From b307e92b09591e7c5d639030baad2b6d8ee7870f Mon Sep 17 00:00:00 2001
From: 0xrsydn <rafayrussani@gmail.com>
Date: Sun, 22 Mar 2026 15:33:25 +0700
Subject: [PATCH] feat: add github ci for nightly version

---
 .github/workflows/update-nightly.yml |  30 ++++++++
 scripts/update-nightly.sh            | 102 +++++++++++++++++++++++++++
 2 files changed, 132 insertions(+)
 create mode 100644 .github/workflows/update-nightly.yml
 create mode 100755 scripts/update-nightly.sh

diff --git a/.github/workflows/update-nightly.yml b/.github/workflows/update-nightly.yml
new file mode 100644
index 0000000..5b021e2
--- /dev/null
+++ b/.github/workflows/update-nightly.yml
@@ -0,0 +1,30 @@
+name: Update Hermes Agent Nightly
+
+on:
+  schedule:
+    # Run daily at 04:00 UTC
+    - cron: "0 4 * * *"
+  workflow_dispatch: {}
+
+permissions:
+  contents: write
+
+jobs:
+  update:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v13
+
+      - name: Run nightly updater
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config user.name "nix-hermes-agent-bot"
+          git config user.email "bot@nix-hermes-agent.local"
+          scripts/update-nightly.sh
diff --git a/scripts/update-nightly.sh b/scripts/update-nightly.sh
new file mode 100755
index 0000000..af2d10c
--- /dev/null
+++ b/scripts/update-nightly.sh
@@ -0,0 +1,102 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Auto-update nightly.nix to track HEAD of NousResearch/hermes-agent main branch.
+# Designed to run in GitHub Actions (see .github/workflows/update-nightly.yml).
+
+repo_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+nightly_file="$repo_root/nightly.nix"
+
+log() {
+  printf '>> %s\n' "$*"
+}
+
+# --- Resolve HEAD of main ---
+log "Fetching HEAD of NousResearch/hermes-agent main branch"
+head_sha=$(git ls-remote https://github.com/NousResearch/hermes-agent.git refs/heads/main | awk '{print $1}')
+if [[ -z "$head_sha" ]]; then
+  echo "Failed to resolve HEAD of main" >&2
+  exit 1
+fi
+log "HEAD SHA: $head_sha"
+
+# --- Compare with current ---
+current_rev=$(awk -F'"' '/pinRev = /{print $2}' "$nightly_file" | head -1)
+log "Current pinned rev: $current_rev"
+
+if [[ "$current_rev" == "$head_sha" ]]; then
+  log "Already up to date ($current_rev). Nothing to do."
+  exit 0
+fi
+log "Update available: ${current_rev:0:12} → ${head_sha:0:12}"
+
+# --- Determine base version from package.nix ---
+base_version=$(awk -F'"' '/pinVersion \? "/{print $2}' "$repo_root/package.nix" | head -1)
+if [[ -z "$base_version" ]]; then
+  base_version="0.0.0"
+fi
+nightly_version="${base_version}-unstable-$(date -u +%Y-%m-%d)"
+log "Nightly version: $nightly_version"
+
+# --- Update nightly.nix with new rev and empty hash ---
+perl -0pi -e "s|pinVersion = \"[^\"]+\";|pinVersion = \"${nightly_version}\";|" "$nightly_file"
+perl -0pi -e "s|pinRev = \"[^\"]+\";|pinRev = \"${head_sha}\";|" "$nightly_file"
+perl -0pi -e 's|pinHash = "[^"]*";|pinHash = "";|' "$nightly_file"
+
+# --- Prefetch to get correct hash ---
+build_log=$(mktemp)
+log "Running nix build to compute source hash..."
+if nix build .#hermes-agent-nightly --accept-flake-config >"$build_log" 2>&1; then
+  log "Build succeeded with empty hash?! Unexpected, but OK."
+  source_hash=""
+else
+  source_hash=$(grep -oP 'got: *\Ksha256-[A-Za-z0-9+/=]+' "$build_log" | head -1 || true)
+  if [[ -z "$source_hash" ]]; then
+    log "Build failed but couldn't extract hash. Build log:"
+    tail -50 "$build_log" >&2
+    # Restore original
+    git checkout -- "$nightly_file"
+    rm -f "$build_log"
+    exit 1
+  fi
+fi
+rm -f "$build_log"
+log "Source hash: $source_hash"
+
+# Update with the correct hash
+if [[ -n "$source_hash" ]]; then
+  perl -0pi -e "s|pinHash = \"[^\"]*\";|pinHash = \"${source_hash}\";|" "$nightly_file"
+fi
+
+# --- Validate build ---
+build_log=$(mktemp)
+log "Validating full nightly build..."
+if ! nix build .#hermes-agent-nightly --accept-flake-config >"$build_log" 2>&1; then
+  log "Build validation FAILED. This likely means dependencies changed upstream."
+  log "Build log (last 100 lines):"
+  tail -100 "$build_log" >&2
+  git checkout -- "$nightly_file"
+  rm -f "$build_log"
+  exit 1
+fi
+rm -f "$build_log"
+log "Build validation PASSED ✅"
+
+# --- Commit and push ---
+if git diff --quiet "$nightly_file"; then
+  log "No changes to commit (shouldn't happen)"
+  exit 0
+fi
+
+log "Committing nightly update"
+git add "$nightly_file"
+git commit -m "🤖 bump hermes-agent-nightly to ${head_sha:0:12} (${nightly_version})" \
+  -m "Upstream HEAD: https://github.com/NousResearch/hermes-agent/commit/${head_sha}" \
+  -m "Tests: nix build .#hermes-agent-nightly (passed)"
+
+log "Pushing to main"
+git fetch origin main
+git rebase origin/main
+git push origin HEAD:main
+
+log "Done! Updated hermes-agent-nightly to ${head_sha:0:12} (${nightly_version})"