feat: nix flake — uv2nix build, NixOS module, persistent container mode by alt-glitch · Pull Request #20 · NousResearch/hermes-agent

alt-glitch · 2026-02-08T18:24:02Z

Summary

nix build produces a fully self-contained package — all Python deps are Nix derivations via uv2nix, no runtime pip
nix develop provides a dev shell with Python 3.11, uv, node, ripgrep, git, ffmpeg
NixOS module with two deployment modes: native systemd service (hardened) or persistent OCI container (Ubuntu 24.04 base, writable layer survives restarts and rebuilds)
Managed mode guards block hermes setup, config set, gateway install/uninstall when running under the NixOS module
CI workflow validates Nix build on linux x86 with every PR (macOS skipped — onnxruntime wheel missing on aarch64-darwin)

What changed

flake.nix — flake entrypoint wiring all Nix outputs (package, dev shell, NixOS module, checks)
nix/python.nix — uv2nix Python 3.11 venv derivation
nix/packages.nix — wraps uv2nix venv entry points (hermes, hermes-agent, hermes-acp) with runtime PATH (git, node, ripgrep, ffmpeg, openssh). Bundles skills/ into share/hermes-agent/skills (filtered to exclude index-cache/) and sets HERMES_BUNDLED_SKILLS env var so skills_sync finds them in the Nix store
nix/nixosModules.nix — NixOS module with full declarative config surface:
- Mode A (native): systemd service with ProtectSystem=strict, NoNewPrivileges, secret env files
- Mode B (container): persistent Ubuntu container with /nix/store bind-mounted read-only. Runs as --user UID:GID matching configured service user. Hermes runs via a current-package symlink updated on rebuild. Identity hash triggers container recreation only on image/env/volume changes — apt/pip/npm installs persist across restarts, rebuilds, reboots, and GC
- Declarative settings (deep-merged via nix/configMergeScript.nix, rendered as config.yaml), documents, mcpServers, sops-nix/agenix-compatible environmentFiles, OAuth authFile seeding
nix/config-keys.json — exhaustive list of valid config keys for build-time validation of declarative settings
nix/checks.nix — build-time verification: binary existence, entry point sync with pyproject.toml, CLI subcommands, HERMES_MANAGED guard coverage, bundled skills presence
nix/devShell.nix — stamp-file-optimized dev shell
.github/workflows/nix.yml — CI workflow running nix flake check + nix build on linux x86 with DeterminateSystems magic-nix-cache
tools/skills_sync.py — _get_bundled_dir() checks HERMES_BUNDLED_SKILLS env var before falling back to relative path
tests/tools/test_skills_sync.py — tests for HERMES_BUNDLED_SKILLS env var override
hermes_cli/config.py — is_managed() + managed_error() guards on config mutation paths; fix Path type mismatch in os.getenv default
hermes_cli/gateway.py — guards on gateway setup, install, uninstall
hermes_cli/setup.py — guard on setup wizard
website/docs/getting-started/nix-setup.md — full setup guide: options reference, container architecture, secrets management, persistence model, troubleshooting

Container persistence model

Event	Container recreated?	State (`/data`)	Writable layer (`apt`/`pip`/`npm`)
`systemctl restart`	No	Persists	Persists
`nixos-rebuild switch`	No (symlink update)	Persists	Persists
Host reboot	No	Persists	Persists
`nix-collect-garbage`	No (GC root)	Persists	Persists
Image/env/volume change	Yes	Persists	Lost

Test plan

0xrsydn · 2026-03-15T23:25:57Z

hi, is there any plan to do native nix supports sooner? I like to try this on my own nixos server, thank u 🙏

alt-glitch · 2026-03-16T05:56:46Z

hey @0xrsydn !
thanks for showing interest. i'll try to push some updates here and get this out soon.
@arilotter will review but would appreciate your feedback / review as well as a fellow nixos user :)

0xrsydn · 2026-03-16T11:38:40Z

hey @0xrsydn !

thanks for showing interest. i'll try to push some updates here and get this out soon.

@arilotter will review but would appreciate your feedback / review as well as a fellow nixos user :)

actually i have build my own hermes flake for now, but id love to try the native support and give some feedbacks if needed later once its updated, thank you very much 🙏

0xrsydn · 2026-03-17T15:30:53Z

btw i also have built my own package here and have been working great, deployed on my nixos server and connected to telegram. would love for more suggestion or maybe easier and flexible approach to use hermes agent flake later on

sylvesterroos · 2026-03-20T18:33:45Z

Does $HERMES_HOME need to be set using this module? I'm trying it out, and the first run's setup creates a .hermes dir in my home when I would assume that the setup either needs to get skipped or it needs to place the settings in /var/lib/hermes/.hermes

and it might be worth investigating if the container can be recreated automatically if the eg environment file changes. I kept trying to figure out why my new env vars werent being applied but apparently i had to manually recreate the container (by performing the steps in the markdown file)

alt-glitch · 2026-03-23T06:55:38Z

hey @sylvesterroos!
thanks for the comments

The module now sets environment.variables.HERMES_HOME system-wide when addToSystemPackages = true, so running hermes in your shell shares state with the gateway service instead of creating a separate ~/.hermes.

As for the secrets, they are no long injected into the container but read from $HERMES_HOME/.env. So changing env vars requires a systemctl restart hermes-agent to pick up the new values. no container recreation needed

lattwood · 2026-03-23T19:24:17Z

@alt-glitch is what's remaining the stuff on your test plan?

edit: ie, does helping with testing get this closer to merged

alt-glitch · 2026-03-23T21:19:32Z

@lattwood -- yes!
if you can run this branch in the config you want (container or local), and gimme a heads up on any bugs, that'd be really helpful.

i'm pushing a couple more fixes right now.

github-actions · 2026-03-24T16:52:35Z

⚠️ Supply Chain Risk Detected

This PR contains patterns commonly associated with supply chain attacks. This does not mean the PR is malicious — but these patterns require careful human review before merging.

⚠️ WARNING: Install hook files modified

These files can execute code during package installation or interpreter startup.

Files:

hermes_cli/setup.py

Automated scan triggered by supply-chain-audit. If this is a false positive, a maintainer can approve after manual review.

…lish Sprint 16: Session sidebar visual polish — overlay actions, SVG icons, project borders

ahmedaltewaj · 2026-04-06T16:23:03Z

QA Evidence — Quick Scan 2026-04-06

Confirmed 401 errors on /app/knowledge-graph:

Failed to load resource: the server responded with a status of 401 ()

Also Mixed Content error on same page:

Mixed Content: The page at 'https://leksikon.ai/app/knowledge-graph' was loaded over HTTPS, 
but requested an insecure resource 'http://leksikon.ai/api/v1/advisories/?page=1&limit=50'.

Also observed 429 on /app/advisories (rate limit).

Mode: quick_scan
QA agent run: 2026-04-06
EOF; __hermes_rc=$?; printf 'HERMES_FENCE_a9f7b3'; exit $__hermes_rc

Co-authored-by: Aurora <aurora@MacBookPro.lan>

Covers the untested foundation layer of the auth module: - has_usable_secret(), _token_fingerprint() (input validation) - _parse_iso_timestamp(), _is_expiring(), _coerce_ttl_seconds() (time helpers) - _optional_base_url(), _decode_jwt_claims() (URL/JWT parsing) - AuthError, format_auth_error() (error types and formatting) - _load_auth_store(), _save_auth_store() (persistence layer) - _load_provider_state(), _save_provider_state() (state management) - read_credential_pool(), write_credential_pool() (credential pools) - suppress_credential_source(), is_source_suppressed() (source suppression) - get_active_provider(), get_provider_auth_state() (status queries) - resolve_provider() with alias resolution and auto-detection - _resolve_kimi_base_url() (Kimi URL routing) - clear_provider_auth(), deactivate_provider() (auth lifecycle) - ProviderConfig, PROVIDER_REGISTRY, ZAI_ENDPOINTS (constants) - detect_zai_endpoint() with mocked HTTP - get_auth_status(), get_api_key_provider_status() (status dispatchers) - resolve_api_key_provider_credentials() (credential resolution) - get_external_process_provider_status() (subprocess providers) - _codex_access_token_is_expiring() (JWT expiration) - _oauth_trace_enabled(), _oauth_trace() (tracing) - _auth_store_lock() (cross-process locking) This addresses the highest-priority coverage gap: auth.py had 3177 lines and zero dedicated tests for its core functions (backlog item NousResearch#20). Self-improve: automated improvement

## Summary This extracts the AI-review work out of NousResearch#18 into its own PR. Included here: - hardened PR comment upsert + inline review posting - structured-output parsing and improved diff-grounding - bounded local verification and parallel per-issue verification - tokenizer-backed / token-aware context packing - trace output and cumulative cache-aware usage accounting - focused regression coverage in `tests/gitea/test_ai_review.py` Not included here: - platform context seeding/history-fetch gateway changes from NousResearch#18 ## Validation - `source venv/bin/activate && python -m pytest tests/gitea/test_ai_review.py -q` Co-authored-by: Michel Belleau <mbelleau@Michels-MacBook-Pro.local> Reviewed-on: http://10.15.0.6:3300/angelos/hermes-agent/pulls/20

…de (NousResearch#20) * feat: nix flake, uv2nix build, dev shell and home manager * fixed nix run, updated docs for setup * feat(nix): NixOS module with persistent container mode, managed guards, checks - Replace homeModules.nix with nixosModules.nix (two deployment modes) - Mode A (native): hardened systemd service with ProtectSystem=strict - Mode B (container): persistent Ubuntu container with /nix/store bind-mount, identity-hash-based recreation, GC root protection, symlink-based updates - Add HERMES_MANAGED guards blocking CLI config mutation (config set, setup, gateway install/uninstall) when running under NixOS module - Add nix/checks.nix with build-time verification (binary, CLI, managed guard) - Remove container.nix (no Nix-built OCI image; pulls ubuntu:24.04 at runtime) - Simplify packages.nix (drop fetchFromGitHub submodules, PYTHONPATH wrappers) - Rewrite docs/nixos-setup.md with full options reference, container architecture, secrets management, and troubleshooting guide Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Update config.py * feat(nix): add CI workflow and enhanced build checks - GitHub Actions workflow for nix flake check + build on linux/macOS - Entry point sync check to catch pyproject.toml drift - Expanded managed-guard check to cover config edit - Wrap hermes-acp binary in Nix package - Fix Path type mismatch in is_managed() * Update MCP server package name; bundled skills support * fix reading .env. instead have container user a common mounted .env file * feat(nix): container entrypoint with privilege drop and sudo provisioning Container was running as non-root via --user, which broke apt/pip installs and caused crashes when $HOME didn't exist. Replace --user with a Nix-built entrypoint script that provisions the hermes user, sudo (NOPASSWD), and /home/hermes inside the container on first boot, then drops privileges via setpriv. Writable layer persists so setup only runs once. Also expands MCP server options to support HTTP transport and sampling. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix group and user creation in container mode * feat(nix): persistent /home/hermes and MESSAGING_CWD in container mode Container mode now bind-mounts ${stateDir}/home to /home/hermes so the agent's home directory survives container recreation. Previously it lived in the writable layer and was lost on image/volume/options changes. Also passes MESSAGING_CWD to the container so the agent finds its workspace and documents, matching native mode behavior. Other changes: - Extract containerDataDir/containerHomeDir bindings (no more magic strings) - Fix entrypoint chown to run unconditionally (volume mounts always exist) - Add schema field to container identity hash for auto-recreation - Add idempotency test (Scenario G) to config-roundtrip check * docs: add Nix & NixOS setup guide to docs site Add comprehensive Nix documentation to the Docusaurus site at website/docs/getting-started/nix-setup.md, covering nix run/profile install, NixOS module (native + container modes), declarative settings, secrets management, MCP servers, managed mode, container architecture, dev shell, flake checks, and full options reference. - Register nix-setup in sidebar after installation page - Add Nix callout tip to installation.md linking to new guide - Add canonical version pointer in docs/nixos-setup.md * docs: remove docs/nixos-setup.md, consolidate into website docs Backfill missing details (restart/restartSec in full example, gateway.pid, 0750 permissions, docker inspect commands) into the canonical website/docs/getting-started/nix-setup.md and delete the old standalone file. * fix(nix): add compression.protect_last_n and target_ratio to config-keys.json New keys were added to DEFAULT_CONFIG on main, causing the config-drift check to fail in CI. * fix(nix): skip checks on aarch64-darwin (onnxruntime wheel missing) The full Python venv includes onnxruntime (via faster-whisper/STT) which lacks a compatible uv2nix wheel on aarch64-darwin. Gate all checks behind stdenv.hostPlatform.isLinux. The package and devShell still evaluate on macOS. * fix(nix): skip flake check and build on macOS CI onnxruntime (transitive dep via faster-whisper) lacks a compatible uv2nix wheel on aarch64-darwin. Run full checks and build on Linux only; macOS CI verifies the flake evaluates without building. * fix(nix): preserve container writable layer across nixos-rebuild The container identity hash included the entrypoint's Nix store path, which changes on every nixpkgs update (due to runtimeShell/stdenv input-addressing). This caused false-positive identity mismatches, triggering container recreation and losing the persistent writable layer. - Use stable symlink (current-entrypoint) like current-package already does - Remove entrypoint from identity hash (only image/volumes/options matter) - Add GC root for entrypoint so nix-collect-garbage doesn't break it - Remove global HERMES_HOME env var from addToSystemPackages (conflicted with interactive CLI use, service already sets its own) --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…de (NousResearch#20) * feat: nix flake, uv2nix build, dev shell and home manager * fixed nix run, updated docs for setup * feat(nix): NixOS module with persistent container mode, managed guards, checks - Replace homeModules.nix with nixosModules.nix (two deployment modes) - Mode A (native): hardened systemd service with ProtectSystem=strict - Mode B (container): persistent Ubuntu container with /nix/store bind-mount, identity-hash-based recreation, GC root protection, symlink-based updates - Add HERMES_MANAGED guards blocking CLI config mutation (config set, setup, gateway install/uninstall) when running under NixOS module - Add nix/checks.nix with build-time verification (binary, CLI, managed guard) - Remove container.nix (no Nix-built OCI image; pulls ubuntu:24.04 at runtime) - Simplify packages.nix (drop fetchFromGitHub submodules, PYTHONPATH wrappers) - Rewrite docs/nixos-setup.md with full options reference, container architecture, secrets management, and troubleshooting guide * Update config.py * feat(nix): add CI workflow and enhanced build checks - GitHub Actions workflow for nix flake check + build on linux/macOS - Entry point sync check to catch pyproject.toml drift - Expanded managed-guard check to cover config edit - Wrap hermes-acp binary in Nix package - Fix Path type mismatch in is_managed() * Update MCP server package name; bundled skills support * fix reading .env. instead have container user a common mounted .env file * feat(nix): container entrypoint with privilege drop and sudo provisioning Container was running as non-root via --user, which broke apt/pip installs and caused crashes when $HOME didn't exist. Replace --user with a Nix-built entrypoint script that provisions the hermes user, sudo (NOPASSWD), and /home/hermes inside the container on first boot, then drops privileges via setpriv. Writable layer persists so setup only runs once. Also expands MCP server options to support HTTP transport and sampling. * fix group and user creation in container mode * feat(nix): persistent /home/hermes and MESSAGING_CWD in container mode Container mode now bind-mounts ${stateDir}/home to /home/hermes so the agent's home directory survives container recreation. Previously it lived in the writable layer and was lost on image/volume/options changes. Also passes MESSAGING_CWD to the container so the agent finds its workspace and documents, matching native mode behavior. Other changes: - Extract containerDataDir/containerHomeDir bindings (no more magic strings) - Fix entrypoint chown to run unconditionally (volume mounts always exist) - Add schema field to container identity hash for auto-recreation - Add idempotency test (Scenario G) to config-roundtrip check * docs: add Nix & NixOS setup guide to docs site Add comprehensive Nix documentation to the Docusaurus site at website/docs/getting-started/nix-setup.md, covering nix run/profile install, NixOS module (native + container modes), declarative settings, secrets management, MCP servers, managed mode, container architecture, dev shell, flake checks, and full options reference. - Register nix-setup in sidebar after installation page - Add Nix callout tip to installation.md linking to new guide - Add canonical version pointer in docs/nixos-setup.md * docs: remove docs/nixos-setup.md, consolidate into website docs Backfill missing details (restart/restartSec in full example, gateway.pid, 0750 permissions, docker inspect commands) into the canonical website/docs/getting-started/nix-setup.md and delete the old standalone file. * fix(nix): add compression.protect_last_n and target_ratio to config-keys.json New keys were added to DEFAULT_CONFIG on main, causing the config-drift check to fail in CI. * fix(nix): skip checks on aarch64-darwin (onnxruntime wheel missing) The full Python venv includes onnxruntime (via faster-whisper/STT) which lacks a compatible uv2nix wheel on aarch64-darwin. Gate all checks behind stdenv.hostPlatform.isLinux. The package and devShell still evaluate on macOS. * fix(nix): skip flake check and build on macOS CI onnxruntime (transitive dep via faster-whisper) lacks a compatible uv2nix wheel on aarch64-darwin. Run full checks and build on Linux only; macOS CI verifies the flake evaluates without building. * fix(nix): preserve container writable layer across nixos-rebuild The container identity hash included the entrypoint's Nix store path, which changes on every nixpkgs update (due to runtimeShell/stdenv input-addressing). This caused false-positive identity mismatches, triggering container recreation and losing the persistent writable layer. - Use stable symlink (current-entrypoint) like current-package already does - Remove entrypoint from identity hash (only image/volumes/options matter) - Add GC root for entrypoint so nix-collect-garbage doesn't break it - Remove global HERMES_HOME env var from addToSystemPackages (conflicted with interactive CLI use, service already sets its own) ---------

- Priority: p0 (critical) through p3 (low), default p2 - Search: filter by query substring, status, priority - Update: edit content/status/priority of any task - Schema extended with new params and enum values - Battleship NousResearch#20 reduced from 5 to 3 gaps (~366 total)

Keeps the inventory current after porting the add_notify_sub upsert (c653c88) from the retired agent-driven-kanban-orchestration branch. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

…traction The run.py / kanban_db.py conflict surface (~622 / ~108 modified lines) is dominated by fork changes woven into upstream control flow (conversation-lock wrap + public-progress loop in run.py; expected_run_id UPDATE scoping + crash-detection fingerprinting + complete_task truncation removal in kanban_db). Extracting these would enlarge diffs and risk behavior in the kanban state machine — left in place, resolve at merge time under NousResearch#5/NousResearch#20 test cover. Only safe reduction: 3 entirely fork-added GatewayRunner methods moved into gateway/gateway_forklocal.ForkLocalGatewayMixin (run.py added column 657→631; conflict surface 622 unchanged). Behavior-preserving (gateway suite parity, ruff clean). Tier-1 NousResearch#10 declined as net-negative. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…de (NousResearch#20) * feat: nix flake, uv2nix build, dev shell and home manager * fixed nix run, updated docs for setup * feat(nix): NixOS module with persistent container mode, managed guards, checks - Replace homeModules.nix with nixosModules.nix (two deployment modes) - Mode A (native): hardened systemd service with ProtectSystem=strict - Mode B (container): persistent Ubuntu container with /nix/store bind-mount, identity-hash-based recreation, GC root protection, symlink-based updates - Add HERMES_MANAGED guards blocking CLI config mutation (config set, setup, gateway install/uninstall) when running under NixOS module - Add nix/checks.nix with build-time verification (binary, CLI, managed guard) - Remove container.nix (no Nix-built OCI image; pulls ubuntu:24.04 at runtime) - Simplify packages.nix (drop fetchFromGitHub submodules, PYTHONPATH wrappers) - Rewrite docs/nixos-setup.md with full options reference, container architecture, secrets management, and troubleshooting guide Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Update config.py * feat(nix): add CI workflow and enhanced build checks - GitHub Actions workflow for nix flake check + build on linux/macOS - Entry point sync check to catch pyproject.toml drift - Expanded managed-guard check to cover config edit - Wrap hermes-acp binary in Nix package - Fix Path type mismatch in is_managed() * Update MCP server package name; bundled skills support * fix reading .env. instead have container user a common mounted .env file * feat(nix): container entrypoint with privilege drop and sudo provisioning Container was running as non-root via --user, which broke apt/pip installs and caused crashes when $HOME didn't exist. Replace --user with a Nix-built entrypoint script that provisions the hermes user, sudo (NOPASSWD), and /home/hermes inside the container on first boot, then drops privileges via setpriv. Writable layer persists so setup only runs once. Also expands MCP server options to support HTTP transport and sampling. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix group and user creation in container mode * feat(nix): persistent /home/hermes and MESSAGING_CWD in container mode Container mode now bind-mounts ${stateDir}/home to /home/hermes so the agent's home directory survives container recreation. Previously it lived in the writable layer and was lost on image/volume/options changes. Also passes MESSAGING_CWD to the container so the agent finds its workspace and documents, matching native mode behavior. Other changes: - Extract containerDataDir/containerHomeDir bindings (no more magic strings) - Fix entrypoint chown to run unconditionally (volume mounts always exist) - Add schema field to container identity hash for auto-recreation - Add idempotency test (Scenario G) to config-roundtrip check * docs: add Nix & NixOS setup guide to docs site Add comprehensive Nix documentation to the Docusaurus site at website/docs/getting-started/nix-setup.md, covering nix run/profile install, NixOS module (native + container modes), declarative settings, secrets management, MCP servers, managed mode, container architecture, dev shell, flake checks, and full options reference. - Register nix-setup in sidebar after installation page - Add Nix callout tip to installation.md linking to new guide - Add canonical version pointer in docs/nixos-setup.md * docs: remove docs/nixos-setup.md, consolidate into website docs Backfill missing details (restart/restartSec in full example, gateway.pid, 0750 permissions, docker inspect commands) into the canonical website/docs/getting-started/nix-setup.md and delete the old standalone file. * fix(nix): add compression.protect_last_n and target_ratio to config-keys.json New keys were added to DEFAULT_CONFIG on main, causing the config-drift check to fail in CI. * fix(nix): skip checks on aarch64-darwin (onnxruntime wheel missing) The full Python venv includes onnxruntime (via faster-whisper/STT) which lacks a compatible uv2nix wheel on aarch64-darwin. Gate all checks behind stdenv.hostPlatform.isLinux. The package and devShell still evaluate on macOS. * fix(nix): skip flake check and build on macOS CI onnxruntime (transitive dep via faster-whisper) lacks a compatible uv2nix wheel on aarch64-darwin. Run full checks and build on Linux only; macOS CI verifies the flake evaluates without building. * fix(nix): preserve container writable layer across nixos-rebuild The container identity hash included the entrypoint's Nix store path, which changes on every nixpkgs update (due to runtimeShell/stdenv input-addressing). This caused false-positive identity mismatches, triggering container recreation and losing the persistent writable layer. - Use stable symlink (current-entrypoint) like current-package already does - Remove entrypoint from identity hash (only image/volumes/options matter) - Add GC root for entrypoint so nix-collect-garbage doesn't break it - Remove global HERMES_HOME env var from addToSystemPackages (conflicted with interactive CLI use, service already sets its own) --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Fixes 12 remaining MEDIUM issues from the deep audit (19 total, 7 fixed in Round 12): design_agent: - NousResearch#15: add asyncio.wait_for(300s) around LLM API call to prevent infinite hangs - NousResearch#17: replace 2x hardcoded 'claude-opus-4-8' with shared DEFAULT_MODEL constant qa_agent / validate_agent: - NousResearch#20,NousResearch#22,NousResearch#23: already fixed in Round 12 (verified — dynamic timeout/threshold values used) memory.py: - NousResearch#24: frontmatter parser uses regex r'^---$' instead of str.split('---',2), preventing false splits on content containing '---' (SQL, markdown tables) - NousResearch#25: parse and preserve 'description' field from frontmatter in metadata, fixing write→load roundtrip data loss profiles.py: - NousResearch#26: ProfileConfig now frozen=True (immutable dataclass per coding standards) deploy_agent: - NousResearch#31: replace 2x sync subprocess.run with asyncio.create_subprocess_exec - fix 5x .decode() → .decode('utf-8', errors='replace') for Windows CJK safety - remove unused import subprocess db.py: - NousResearch#27: add class docstring explaining RLock + _unlocked pattern - NousResearch#28: FK constraints already in DDL (verified PRAGMA foreign_keys=ON active) - NousResearch#29: add _ensure_connection() with PRAGMA integrity_check(1) + auto-reconnect on 4 critical methods (create_task, get_task, claim_task, submit_result) - extract _create_connection() static method for reuse by reconnect Tests: 79 passed, 0 failed

- CVE-2026-44432: Decompression-bomb safeguards bypassed in streaming API - CVE-2026-44431: Sensitive headers forwarded across origins in redirects Fixes Dependabot alerts NousResearch#21, NousResearch#20

…de (NousResearch#20) * feat: nix flake, uv2nix build, dev shell and home manager * fixed nix run, updated docs for setup * feat(nix): NixOS module with persistent container mode, managed guards, checks - Replace homeModules.nix with nixosModules.nix (two deployment modes) - Mode A (native): hardened systemd service with ProtectSystem=strict - Mode B (container): persistent Ubuntu container with /nix/store bind-mount, identity-hash-based recreation, GC root protection, symlink-based updates - Add HERMES_MANAGED guards blocking CLI config mutation (config set, setup, gateway install/uninstall) when running under NixOS module - Add nix/checks.nix with build-time verification (binary, CLI, managed guard) - Remove container.nix (no Nix-built OCI image; pulls ubuntu:24.04 at runtime) - Simplify packages.nix (drop fetchFromGitHub submodules, PYTHONPATH wrappers) - Rewrite docs/nixos-setup.md with full options reference, container architecture, secrets management, and troubleshooting guide Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Update config.py * feat(nix): add CI workflow and enhanced build checks - GitHub Actions workflow for nix flake check + build on linux/macOS - Entry point sync check to catch pyproject.toml drift - Expanded managed-guard check to cover config edit - Wrap hermes-acp binary in Nix package - Fix Path type mismatch in is_managed() * Update MCP server package name; bundled skills support * fix reading .env. instead have container user a common mounted .env file * feat(nix): container entrypoint with privilege drop and sudo provisioning Container was running as non-root via --user, which broke apt/pip installs and caused crashes when $HOME didn't exist. Replace --user with a Nix-built entrypoint script that provisions the hermes user, sudo (NOPASSWD), and /home/hermes inside the container on first boot, then drops privileges via setpriv. Writable layer persists so setup only runs once. Also expands MCP server options to support HTTP transport and sampling. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix group and user creation in container mode * feat(nix): persistent /home/hermes and MESSAGING_CWD in container mode Container mode now bind-mounts ${stateDir}/home to /home/hermes so the agent's home directory survives container recreation. Previously it lived in the writable layer and was lost on image/volume/options changes. Also passes MESSAGING_CWD to the container so the agent finds its workspace and documents, matching native mode behavior. Other changes: - Extract containerDataDir/containerHomeDir bindings (no more magic strings) - Fix entrypoint chown to run unconditionally (volume mounts always exist) - Add schema field to container identity hash for auto-recreation - Add idempotency test (Scenario G) to config-roundtrip check * docs: add Nix & NixOS setup guide to docs site Add comprehensive Nix documentation to the Docusaurus site at website/docs/getting-started/nix-setup.md, covering nix run/profile install, NixOS module (native + container modes), declarative settings, secrets management, MCP servers, managed mode, container architecture, dev shell, flake checks, and full options reference. - Register nix-setup in sidebar after installation page - Add Nix callout tip to installation.md linking to new guide - Add canonical version pointer in docs/nixos-setup.md * docs: remove docs/nixos-setup.md, consolidate into website docs Backfill missing details (restart/restartSec in full example, gateway.pid, 0750 permissions, docker inspect commands) into the canonical website/docs/getting-started/nix-setup.md and delete the old standalone file. * fix(nix): add compression.protect_last_n and target_ratio to config-keys.json New keys were added to DEFAULT_CONFIG on main, causing the config-drift check to fail in CI. * fix(nix): skip checks on aarch64-darwin (onnxruntime wheel missing) The full Python venv includes onnxruntime (via faster-whisper/STT) which lacks a compatible uv2nix wheel on aarch64-darwin. Gate all checks behind stdenv.hostPlatform.isLinux. The package and devShell still evaluate on macOS. * fix(nix): skip flake check and build on macOS CI onnxruntime (transitive dep via faster-whisper) lacks a compatible uv2nix wheel on aarch64-darwin. Run full checks and build on Linux only; macOS CI verifies the flake evaluates without building. * fix(nix): preserve container writable layer across nixos-rebuild The container identity hash included the entrypoint's Nix store path, which changes on every nixpkgs update (due to runtimeShell/stdenv input-addressing). This caused false-positive identity mismatches, triggering container recreation and losing the persistent writable layer. - Use stable symlink (current-entrypoint) like current-package already does - Remove entrypoint from identity hash (only image/volumes/options matter) - Add GC root for entrypoint so nix-collect-garbage doesn't break it - Remove global HERMES_HOME env var from addToSystemPackages (conflicted with interactive CLI use, service already sets its own) --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

alt-glitch force-pushed the sid/nix-flake branch from da9d4bd to 6cd77ba Compare March 9, 2026 14:54

alt-glitch changed the title ~~feat: add nix flake + setup~~ feat: nix flake — NixOS module, dev shell, and package Mar 9, 2026

alt-glitch changed the title ~~feat: nix flake — NixOS module, dev shell, and package~~ feat: nix flake — dev shell + home-manager module Mar 11, 2026

alt-glitch force-pushed the sid/nix-flake branch from 745896e to 73ddcd6 Compare March 11, 2026 11:33

alt-glitch changed the title ~~feat: nix flake — dev shell + home-manager module~~ feat: nix flake — uv2nix build + dev shell + home-manager Mar 11, 2026

alt-glitch changed the base branch from main to fix/packaging-bugs March 11, 2026 11:33

alt-glitch force-pushed the fix/packaging-bugs branch from 986ae3f to 1d4a23f Compare March 11, 2026 11:37

alt-glitch force-pushed the sid/nix-flake branch from 73ddcd6 to dbc490d Compare March 11, 2026 11:40

alt-glitch mentioned this pull request Mar 11, 2026

fix: add missing packages to setuptools config #912

Merged

alt-glitch force-pushed the sid/nix-flake branch from 4942051 to 5776287 Compare March 11, 2026 12:10

alt-glitch marked this pull request as ready for review March 11, 2026 12:11

ethernet8023 reviewed Mar 12, 2026

View reviewed changes

Comment thread docs/nixos-setup.md Outdated

Comment thread docs/nixos-setup.md Outdated

Comment thread nix/devShell.nix

Comment thread nix/packages.nix Outdated

Comment thread nix/packages.nix

alt-glitch marked this pull request as draft March 14, 2026 04:43

alt-glitch force-pushed the sid/nix-flake branch from a06b5dd to 71a3a44 Compare March 19, 2026 10:42

alt-glitch changed the base branch from fix/packaging-bugs to main March 19, 2026 10:44

alt-glitch marked this pull request as ready for review March 19, 2026 10:45

alt-glitch requested a review from ethernet8023 March 19, 2026 10:45

alt-glitch changed the title ~~feat: nix flake — uv2nix build + dev shell + home-manager~~ feat: nix flake — uv2nix build, NixOS module, persistent container mode Mar 19, 2026

alt-glitch force-pushed the sid/nix-flake branch from 20e02c7 to dfa0124 Compare March 24, 2026 16:52

alt-glitch added 2 commits March 25, 2026 11:31

feat: nix flake, uv2nix build, dev shell and home manager

63b583a

fixed nix run, updated docs for setup

1e8fae2

SHL0MS mentioned this pull request Mar 30, 2026

[UX] Argument-level tab completion for /resume, /skin, /personality, etc. #4059

Open

sudo-yf pushed a commit to sudo-yf/hermes-agent that referenced this pull request Apr 5, 2026

Merge pull request NousResearch#20 from nesquena/sprint-16-sidebar-po…

fd993c5

…lish Sprint 16: Session sidebar visual polish — overlay actions, SVG icons, project borders

ahmedaltewaj mentioned this pull request Apr 6, 2026

Add support for Atropos Agentic RL environments (requires branch tool… #17

Merged

This comment was marked as off-topic.

Sign in to view

h4x3rotab pushed a commit to Clawdi-AI/hermes-agent that referenced this pull request Apr 10, 2026

docs: add Ollama CORS troubleshooting to README (NousResearch#20)

3fdbcad

Co-authored-by: Aurora <aurora@MacBookPro.lan>

This comment was marked as off-topic.

Sign in to view

Copilot AI mentioned this pull request May 8, 2026

docs(learn): sync Chinese tutorial with v0.12.0/v0.13.0 changes Cleam/hermes-agent#1

Draft

unimatrix27 mentioned this pull request May 11, 2026

Finance reconciliation: schema + backfill (closes unimatrix27/ideas#20) unimatrix27/hermes-agent#1

Open

6 tasks

GodsBoy mentioned this pull request May 24, 2026

feat(egress): iron-proxy credential-injection firewall for sandboxes #30179

Open

BowmanStephen mentioned this pull request May 25, 2026

[feature-adoption] Adopt remaining unused Hermes features (9 unstarted) BowmanStephen/hermes-agent#9

Open

erikjespersen-selaware mentioned this pull request May 26, 2026

feat(kanban): worker-side PR-state poller (SPEC-kanban-pr-guard-fix Card (b)) erikjespersen-selaware/hermes-agent#2

Merged

6 tasks

BeliyDym mentioned this pull request Jun 3, 2026

ci: onboard multi-vendor AI PR review (OST-626 canary) BeliyDym/hermes-agent#1

Closed

7 tasks

dizhaky mentioned this pull request Jun 4, 2026

fix(deps): bump urllib3 2.6.3 → 2.7.0 (HIGH CVE-2026-44432, CVE-2026-44431) dizhaky/hermes-agent#5

Merged

Conversation

alt-glitch commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What changed

Container persistence model

Test plan

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

0xrsydn commented Mar 15, 2026

Uh oh!

alt-glitch commented Mar 16, 2026

Uh oh!

0xrsydn commented Mar 16, 2026

Uh oh!

0xrsydn commented Mar 17, 2026

Uh oh!

sylvesterroos commented Mar 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

alt-glitch commented Mar 23, 2026

Uh oh!

lattwood commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

alt-glitch commented Mar 23, 2026

Uh oh!

github-actions Bot commented Mar 24, 2026

⚠️ Supply Chain Risk Detected

⚠️ WARNING: Install hook files modified

Uh oh!

ahmedaltewaj commented Apr 6, 2026

Uh oh!

This comment was marked as off-topic.

This comment was marked as off-topic.

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

alt-glitch commented Feb 8, 2026 •

edited

Loading

sylvesterroos commented Mar 20, 2026 •

edited

Loading

lattwood commented Mar 23, 2026 •

edited

Loading