+- **Chat** with any agent (Brain, CrewAI, opencode, claude-code) or broadcast to **All**.
+- **✦ Team** — one assistant that orchestrates the whole team: the Brain plans, delegates subtasks to the specialist agents, and synthesizes one answer (the practical "merge").
+- **Configure openclaw AND hermes fully inside the hub** — both control-UIs are embedded via frame-stripping proxies, so you get channels, **connectors**, model providers, **MCP servers**, skills, plugins, **automations/cron**, and sessions right in the hub (they normally block embedding).
 - **Automations** — schedule prompts to run against any agent every N minutes (daily digests, checks).
 - **Settings** — edit provider/key/model, channel tokens, and `aios.config.yaml`; it re-renders into every agent, no terminal needed.
 - **Themes** — Light, Dark, Midnight, Slate, Rose.
 
+**Auto-updates:** `aios start` now auto-runs `git pull` + reinstalls changed deps when the repo has updates (`updates.auto_update: true`). Turn it off in `aios.config.yaml`.
+
 ## ⚙️ Configuration
 
 - **`.env`** — secrets only (`AIOS_LLM_PROVIDER`, `AIOS_LLM_API_KEY`, `AIOS_DEFAULT_MODEL`, optional channel tokens). Git-ignored.

aios.config.example.yaml

@@ -32,6 +32,9 @@ services:
   openclaw_proxy:          # frame-stripping proxy so openclaw's control-UI embeds in the hub
     enabled: true
     port: 8791
+  hermes_proxy:            # frame-stripping proxy so hermes' dashboard embeds in the hub
+    enabled: true
+    port: 8792
   hub:                     # ★ AIOS Hub — unified dashboard + interconnect (the Control Room)
     enabled: true
     port: 8787
@@ -46,6 +49,7 @@ openui:
 
 updates:
   check_on_start: true     # on `aios start`, check the repo for updates and notify
+  auto_update: true        # on `aios start`, auto git-pull + reinstall if the repo changed
 
 # Health-check URLs aios waits on during `start` and checks in `status`/`smoke`.
 health:
@@ -55,5 +59,6 @@ health:
   crewai: http://127.0.0.1:4788/health
   claudecode: http://127.0.0.1:8000/health
   openclaw_proxy: http://127.0.0.1:8791/
+  hermes_proxy: http://127.0.0.1:8792/
   hub: http://127.0.0.1:8787/health
   openclaw_os: http://127.0.0.1:18789/plugins/openclawos/

aios.py

@@ -427,7 +427,7 @@ def service_specs(cfg: dict) -> dict:
             "health": cfg_get(cfg, "health.claudecode", f"http://127.0.0.1:{port}/health"),
             "tool": "uv",
         }
-    # Frame-stripping reverse proxy so openclaw's control-UI embeds in the hub.
+    # Frame-stripping reverse proxies so openclaw + hermes control-UIs embed in the hub.
     if cl and cfg_get(cfg, "services.openclaw_proxy.enabled", True):
         pport = int(cfg_get(cfg, "services.openclaw_proxy.port", 8791))
         oport = int(cfg_get(cfg, "services.openclaw.port", 18789))
@@ -440,6 +440,18 @@ def service_specs(cfg: dict) -> dict:
             "tool": "python",
             "env": {"AIOS_PROXY_PORT": str(pport), "AIOS_PROXY_TARGET": f"http://127.0.0.1:{oport}"},
         }
+    if hm and cfg_get(cfg, "services.hermes_proxy.enabled", True):
+        pport = int(cfg_get(cfg, "services.hermes_proxy.port", 8792))
+        hp = int(cfg_get(cfg, "services.hermes.port", 9119))
+        specs["hermes-proxy"] = {
+            "enabled": True,
+            "cwd": ROOT,
+            "cmd": [sys.executable, str(ROOT / "aios_proxy.py")],
+            "port": pport,
+            "health": cfg_get(cfg, "health.hermes_proxy", f"http://127.0.0.1:{pport}/"),
+            "tool": "python",
+            "env": {"AIOS_PROXY_PORT": str(pport), "AIOS_PROXY_TARGET": f"http://127.0.0.1:{hp}"},
+        }
     # The AIOS Hub — unified dashboard + interconnect. Always available (stdlib).
     hport = int(cfg_get(cfg, "services.hub.port", 8787))
     specs["hub"] = {
@@ -458,8 +470,8 @@ def service_specs(cfg: dict) -> dict:
     return specs
 
 
-START_ORDER = ["opencode", "hermes", "hermes-gateway", "openclaw", "openclaw-proxy",
-               "crewai", "claudecode", "hub"]
+START_ORDER = ["opencode", "hermes", "hermes-gateway", "hermes-proxy", "openclaw",
+               "openclaw-proxy", "crewai", "claudecode", "hub"]
 
 
 def openclaw_env() -> dict:
@@ -477,6 +489,7 @@ def interconnect_env(cfg: dict) -> dict:
     crp = cfg_get(cfg, "services.crewai.port", 4788)
     ccp = cfg_get(cfg, "services.claudecode.port", 8000)
     pxp = cfg_get(cfg, "services.openclaw_proxy.port", 8791)
+    hxp = cfg_get(cfg, "services.hermes_proxy.port", 8792)
     hbp = cfg_get(cfg, "services.hub.port", 8787)
     return {
         "AIOS_ROOT": str(ROOT),
@@ -490,6 +503,7 @@ def interconnect_env(cfg: dict) -> dict:
         "AIOS_CREWAI_PORT": str(crp),
         "AIOS_CLAUDECODE_URL": f"http://127.0.0.1:{ccp}",
         "AIOS_OPENCLAWPROXY_URL": f"http://127.0.0.1:{pxp}/",
+        "AIOS_HERMESPROXY_URL": f"http://127.0.0.1:{hxp}/",
         "AIOS_OPENCLAWOS_URL": f"http://127.0.0.1:{clp}/plugins/openclawos/",
     }
 
@@ -1156,7 +1170,12 @@ def wire_openclaw_os(quiet=False):
 def cmd_start(args):
     cfg = load_config()
     secrets = load_env(ENV_PATH)
-    if cfg_get(cfg, "updates.check_on_start", True):
+    if cfg_get(cfg, "updates.auto_update", False):
+        if _git_pull() is True:  # new commits arrived → refresh deps/config
+            _install_all(cfg)
+            render_native(cfg, secrets)
+            cfg = load_config()
+    elif cfg_get(cfg, "updates.check_on_start", True):
         _check_updates_notice()
     if not secrets.get("AIOS_LLM_API_KEY") and not any(secrets.get(v) for v in PROVIDER_VAR.values()):
         warn("no model API key set — the stack runs, but agents need a key to answer "
@@ -1622,3 +1641,10 @@ def main(argv=None):
     except KeyboardInterrupt:
         say("\ninterrupted")
         sys.exit(130)
+    except BrokenPipeError:
+        # output was piped into head/Select-Object -First etc.; not an error
+        try:
+            sys.stdout.close()
+        except Exception:
+            pass
+        sys.exit(0)

aios_hub.py

@@ -91,6 +91,7 @@ def run_aios(*a, background=False):
 }
 CLAUDECODE = os.environ.get("AIOS_CLAUDECODE_URL", "http://127.0.0.1:8000").rstrip("/")
 OPENCLAW_EMBED = os.environ.get("AIOS_OPENCLAWPROXY_URL", "http://127.0.0.1:8791/")
+HERMES_EMBED = os.environ.get("AIOS_HERMESPROXY_URL", "http://127.0.0.1:8792/")
 SCHEDULES_FILE = ROOT / ".aios" / "schedules.json"
 
 
@@ -195,12 +196,62 @@ def route(target: str, message: str, history: list | None = None) -> str:
         return ask_opencode(message)
     if target in ("claudecode", "claude-code"):
         return ask_claudecode(message, history)
+    if target in ("team", "auto", "merge"):
+        return run_team(message, history)
     if target == "all":
         parts = []
         for t in ("brain", "crewai", "opencode", "claudecode"):
             parts.append(f"### {t}\n{route(t, message, history)}")
         return "\n\n".join(parts)
-    return f"⚠️ Unknown target '{target}'. Use brain | crewai | opencode | claudecode | all."
+    return f"⚠️ Unknown target '{target}'. Use brain | team | crewai | opencode | claudecode | all."
+
+
+# --------------------------------------------------------------------------- #
+# "Team" — a single agent that orchestrates the others (the practical merge)   #
+# --------------------------------------------------------------------------- #
+AGENT_TOOLS = {
+    "opencode": "writing/editing/running code, repos, technical build tasks",
+    "crewai": "multi-step research or workflows that benefit from a crew of roles",
+    "claudecode": "Claude Code — coding with the Claude Code CLI",
+}
+
+
+def run_team(message: str, history: list | None = None) -> str:
+    """One agent, backed by the whole team: the Brain plans, delegates subtasks to
+    the specialist agents, then synthesizes one answer. Delegation format the model
+    emits: lines like `CALL opencode: <subtask>` (or `ANSWER: ...` to reply directly)."""
+    roster = "\n".join(f"- {k}: {v}" for k, v in AGENT_TOOLS.items())
+    plan_sys = (
+        "You are The AI OS — one assistant backed by a team of specialist agents. "
+        "Decide how to handle the user's request. You may delegate subtasks to agents by writing "
+        "one directive per line in the form `CALL <agent>: <subtask>`. Available agents:\n" + roster +
+        "\nIf you can answer directly with no agent, write `ANSWER: <your answer>`. "
+        "Only delegate when it genuinely helps. Output directives only.")
+    plan = llm_chat((history or []) + [{"role": "user", "content": message}], system=plan_sys)
+    if plan.lstrip().upper().startswith("ANSWER:"):
+        return plan.split(":", 1)[1].strip()
+
+    calls = []
+    for line in plan.splitlines():
+        s = line.strip()
+        if s.upper().startswith("CALL "):
+            body = s[5:]
+            agent, _, sub = body.partition(":")
+            agent = agent.strip().lower()
+            if agent in AGENT_TOOLS and sub.strip():
+                calls.append((agent, sub.strip()))
+    if not calls:
+        # model didn't delegate cleanly — just answer as the Brain
+        return route("brain", message, history)
+
+    results = []
+    for agent, sub in calls[:3]:  # cap fan-out
+        results.append(f"[{agent}] {sub}\n{route(agent, sub)}")
+    synth_sys = ("You are The AI OS. Synthesize a single, clear answer to the user's request from the "
+                 "agent results below. Don't mention the internal delegation unless useful.")
+    joined = "\n\n".join(results)
+    return llm_chat([{"role": "user", "content": f"Request: {message}\n\nAgent results:\n{joined}"}],
+                    system=synth_sys)
 
 
 # --------------------------------------------------------------------------- #
@@ -306,7 +357,7 @@ def do_GET(self):
         elif self.path == "/api/services":
             self._send(200, services_status())
         elif self.path == "/api/peers":
-            self._send(200, {**PEERS, "openclaw-embed": OPENCLAW_EMBED})
+            self._send(200, {**PEERS, "openclaw-embed": OPENCLAW_EMBED, "hermes-embed": HERMES_EMBED})
         elif self.path == "/api/schedules":
             self._send(200, load_schedules())
         elif self.path == "/api/config":

docs/dashboard.html

@@ -177,11 +177,12 @@
     <div id="chat" class="view active">
       <div class="msgs" id="msgs">
         <div class="msg"><div class="av">◆</div><div><div class="who">AIOS Brain</div>
-          <div class="bubble">Welcome to your <b>AI OS workspace</b>. Ask anything, or pick a target below — <b>Brain</b> (orchestrator), <b>CrewAI</b> (crews), <b>opencode</b> (coding), or <b>All</b>. Open any agent in the sidebar to use its own panel, or head to <b>Settings</b> to configure everything.</div></div></div>
+          <div class="bubble">Welcome to your <b>AI OS workspace</b>. Ask anything, or pick a target below — <b>Brain</b> (orchestrator), <b>✦ Team</b> (one assistant that delegates to all the others), <b>CrewAI</b>, <b>opencode</b>, <b>claude-code</b>, or <b>All</b>. Open <b>hermes</b> or <b>openclaw</b> in the sidebar to configure them fully inside the hub — channels, connectors, providers, MCP, skills, cron.</div></div></div>
       </div>
       <div class="composer">
         <div class="targets" id="targets">
           <button class="chip active" data-t="brain">◆ Brain</button>
+          <button class="chip" data-t="team">✦ Team</button>
           <button class="chip" data-t="crewai">👥 CrewAI</button>
           <button class="chip" data-t="opencode">⌨️ opencode</button>
           <button class="chip" data-t="claudecode">◈ claude-code</button>
@@ -195,7 +196,7 @@
     </div>
 
     <!-- IFRAME AGENTS -->
-    <div id="hermes" class="view"><div class="vhead"><h2>☤ hermes</h2><span class="sub">autonomous agent · dashboard</span><div class="right"><button class="btn sm" onclick="act('restart','hermes')">↻ Restart</button><a class="btn sm" id="hermesNew" target="_blank">Open ↗</a></div></div><div class="embed"><iframe id="hermesFrame"></iframe></div></div>
+    <div id="hermes" class="view"><div class="vhead"><h2>☤ hermes</h2><span class="sub">autonomous agent · full dashboard &amp; settings</span><div class="right"><button class="btn sm" onclick="act('restart','hermes')">↻ Restart</button><a class="btn sm" id="hermesNew" target="_blank">Open ↗</a></div></div><div class="embed"><iframe id="hermesFrame"></iframe></div></div>
     <div id="openclawos" class="view"><div class="vhead"><h2>🪟 openclaw-os</h2><span class="sub">openclaw's generative-UI dashboard</span><div class="right"><a class="btn sm" id="osNew" target="_blank">Open ↗</a></div></div><div class="embed"><iframe id="osFrame"></iframe></div></div>
     <div id="openclaw" class="view"><div class="vhead"><h2>🦞 openclaw</h2><span class="sub">channels · connectors · providers · skills · MCP · automations · sessions</span><div class="right"><button class="btn sm" onclick="act('restart','openclaw')">↻ Restart</button><a class="btn sm" id="clawNew" target="_blank">Open ↗</a></div></div><div class="embed"><iframe id="clawFrame"></iframe></div></div>
 
@@ -266,7 +267,7 @@ <h3>🧩 Advanced — aios.config.yaml</h3>
 
 <script>
   const ROLES={opencode:"coding engine",hermes:"autonomous agent",openclaw:"channel gateway",crewai:"multi-agent crews",claudecode:"Claude Code API","openclaw-os":"dashboard",hub:"brain + interconnect"};
-  const ICON={opencode:"⌨️",hermes:"☤",openclaw:"🦞",crewai:"👥",claudecode:"◈","openclaw-os":"🪟",hub:"◆"};
+  const ICON={opencode:"⌨️",hermes:"☤",openclaw:"🦞",crewai:"👥",claudecode:"◈","openclaw-os":"🪟",hub:"◆",brain:"◆",team:"✦",all:"🌐"};
   let target="brain", peers={}, svc={}, history=[];
 
   // themes
@@ -280,7 +281,7 @@ <h3>🧩 Advanced — aios.config.yaml</h3>
     document.querySelectorAll('.view').forEach(x=>x.classList.toggle('active',x.id===v));
     document.querySelectorAll('.nav').forEach(b=>b.classList.toggle('active',b.dataset.v===v));
     document.querySelector('aside').classList.remove('open');
-    if(v==='hermes')frame('hermesFrame','hermesNew',peers.hermes);
+    if(v==='hermes')frame('hermesFrame','hermesNew',peers['hermes-embed']||peers.hermes);
     if(v==='openclawos')frame('osFrame','osNew',peers['openclaw-os']);
     if(v==='openclaw')frame('clawFrame','clawNew',peers['openclaw-embed']||peers.openclaw);
     if(v==='opencode')agentPanel('opencode','opencodeBody','The headless coding-agent engine. Chat with it from the Chat tab (target “opencode”) or call its HTTP API/SDK.',peers.opencode);