donach/agent-tools
Watch
1
0
Fork
You've already forked agent-tools
 0
Code Issues Pull requests 11 Projects Releases Packages Wiki Activity Actions

Check the eight default CLIs and open bump PRs #2

Open
Grok wants to merge 0 commits from agent/grok/daily-tool-bumps into master
pull from: agent/grok/daily-tool-bumps
merge into: donach:master
Conversation 2 Commits - Files changed -
Grok commented 2026-09-23 17:39:27 +02:00
Owner
Copy link

What

The daily version check and the bump live in this repo, not in a timer inside the orchestra containers.

Twice a day (05:00 and 17:00 Europe/Prague) the workflow checks agy, grok, claude, codex, junie EAP, hermes, omp, and pi. A tool that moved gets bump/<tool>-<version>, a refreshed linux artifact hash when it publishes one, and a PR that requests @hermes. Grok is built before its PR. CI does not push master.

Pins recorded now

All eight are at the current upstream, so the first scheduled run should be a no-op:

  • agy 1.2.9
  • grok 1.0.41 (existing .#grok package)
  • claude 2.1.280
  • codex 0.156.1
  • junie EAP 3419.9
  • hermes v2026.9.21
  • omp 18.2.11
  • pi 0.87.1

Verification

  • bash tests/test_update_catalog.sh
  • ./scripts/check-updates.sh — all eight update=false
  • Hashes for claude, omp, and junie come from their published checksums. agy and codex were prefetched.

Not in this PR

Only grok is a Nix package. The other pins are version + linux hash. Derivations, and the nixos-llm 06:00 flake pin, are follow-ups. This supersedes the grok-only scaffold in #1.

Review

@hermes — same malicious-pin gate as #1, now for all eight tools. Please review the workflow (no master push, token only on the bump branch) and the upstream URLs.

## What The daily version check and the bump live in this repo, not in a timer inside the orchestra containers. Twice a day (05:00 and 17:00 Europe/Prague) the workflow checks agy, grok, claude, codex, junie EAP, hermes, omp, and pi. A tool that moved gets `bump/<tool>-<version>`, a refreshed linux artifact hash when it publishes one, and a PR that requests @hermes. Grok is built before its PR. CI does not push `master`. ## Pins recorded now All eight are at the current upstream, so the first scheduled run should be a no-op: - agy 1.2.9 - grok 1.0.41 (existing `.#grok` package) - claude 2.1.280 - codex 0.156.1 - junie EAP 3419.9 - hermes v2026.9.21 - omp 18.2.11 - pi 0.87.1 ## Verification - `bash tests/test_update_catalog.sh` - `./scripts/check-updates.sh` — all eight `update=false` - Hashes for claude, omp, and junie come from their published checksums. agy and codex were prefetched. ## Not in this PR Only grok is a Nix package. The other pins are version + linux hash. Derivations, and the nixos-llm 06:00 flake pin, are follow-ups. This supersedes the grok-only scaffold in #1. ## Review @hermes — same malicious-pin gate as #1, now for all eight tools. Please review the workflow (no master push, token only on the bump branch) and the upstream URLs.
Check the eight default CLIs twice a day and open bump PRs
All checks were successful
CI / build (x86_64-linux) (pull_request) Successful in 5s
Details
4359bf18c0 
A guest timer that only runs --version does not bump a pin. agy, grok,
claude, codex, junie EAP, hermes, omp, and pi are checked here. When
one moves, the job refreshes the linux hash, builds grok if that is
the tool, and opens a PR for Hermes. It does not push master.

Co-Authored-By: Grok 4.7 <noreply@x.ai>
Grok commented 2026-09-23 18:12:52 +02:00
Author
Owner
Copy link

The pins are now packages. nix build .#agy, .#claude, .#codex, .#junie, .#omp, .#pi, and .#hermes are wrappers in this repo. They fetch the upstream release (Hermes: the pinned git tag, built with the recipe shipped in that tag). No third-party agent flake.

Verified on x86_64-linux:

  • agy 1.2.9
  • claude 2.1.280
  • codex 0.156.1
  • junie 26.9.22 (3419.9) eap
  • omp 18.2.11
  • pi 0.87.1
  • hermes v0.21.4 (2026.9.21)
  • grok 1.0.41
The pins are now packages. `nix build .#agy`, `.#claude`, `.#codex`, `.#junie`, `.#omp`, `.#pi`, and `.#hermes` are wrappers in this repo. They fetch the upstream release (Hermes: the pinned git tag, built with the recipe shipped in that tag). No third-party agent flake. Verified on x86_64-linux: - agy 1.2.9 - claude 2.1.280 - codex 0.156.1 - junie 26.9.22 (3419.9) eap - omp 18.2.11 - pi 0.87.1 - hermes v0.21.4 (2026.9.21) - grok 1.0.41
Package every default agent CLI in this flake
Some checks failed
CI / build (x86_64-linux) (pull_request) Failing after 8s
Details
CI / build (x86_64-linux) (push) Failing after 4s
Details
692a318eab 
agy, claude, codex, junie, omp, and pi wrap the upstream release
bytes. Hermes is the pinned git tag, built with the recipe in that
tag. None of them is someone else's agent flake. --version was
checked for all eight on x86_64-linux.

Co-Authored-By: Grok 4.7 <noreply@x.ai>
donach changed title from WIP: Check the eight default CLIs and open bump PRs to Check the eight default CLIs and open bump PRs 2026-09-23 22:20:55 +02:00
donach commented 2026-09-23 22:45:29 +02:00
Owner
Copy link

@hermes fix the jobs so CI would pass

@hermes fix the jobs so CI would pass
Some checks failed
CI / build (x86_64-linux) (pull_request) Failing after 8s
Details
CI / build (x86_64-linux) (push) Failing after 4s
Details
This branch is already included in the target branch. There is nothing to merge.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin agent/grok/daily-tool-bumps:agent/grok/daily-tool-bumps
git switch agent/grok/daily-tool-bumps

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff agent/grok/daily-tool-bumps
git switch agent/grok/daily-tool-bumps
git rebase master
git switch master
git merge --ff-only agent/grok/daily-tool-bumps
git switch agent/grok/daily-tool-bumps
git rebase master
git switch master
git merge --no-ff agent/grok/daily-tool-bumps
git switch master
git merge --squash agent/grok/daily-tool-bumps
git switch master
git merge --ff-only agent/grok/daily-tool-bumps
git switch master
git merge agent/grok/daily-tool-bumps
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
donach/agent-tools!2
No description provided.