hermes-agent/docker
ethernet 4a783b1c21 unify install provenance on a single code-scoped install-stamp.json
one artifact replaces three: install-stamp.json (code-scoped) subsumes
.hermes_build_info.json (same schema, different name) and .install_method
(derivable). git checkouts carry no stamp at all — .git plus location is
the fact.

detect_install_method() now delegates to runtime_tree.install_method():
  stamp distribution (docker/nix/desktop-app)
  -> .git at a managed install root => git
  -> .git anywhere else => source (new)
  -> unknown

the new 'source' method makes hermes update refuse random src checkouts
outright and point at git pull (replaces the --yes-overridable ask-first
guard). nixos dies as a method value; /nix/store sniffing and the
HERMES_MANAGED ladder step die with it. HERMES_MANAGED keeps exactly one
job: the NixOS module's declarative config-write guard.

lazy_deps drops install-method inference entirely: the read-only guard
now probes site-packages writability directly.

no backwards compat: nothing reads the legacy stamps anymore. stage2-hook
keeps deleting stale home-scoped .install_method markers left by old
images.
2026-08-10 11:21:49 -04:00
..
cont-init.d
s6-rc.d
SOUL.md
entrypoint-dispatch.sh fix(install): support non-pid-1 container entrypoints 2026-08-01 10:52:34 -07:00
entrypoint.sh fix(install): support non-pid-1 container entrypoints 2026-08-01 10:52:34 -07:00
hermes-exec-shim.sh
main-wrapper.sh fix(install): support non-pid-1 container entrypoints 2026-08-01 10:52:34 -07:00
stage2-hook.sh unify install provenance on a single code-scoped install-stamp.json 2026-08-10 11:21:49 -04:00
tini-shim.sh