From 933c823ae847d7b26427a655535107f4c1e9f6f4 Mon Sep 17 00:00:00 2001
From: ethernet <arilotter@gmail.com>
Date: Mon, 20 Jul 2026 20:38:59 -0400
Subject: [PATCH] nix: add cage to devDeps

---
 nix/hermes-agent.nix | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/nix/hermes-agent.nix b/nix/hermes-agent.nix
index 043d1e942021..f1a23b1029d5 100644
--- a/nix/hermes-agent.nix
+++ b/nix/hermes-agent.nix
@@ -22,6 +22,9 @@
   wl-clipboard,
   xclip,
 
+  # linux-only dev deps
+  cage,
+
   # Flake inputs — passed explicitly by packages.nix and overlays.nix
   uv2nix,
   pyproject-nix,
@@ -61,8 +64,7 @@ let
 
   bundledSkills = lib.cleanSourceWith {
     src = ../skills;
-    filter =
-      path: _type: !(lib.hasInfix "/index-cache/" path) && !(lib.hasInfix "/__pycache__/" path);
+    filter = path: _type: !(lib.hasInfix "/index-cache/" path) && !(lib.hasInfix "/__pycache__/" path);
   };
 
   # Optional skills are NOT in the wheel (pythonSrc excludes them, see
@@ -70,8 +72,7 @@ let
   # same mechanism Homebrew packaging uses.
   bundledOptionalSkills = lib.cleanSourceWith {
     src = ../optional-skills;
-    filter =
-      path: _type: !(lib.hasInfix "/index-cache/" path) && !(lib.hasInfix "/__pycache__/" path);
+    filter = path: _type: !(lib.hasInfix "/index-cache/" path) && !(lib.hasInfix "/__pycache__/" path);
   };
 
   # Import bundled plugins (memory, context_engine, platforms/*).  Keeping
@@ -251,7 +252,14 @@ stdenv.mkDerivation (finalAttrs: {
         export HERMES_PYTHON=${devPython}/bin/python3
       '';
 
-      devDeps = runtimeDeps ++ [ devPython ];
+      devDeps =
+        runtimeDeps
+        ++ [
+          devPython
+        ]
+        ++ lib.optionals stdenv.isLinux [
+          cage # for running e2e tests without popping windows
+        ];
     };
 
   meta = with lib; {