hermes-agent/nix
Siddharth Balyan 4219a91df5
fix(nix): make config.yaml group-writable under addToSystemPackages (#41940)
addToSystemPackages exports HERMES_HOME system-wide and puts the hermes CLI on
interactive users' PATH, so those users (in the hermes group) share the
gateway's state — that's the option's whole purpose. But the activation script
wrote config.yaml as 0640 (group read-only), so an interactive user saving a
setting via the CLI/TUI hit:

  error: [Errno 13] Permission denied: '/var/lib/hermes/.hermes/config.yaml'

Make the mode conditional: 0660 when addToSystemPackages is set (group hermes
can write), else the previous 0640. .env stays 0640 either way — it holds
secrets, not user-facing settings. The config merge already preserves
user-added keys across rebuilds, so this simply lets interactive hermes-group
users actually make those edits.

Verified by evaluating the module's activation script for both option values:
addToSystemPackages=true -> chmod 0660, false -> chmod 0640.
2026-06-08 20:10:47 +05:30
..
checks.nix fix(packaging): ship locales/ i18n catalogs in wheel, sdist, and Nix (#38383) 2026-06-03 12:00:27 -07:00
configMergeScript.nix feat: nix flake — uv2nix build, NixOS module, persistent container mode (#20) 2026-03-26 01:08:02 +05:30
desktop.nix fix(node/nix): consolidate workspace lockfile + update all consumers 2026-06-02 20:28:18 -04:00
devShell.nix fix(node/nix): consolidate workspace lockfile + update all consumers 2026-06-02 20:28:18 -04:00
hermes-agent.nix fix(packaging): ship locales/ i18n catalogs in wheel, sdist, and Nix (#38383) 2026-06-03 12:00:27 -07:00
lib.nix fix(nix): cold npm builds + fix-lockfiles real-build verification + auto-fix workflow (#41867) 2026-06-08 12:41:37 +05:30
nixosModules.nix fix(nix): make config.yaml group-writable under addToSystemPackages (#41940) 2026-06-08 20:10:47 +05:30
overlays.nix fix(banner): show correct update status on nix-built hermes (#17550) 2026-04-30 07:03:00 +05:30
packages.nix fix(node/nix): consolidate workspace lockfile + update all consumers 2026-06-02 20:28:18 -04:00
python.nix feat(nix): declarative plugin installation for NixOS module (#15953) 2026-04-28 00:18:32 +05:30
tui.nix fix(node/nix): consolidate workspace lockfile + update all consumers 2026-06-02 20:28:18 -04:00
web.nix fix(node/nix): consolidate workspace lockfile + update all consumers 2026-06-02 20:28:18 -04:00