12c60e30

By: ananjiani <ananjiani@noreply.codeberg.org>

fix(hermes): pin upstream package with state holders (#301)

## Fix

Pin only Hermes to the earliest checked upstream revision that packages hermes_state_holders. The installed module is missing at the old pin, so both the Telegram gateway and dashboard crash on import.

- Old: 593aa74c6182ce2e5e23bc102daaaae71710c05d
- New: eaf10c7e7890c069392d50b797c09026d0a28bca
- Upstream fix: https://github.com/NousResearch/hermes-agent/commit/eaf10c7e7890c069392d50b797c09026d0a28bca
- The fix adds hermes_state_holders to setuptools py-modules. Upstream Nix packaging files are unchanged.
- Changes: flake.nix pin/comment and only the hermes-agent lock node. No unrelated inputs or service settings changed.

## Local checks: passed

- Targeted Aragorn Nix eval resolves both service entry points to the tested package.
- Targeted local package build with --builders ""; no full host or flake checks.
- Isolated installed imports: hermes_state_holders, hermes_state, gateway.run, platforms.telegram.adapter, hermes_cli.main, hermes_cli.main_dashboard, hermes_cli.web_server.
- Isolated CLI checks: hermes gateway --help; hermes gateway run --help; hermes dashboard --help; hermes dashboard --status.
- Package: /nix/store/mzq542s16lmjl0z2vdm5d5dsvfwqd65w-hermes-agent-0.21.0
- Wheel: /nix/store/si9ql27xsxd2mm3i644sy5pk7wn702jg-hermes-agent-0.21.0
- Targeted pre-commit and commit/push hooks passed; git diff --check passed.

## Independent review: PASS

GPT-5.6 Sol independently checked the Grok 4.6 implementation, upstream ancestry, diff scope, actual Aragorn package wiring, targeted build, and installed imports/help commands. No blockers found.

## Limits and risk

- Draft until required buildbot/nix-build succeeds. Known Buildbot evaluation issue tracked separately in #300; no bypass or CI fix in this PR.
- The earliest corrected upstream revision is 4,258 commits ahead of the old pin and changes at least 300 upstream files. Broader runtime behavior is not fully tested.
- The explicit revision keeps future lock refreshes on this tested Hermes package.
- No live credentials, Telegram connection/polling, service restart, merge, or deployment. This PR does not fix the separate memory-pressure event.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/301

Total

2m25s

Time to Start Worker time Duration Time to finish Idle
Config 1s 9s 9s 10s 1s
Eval 7s 1m23s 1m23s 1m31s 0s
Build 1m28s 1m22s 58s 2m27s 0s
Suite 1s 2m54s 2m25s 2m27s 1s

Timeline

Config Eval Build
0s10s20s30s40s50s1m1m10s1m20s1m30s1m40s1m50s2m2m10s2m20s