warning: not writing modified lock file of flake 'path:/nix/store/d2ll3733x97mnhg620df6r7n7v2xga9f-source': • Updated input 'disko': 'github:nix-community/disko/ff8702b4de27f72b4c78573dfb89ec74e36abdf1?narHash=sha256-RxWs5ND31KzTG7wvMM%2BPMfUjyNpmIEr999lqNARaM5o%3D' (2026-06-11) → 'path:/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source?lastModified=1&narHash=sha256-RxWs5ND31KzTG7wvMM%2BPMfUjyNpmIEr999lqNARaM5o%3D' (1970-01-01) • Updated input 'hermes-agent': 'github:NousResearch/hermes-agent/df4b65147d7ddd74dd449f9067aabbca5aef0ec7?narHash=sha256-TsWcNR6JVj%2BPaqwodGrtcIgmOG6bzXtIDWw%2Be2txPdk%3D' (2026-08-16) → 'path:/nix/store/kwny5lvv5lpkykf95czhahcwv3hq82c9-source?lastModified=1&narHash=sha256-TsWcNR6JVj%2BPaqwodGrtcIgmOG6bzXtIDWw%2Be2txPdk%3D' (1970-01-01) • Updated input 'hermes-agent/flake-parts': 'github:hercules-ci/flake-parts/17c9d6cdfc60c64f4ee8d306f9bc0b4ccb51481e?narHash=sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w%2B6NWK9yA%3D' (2026-07-01) → 'path:/nix/store/xfg4bws749i95jvnxhymxmfwailzk38q-source?lastModified=1&narHash=sha256-vp6Y/Grm98ESt6ceOkWiHWyZRDV3J1RID4w%2B6NWK9yA%3D' (1970-01-01) • Updated input 'hermes-agent/npm-lockfile-fix': 'github:jeslie0/npm-lockfile-fix/c6093acb0c0548e0f9b8b3d82918823721930fe8?narHash=sha256-2GV79U6iVH4gKAPWYrxUReB0S41ty/Y3dBLquU8AlaA%3D' (2026-04-11) → 'path:/nix/store/ys5d7j3bfkwbvngdhrhlz839s6hqgv81-source?lastModified=1&narHash=sha256-2GV79U6iVH4gKAPWYrxUReB0S41ty/Y3dBLquU8AlaA%3D' (1970-01-01) • Updated input 'hermes-agent/pyproject-build-systems': 'github:pyproject-nix/build-system-pkgs/62c0d86027edb1c4f39a5facc09876348144f7c9?narHash=sha256-8AM37BfyGaL2v/SZyg4PupRxJ01Y4htvM%2BWrTjWrPpo%3D' (2026-07-27) → 'path:/nix/store/528l59fylwd10l7cg2a0kaizicblz5i1-source?lastModified=1&narHash=sha256-8AM37BfyGaL2v/SZyg4PupRxJ01Y4htvM%2BWrTjWrPpo%3D' (1970-01-01) • Updated input 'hermes-agent/pyproject-nix': 'github:pyproject-nix/pyproject.nix/e3b599ca2e7fcf93d4edf65d7f19bbf6491724f3?narHash=sha256-zP/WaDxrRu8GANZM61%2BV2LT/7ycEEdoyLWn7M6WzU7M%3D' (2026-07-20) → 'path:/nix/store/3xkkws943bznqkqilrvg2sfkkgmihl69-source?lastModified=1&narHash=sha256-zP/WaDxrRu8GANZM61%2BV2LT/7ycEEdoyLWn7M6WzU7M%3D' (1970-01-01) • Updated input 'hermes-agent/uv2nix': 'github:pyproject-nix/uv2nix/5a836d395cbf5fc22670eb98dd4aa4fc4d406977?narHash=sha256-9Tq3UDX2hD/aveW/HvkBlAmEwJTOlY5HQXJM%2BL5BGmE%3D' (2026-07-28) → 'path:/nix/store/nnc4f52zyzy5p6dq50b2fd7qijmv4qnd-source?lastModified=1&narHash=sha256-9Tq3UDX2hD/aveW/HvkBlAmEwJTOlY5HQXJM%2BL5BGmE%3D' (1970-01-01) • Updated input 'home-manager': 'github:nix-community/home-manager/7566825d4652a1b885bd4ce65bd9e8def432fec9?narHash=sha256-OI4IkRjRXa1e7hYmCGJDPDq5H/kPwhsyoS80cNUF9fI%3D' (2026-07-12) → 'path:/nix/store/8m3c3lk77arffgl18nkbj9gf7g2qg02q-source?lastModified=1&narHash=sha256-OI4IkRjRXa1e7hYmCGJDPDq5H/kPwhsyoS80cNUF9fI%3D' (1970-01-01) • Updated input 'llm-agents': 'github:numtide/llm-agents.nix/8651bf95690800f5361d53a9abda0fc3fbe0e2ec?narHash=sha256-whEQ6o21DtquR08u%2ByuLdHXX8dgjlyNJIyMWcVk%2BPFU%3D' (2026-08-12) → 'path:/nix/store/8ah7wk9k72mvdp5lhf7yxzyh3rq2zbvz-source?lastModified=1&narHash=sha256-whEQ6o21DtquR08u%2ByuLdHXX8dgjlyNJIyMWcVk%2BPFU%3D' (1970-01-01) • Updated input 'llm-agents/bun2nix': 'github:nix-community/bun2nix/0f2a1f0b6f42cebe3b149bf62d38754c5e0e9729?narHash=sha256-9BMxlTxCCDAeoNLtb1a/st7udtTIJep%2BwpUzquA29VU%3D' (2026-07-21) → 'path:/nix/store/bizxaf7pn38fqp0xlpnqlf8dy93i4r3y-source?lastModified=1&narHash=sha256-9BMxlTxCCDAeoNLtb1a/st7udtTIJep%2BwpUzquA29VU%3D' (1970-01-01) • Updated input 'llm-agents/bun2nix/nixpkgs': follows 'nixpkgs' → follows 'llm-agents/nixpkgs' • Updated input 'llm-agents/bun2nix/systems': follows 'systems' → follows 'llm-agents/systems' • Updated input 'llm-agents/bun2nix/treefmt-nix': follows 'treefmt-nix' → follows 'llm-agents/treefmt-nix' • Updated input 'llm-agents/flake-parts': 'github:hercules-ci/flake-parts/427bf4bd9435fdf21321c8cc628c24efc14c0f7a?narHash=sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw%3D' (2026-08-01) → 'path:/nix/store/lrxvs4l9bqbgjfz7w9bkfg5zqq442jxc-source?lastModified=1&narHash=sha256-4dtXQk/NMePegK/nWp5NSeuZKLATItOq61lpEvmXqGw%3D' (1970-01-01) • Updated input 'microvm': 'github:microvm-nix/microvm.nix/fa5340ac684cdce8a22b6d4a0bcebb0cc999275e?narHash=sha256-xgfS6slV7J3baMooNN1UuBi51RIgg9y0DbCxfSA0668%3D' (2026-07-21) → 'path:/nix/store/f6izybf1ll029gd055174mmbdqldkkwg-source?lastModified=1&narHash=sha256-xgfS6slV7J3baMooNN1UuBi51RIgg9y0DbCxfSA0668%3D' (1970-01-01) • Updated input 'microvm/spectrum': 'git+https://spectrum-os.org/git/spectrum?ref=refs/heads/main&rev=24c4346e30fdea8d8e80f34aec3554a15a667d24' (2026-07-10) → 'path:/nix/store/5jsf99dd4p75qcha8clikb5z80rhyh4g-source?lastModified=1&narHash=sha256-xO8f7Qng%2B18FK2UlB9vcrkxCaQMCt5WjCH24aW/11eg%3D' (1970-01-01) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/ef34387ddd751e1ab8857adf4676492d32eb24ec?narHash=sha256-eiEK7cKZORNEvX0GeF3RtNEF/JXhgf2RqSp3230q13E%3D' (2026-09-13) → 'path:/nix/store/hhfnpma32czw4h3bqpag8dciax0bcmar-source?lastModified=1&narHash=sha256-eiEK7cKZORNEvX0GeF3RtNEF/JXhgf2RqSp3230q13E%3D' (1970-01-01) • Updated input 'systems': 'github:nix-systems/default/da67096a3b9bf56a91d16901293e51ba5b49a27e?narHash=sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768%3D' (2023-04-09) → 'path:/nix/store/yj1wxm9hh8610iyzqnz75kvs6xl8j3my-source?lastModified=1&narHash=sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768%3D' (1970-01-01) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/db947814a175b7ca6ded66e21383d938df01c227?narHash=sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM%3D' (2026-05-31) → 'path:/nix/store/ci7lj1kzv1qppll6m1f501p2dyl7l3vs-source?lastModified=1&narHash=sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM%3D' (1970-01-01) • Updated input 'voxtype': 'github:a-kenji/voxtype/29c9f93d12b98a6437684c283cdb232cf822cf66?narHash=sha256-dKoofIB9ZYdcpG8jr0X/lBWoTeARkfIN2CT1cRApzuw%3D' (2026-07-01) → 'path:/nix/store/yg87ffznajxicl05pa7q7cgaw7byl3xv-source?lastModified=1&narHash=sha256-dKoofIB9ZYdcpG8jr0X/lBWoTeARkfIN2CT1cRApzuw%3D' (1970-01-01) • Updated input 'voxtype/flake-utils': 'github:numtide/flake-utils/11707dc2f618dd54ca8739b309ec4fc024de578b?narHash=sha256-l0KFg5HjrsfsO/JpG%2Br7fRrqm12kzFHyUHqHCVpMMbI%3D' (2024-11-13) → 'path:/nix/store/01x5k4nlxcpyd85nnr0b9gm89rm8ff4x-source?lastModified=1&narHash=sha256-l0KFg5HjrsfsO/JpG%2Br7fRrqm12kzFHyUHqHCVpMMbI%3D' (1970-01-01) ✅ agent-skills.homeModule.testCliInstallIsOptional ✅ agent-skills.homeModule.testInstallsTheClisTheSkillNames ✅ agent-skills.homeModule.testLinkTargetIsTheSkillDirectory ✅ agent-skills.homeModule.testLinksEverySkillIntoEveryRoot ✅ agent-skills.homeModule.testSelectingSkillsNarrowsTheLinks evaluation warning: lib.nixos.evalModules is experimental and subject to change. See nixos/lib/default.nix ✅ agent-skills.nixosHarnesses.testDefaultRootIsTheOnePiAndOmpShare ✅ agent-skills.nixosHarnesses.testInstallsHarnessesAndSkillClis ✅ agent-skills.nixosHarnesses.testLinkPlanCoversEverySkill ✅ agent-skills.nixosHarnesses.testLinkTargetIsTheSkillDirectory ✅ agent-skills.nixosHarnesses.testUserUnitStartsWithTheSession ✅ agent-skills.package.testBundleUnionsEveryCli ✅ agent-skills.package.testDiscoversEverySkillDirectory ✅ agent-skills.package.testSkillCarriesItsClis ✅ agent-skills.package.testSkillNameMatchesAttribute ✅ build-resources.testBaseProfile ✅ build-resources.testConsumerOverride ✅ build-resources.testInstallerMedium ✅ build-resources.testInstallerTarget ✅ cosmic-binds.testDefaultRendersSpawnBinds ✅ cosmic-binds.testDisableMasksUpstream ✅ cosmic-binds.testModKeyAltMovesOnlySModChords ✅ cosmic-binds.testUserBindAppendsAfterModelBinds ✅ cosmic-desktop.dock.testFavoritesShipHighPriority ✅ cosmic-desktop.indicator.testAbsentWithoutCosmic ✅ cosmic-desktop.indicator.testExecStartRunsTheIndicatorPackage ✅ cosmic-desktop.indicator.testPathCarriesTheToggleWrapper ✅ cosmic-desktop.indicator.testRunsWithTheGraphicalSession ✅ distro-branding.testBaseProfile ✅ distro-branding.testConsumerOverride ✅ distro-branding.testInstallerTarget ✅ docs-snippets.testEveryMarkerIsKnown evaluation warning: stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead evaluation warning: stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead ✅ docs-snippets.testEverySnippetEvaluates ✅ hermes.firewall.testChainOrdering ✅ hermes.firewall.testChainRules ✅ hermes.firewall.testChainTeardown ✅ hermes.firewall.testKeepsFirewallOptionsEmpty ✅ hermes.firewall.testNftablesHostEvaluates ✅ hermes.firewall.testNftablesReapplyEdge ✅ hermes.guards.testDuplicateDashboardPort ✅ hermes.guards.testExposedDashboardRejected ✅ hermes.guards.testModelPinRejected ✅ hermes.guards.testStockHostStaysQuiet ✅ hermes.guest.testIdentity ✅ hermes.hostPorts.testEqualPriorityConflicts ✅ hermes.hostPorts.testGuestWiring ✅ hermes.hostPorts.testNoEntryNoRule ✅ hermes.hostPorts.testOperatorSettingsWin ✅ hermes.hostPorts.testSlirpAliasPublished ✅ hermes.identity.testAlice ✅ hermes.identity.testBob ✅ hermes.identity.testGuestUid ✅ hermes.launcher.testDesktopAutostartsWithTheSession ✅ hermes.launcher.testDesktopEntryNotifiesOnFailure ✅ hermes.launcher.testNoAutostartWithoutTheModule ✅ hermes.llamaSwap.testBothModelSources ✅ hermes.llamaSwap.testLocalModel ✅ hermes.llamaSwap.testNoModelSource ✅ hermes.migration.testPluginsAndToolsReachGuest ✅ hermes.native.testAgentEnv ✅ hermes.native.testDashboard ✅ hermes.native.testEnvBlockWinsAfterFlip ✅ hermes.native.testFirewall ✅ hermes.native.testFirewallGatesNativePorts ✅ hermes.native.testGuestKeepsSimplexPort ✅ hermes.native.testGuestSandboxEnv ✅ hermes.native.testNoVm ✅ hermes.native.testPublicPortsAreRootHeld ✅ hermes.native.testRunnerGuards ✅ hermes.native.testShim ✅ hermes.native.testSpacesMcp ✅ hermes.native.testTmpfiles ✅ hermes.native.testTwoNativeUsersRunSimplex ✅ hermes.native.testUnits ✅ hermes.nixosConfig.testAConfigRepoGrantsNoNixInTheGuest ✅ hermes.nixosConfig.testAcceptsADottedConfigDir ✅ hermes.nixosConfig.testAnApplyRepoGrantsTheMountAndTheEnv ✅ hermes.nixosConfig.testAnApplyRepoStaysInItsOwnersGuest ✅ hermes.nixosConfig.testConfigRepoCheckIsWiredAndNamesBothOptions ✅ hermes.nixosConfig.testDefaultOff ✅ hermes.nixosConfig.testDerivedVsockPortsAreDistinct ✅ hermes.nixosConfig.testRejectsHomeAsConfigDir ✅ hermes.nixosConfig.testRejectsUnsafeConfigDir ✅ hermes.nixosConfig.testScopedToTheUserWhoEnabledIt ✅ hermes.nixosConfig.testShareIsWritableIdMappedAndPathIdentical ✅ hermes.openrouter.testGuestKeepsUpstreamModel ✅ hermes.openrouter.testHostWiring ✅ hermes.provisioning.testHostOptOut ✅ hermes.provisioning.testUserOptOut ✅ hermes.recovery.testAFailedStartQueuesARecovery ✅ hermes.recovery.testTheRecoverUnitStartsTheVm ✅ hermes.remoteAccess.testDisabledHostAuthorizesNobody ✅ hermes.remoteAccess.testGlobalForceCommandRejected ✅ hermes.remoteAccess.testKeyEntryIsRestrictedToTheDashboard ✅ hermes.remoteAccess.testLocalOnlyHostAuthorizesNobody ✅ hermes.remoteAccess.testPermitopenFollowsAMovedPort ✅ hermes.remoteAccess.testRemoteHostStaysQuiet ✅ hermes.remoteAccess.testSshdReadsTheHermesKeys ✅ hermes.searxng.testAbsentWhenDisabled ✅ hermes.searxng.testGuestWiring ✅ hermes.shares.testIdMappedInsteadOfAcl ✅ hermes.signal.testHermesChannelPinnedOff ✅ hermes.signal.testOperatorOverrideWins ✅ hermes.simplex.testAbsentWhenDisabled ✅ hermes.simplex.testAddressUnitRetries ✅ hermes.simplex.testDaemonUnit ✅ hermes.simplex.testGuestWiring ✅ hermes.simplex.testGuestWsUrl ✅ hermes.simplex.testHostQrTool ✅ hermes.skills.testBundledMapsPinnedOff ✅ hermes.skills.testMcpDiscoveryWaitsForTheGateway ✅ hermes.skills.testOperatorEntryMergesBeside ✅ hermes.vsock.testDashboardForward ✅ hermes.vsock.testSpacesBridge ✅ hermes-clan-service.client.testAlicePorts ✅ hermes-clan-service.client.testDeclaresNoMicrovmOption ✅ hermes-clan-service.client.testDialsTheServer ✅ hermes-clan-service.client.testHermesRunsRemoteLauncher ✅ hermes-clan-service.client.testHostGuardStaysQuiet ✅ hermes-clan-service.client.testInstallsRemoteLauncher ✅ hermes-clan-service.client.testTunnelStartsOnDemand ✅ hermes-clan-service.clientKey.testDeclaresOneKeyPerUser ✅ hermes-clan-service.clientKey.testIdentityFileComesFromTheGenerator ✅ hermes-clan-service.clientKey.testKeyIsSharedAndOwnedByAlice ✅ hermes-clan-service.dualRole.testOwnServerSkipsForward ✅ hermes-clan-service.dualRole.testPinnedHostSkipsForward ✅ hermes-clan-service.forwardScript.testCarriesTheSshOverride ✅ hermes-clan-service.forwardScript.testDialsTheDefaultServer ✅ hermes-clan-service.forwardScript.testResolvesAlicePorts ✅ hermes-clan-service.guards.testDuplicateLocalPortRejected ✅ hermes-clan-service.guards.testTwoServersNeedNaming ✅ hermes-clan-service.guards.testUnknownServerRejected ✅ hermes-clan-service.knownHosts.testClientPinsTheServersCommittedKey ✅ hermes-clan-service.knownHosts.testNoVarsWarnsAboutTheMissingHostKey ✅ hermes-clan-service.knownHosts.testSettingsOverrideTheClanVar ✅ hermes-clan-service.provisioning.testClientOptOut ✅ hermes-clan-service.provisioning.testServerOptOut ✅ hermes-clan-service.server.testDashboardStaysOnLoopback ✅ hermes-clan-service.server.testDeclaresNoClanVars ✅ hermes-clan-service.server.testExposedDashboardRejected ✅ hermes-clan-service.server.testHermesRunsLocalApp ✅ hermes-clan-service.server.testLoopbackGuardStaysQuiet ✅ hermes-clan-service.server.testRunsAgentVms ✅ hermes-clan-service.serverAuthorizedKeys.testEntryAuthorizesOnlyTheHermesKey ✅ hermes-clan-service.serverAuthorizedKeys.testEntryIsARealFile ✅ hermes-clan-service.serverAuthorizedKeys.testNoVarsAuthorizesNobody ✅ hermes-clan-service.serverAuthorizedKeys.testPermitopenFollowsAMovedPort ✅ hermes-clan-service.serverAuthorizedKeys.testServerDeclaresNoKeyOfItsOwn ✅ hermes-clan-service.serverAuthorizedKeys.testSshdReadsTheHermesKeysBesideItsOwn ✅ hermes-clan-service.sshOverride.testHostAndOptions ✅ hermes-clan-service.sshdPolicy.testAllowUsersWarns ✅ hermes-clan-service.sshdPolicy.testBreakingPoliciesAreNamed ✅ hermes-clan-service.sshdPolicy.testStockServerStaysQuiet ✅ inference.credentials.testBothProviders ✅ inference.credentials.testSecretEnv ✅ inference.guards.testKeyFileRequired ✅ inference.guards.testOffLeavesNoProvider ✅ inference.model.testBeatsLlamaSwap ✅ inference.model.testSeed ✅ inference.provider.testBlock ✅ inference.provider.testGuestConfig ✅ installer-text-iso.agent.testEndpointAndModel ✅ installer-text-iso.agent.testProviderBlock ✅ installer-text-iso.medium.testCompressedSwap ✅ installer-text-iso.medium.testConsoleFontHasCyrillic ✅ installer-text-iso.medium.testConsoleThemeIsLightOne ✅ installer-text-iso.medium.testOmpExtensionsStaged ✅ installer-text-iso.medium.testToolActivityToggle ✅ installer-text-iso.target.testKeylessBuildStaysEmpty ✅ installer-text-iso.target.testKeysTravel ✅ installer-text-iso.target.testReferenceHostMirrorsGeneratedHermes ✅ installer-text-iso.target.testStagesTargetClosure ✅ llama-swap-auth.apiKeyEnvFile.testKeyGatesTheServer ✅ llama-swap-auth.apiKeyEnvFile.testUnsetLeavesDefaultAllow ✅ llama-swap-external-config.bundledCatalog.testShipsG9v3OverRuntimeFetch ✅ llama-swap-external-config.externalConfigFile.testFileReplacesTheCatalog ✅ nix-module.testGitInSystemProfile ✅ noctalia-bar-position.barPosition.testDefaultPinsTop ✅ noctalia-bar-position.barPosition.testOptionPinsBottom ✅ noctalia-bar-position.wiring.testBottomMergeScriptRendersTheSettings ✅ noctalia-bar-position.wiring.testDefaultMergeScriptRendersTheSettings ✅ pi-chat-options-removed.removedOptions.testBashConfirmAllowPatterns ✅ pi-chat-options-removed.removedOptions.testExtensions ✅ pi-chat-options-removed.removedOptions.testPiSettings ✅ pi-chat-options-removed.removedOptions.testSandboxAllowedPaths ✅ pi-chat-options-removed.removedOptions.testSandboxEnv ✅ pi-chat-options-removed.removedOptions.testSkills ✅ pi-chat-options-removed.renameShims.testOpenrouterPathsSurvive ✅ proton.bindPorts.testBothSandboxesDialTheSamePorts ✅ proton.bindPorts.testMcpSandboxMayNotBind ✅ proton.bindPorts.testSetupSandboxMayBindTheBridgePorts ✅ proton.bindPorts.testTheDaemonBindsThemToo ✅ proton.grantedPathsExist.testConfinedDaemonPreCreatesItsWritableGrants ✅ proton.grantedPathsExist.testMcpAndSetupPreCreateTheirWritableGrants ✅ proton.grantedPathsExist.testOnlyWritableGrantsArePreCreated ✅ proton.lifecycle.testTheDaemonIsParkedForSetup ✅ proton.stateRoot.testConfinedDaemonCarriesTheStatePin ✅ proton.stateRoot.testEveryConsumerNamesOneRoot ✅ proton.unitIsolation.testEachUnitLowersItsOwnPolicyFile ✅ proton.unitIsolation.testSetupTwinOwnsItsRuntimeState ✅ searxng.seam.testHostPortsEntry ✅ searxng.seam.testNoEntryWhenDisabled ✅ searxng.secret.testEnvironmentFile ✅ searxng.secret.testGeneratorUnit ✅ searxng.secret.testNoSecretInSettings ✅ searxng.server.testDesktopImportEnables ✅ searxng.server.testDisableWins ✅ searxng.server.testJsonFormat ✅ searxng.server.testLoopbackOnly ✅ searxng.server.testPortMovesEverywhere ✅ spaces-integration-gateway.confirmCommand.testArgvIsTheStandalonePopup ✅ spaces-integration-gateway.sessionDisplayLookup.testUnitPathResolvesSystemctl ✅ spaces-integrations.alwaysListed.testEveryShippedIntegrationMaterialises ✅ spaces-integrations.alwaysListed.testNixosIsOffWithoutATarget ✅ spaces-integrations.bareExtraService.testBackingUnitGetsLifecycleOnly ✅ spaces-integrations.bareExtraService.testNothingIsConfined ✅ spaces-integrations.bareExtraService.testSocketWantsTheNamedUnit ✅ spaces-integrations.broker.testBrokerUnit ✅ spaces-integrations.confinedExtraService.testBridgeEnvironmentIsTheManifestOnly ✅ spaces-integrations.confinedExtraService.testBridgeIsResidentAndRestarted ✅ spaces-integrations.confinedExtraService.testBridgeOwnsItsStateThroughExtraPaths ✅ spaces-integrations.confinedExtraService.testBridgePolicyIsBuiltPreStart ✅ spaces-integrations.confinedExtraService.testBridgeRunsUnderLandlockExec ✅ spaces-integrations.confinedExtraService.testBridgeSharesTheServerHardening ✅ spaces-integrations.confinedExtraService.testBridgeUnitSectionFoldsBothGates ✅ spaces-integrations.confinedExtraService.testDefinitionCarriesUnitNamesOnly ✅ spaces-integrations.confinedExtraService.testSocketWantsTheBackingUnit ✅ spaces-integrations.definition.testBindPortsSurfacedInTheDefinition ✅ spaces-integrations.definition.testEnableByDefaultSurfacedInTheDefinition ✅ spaces-integrations.definition.testGithubDefinitionCarriesThePosture ✅ spaces-integrations.definition.testGithubDefinitionCarriesThePrompts ✅ spaces-integrations.localIntegration.testNotesUnitIsSocketOnly ✅ spaces-integrations.mcpUnit.testDirectoriesAndCredentials ✅ spaces-integrations.mcpUnit.testPolicyAndShareArePreparedPreStart ✅ spaces-integrations.mcpUnit.testSameUidHardening ✅ spaces-integrations.mcpUnit.testServerRunsUnderLandlockExec ✅ spaces-integrations.mcpUnit.testSharedDirIsExportedAndTmpdirIsNot ✅ spaces-integrations.mcpUnit.testSocketPath ✅ spaces-integrations.moduleWiring.testDefinitionIsWiredIntoEtc ✅ spaces-integrations.moduleWiring.testDisabledModuleDeclaresNoUnits ✅ spaces-integrations.offlineWikiHome.testZimDirIsPerUser ✅ spaces-integrations.policySpec.testBindPortsReachTheSpec ✅ spaces-integrations.policySpec.testExtraPathsRideVerbatim ✅ spaces-integrations.policySpec.testSpecWithoutExtraPathsIsOnlyThePortLists ✅ spaces-integrations-managed.credentials.testFieldBearingUnitLoadsConfigThenManagedDir ✅ spaces-integrations-managed.credentials.testFieldLessUnitLoadsOnlyTheManagedDir ✅ spaces-integrations-managed.stager.testStagerRunsOnceAtBoot ✅ spaces-integrations-managed.stager.testStagerScriptStagesTheWholeTree ✅ spaces-integrations-managed.validation.testLiteralSecretIsATypeError ✅ spaces-integrations-managed.validation.testMissingRequiredConfigFieldRejected ✅ spaces-integrations-managed.validation.testMissingRequiredSecretRejected ✅ spaces-integrations-managed.validation.testNonNormalUserRejected ✅ spaces-integrations-managed.validation.testProfilesOnFieldLessIntegrationRejected ✅ spaces-integrations-managed.validation.testUnknownIntegrationRejected ✅ spaces-integrations-managed.validation.testUnknownUserRejected ✅ spaces-integrations-schema-sync.definition.testNoneLeaksACommandLine ✅ spaces-integrations-schema-sync.fixture.testNixosLowered ✅ spaces-integrations-schema-sync.fixture.testOfflineWikiLowered ✅ spaces-integrations-schema-sync.posture.testEveryPostureNameStillShips ✅ spaces-integrations-schema-sync.posture.testReadOnlyAllowlistHolds ✅ spaces-integrations-schema-sync.readme.testDefinitionCarriesThePath ✅ spaces-integrations-schema-sync.readme.testEveryIntegrationShipsOne ✅ spaces-integrations-schema-sync.schemaSingleSourcing.testEveryIntegrationMatchesItsSchema ✅ spaces-integrations-setup.definition.testGithubDefinitionHasNoSetup ✅ spaces-integrations-setup.definition.testSignalDefinitionCarriesSetupFields ✅ spaces-integrations-setup.mainSocket.testGithubSocketCarriesNoExtraDeps ✅ spaces-integrations-setup.mainSocket.testSignalSocketWantsExtraServices ✅ spaces-integrations-setup.mkDefaultDiscipline.testOverridingOneSubOptionKeepsTheRest ✅ spaces-integrations-setup.moduleWiring.testGithubEmitsNoTwin ✅ spaces-integrations-setup.moduleWiring.testPartOfInjectedOntoEveryExtraService ✅ spaces-integrations-setup.moduleWiring.testTwinUnitsReachSystemdOnlyForSetupIntegrations ✅ spaces-integrations-setup.setupTwin.testSetupSocketIsPrivateAndNotAutoStarted ✅ spaces-integrations-setup.setupTwin.testSignalEmitsTwinUnits ✅ spaces-integrations-setup.setupTwin.testTwinOwnsItsRuntimeStateAndPolicy ✅ spaces-integrations-setup.setupTwin.testTwinReusesTheServerSandbox ✅ spaces-integrations-setup.setupTwin.testTwinRunsItsOwnCommand ❌ spaces-nixos-apply.manifest.testAbsentWithoutRepos /build/nix-6-1217976847/expected.nix --- Nix 1 { integration = true; path = false; r 1 { integration = false; path = false; . unner = false; } . runner = false; } ✅ spaces-nixos-apply.manifest.testApplyCarriesItsPreviewAndNoNetwork ✅ spaces-nixos-apply.manifest.testArrivesEnabled ✅ spaces-nixos-apply.manifest.testAutoRunCoversCheckAndStatus ✅ spaces-nixos-apply.manifest.testCarriesNoConfigAndNoSecretField ✅ spaces-nixos-apply.manifest.testGrantsTheApplyDirAndNothingElse ✅ spaces-nixos-apply.refusals.testRejectsACheckResolvedOnPath ✅ spaces-nixos-apply.refusals.testRejectsACommandResolvedOnPath ✅ spaces-nixos-apply.refusals.testRejectsAGlobInAMachineName ✅ spaces-nixos-apply.refusals.testRejectsAGlobInARepoName ✅ spaces-nixos-apply.refusals.testRejectsARelativeRepoPath ✅ spaces-nixos-apply.refusals.testRejectsARepoWithNoMachine ✅ spaces-nixos-apply.refusals.testRejectsAnEmptyCommand ✅ spaces-nixos-apply.refusals.testTheDeclaredReposAreAccepted ✅ spaces-nixos-apply.targets.testEveryMachineBecomesAQualifiedTarget ✅ spaces-nixos-apply.units.testPathUnitWatchesTheRequestFile ✅ spaces-nixos-apply.units.testRunnerFindsSshAndTheSystemProfile ✅ spaces-nixos-apply.units.testRunnerRefusesToTimeOutOrReadStdin ✅ spaces-nixos-apply.units.testRunnerRoutesAPassphrasePromptToAskpass ✅ spaces-nixos-apply.units.testTheApplyDirIsSeeded ✅ spaces-noctalia.barUnit.testOnlyTheNoctaliaModuleDeclaresIt ✅ spaces-noctalia.commands.testWrappersOnPath ✅ spaces-noctalia.purge.testRunsOnUserActivation ✅ spaces-noctalia.purge.testTargetsOnlyRetiredSpacesIds ✅ spaces-signal.agentSurface.testOnlyTheIntegrationSocketsListen ✅ spaces-signal.bridge.testLifecycleIsGuiOnly ✅ spaces-signal.bridge.testRunsAfterTheDaemon ✅ spaces-signal.daemon.testExecStartRunsTheDaemonOnItsSocket ✅ spaces-signal.daemon.testLifecycleIsGuiOnly ✅ spaces-signal.daemon.testRuntimeSocketDirIsPrivate ✅ spaces-signal.daemon.testStopTimeoutIsShort ✅ spaces-signal.integrationLifecycle.testLinkPathUnitIsGone ✅ spaces-signal.integrationLifecycle.testSocketPullsBothBackendsWithoutOrderingThem ✅ spaces-signal.integrationsGuard.testEnableWithoutIntegrationsFails ✅ spaces-signal.messageStore.testStateDirIsCreatedUnconditionally ✅ spaces-signal.optOut.testDeclaresNoSignalUnits ✅ spaces-signal.package.testSupportsGuiQrLinking ✅ spaces-src.testDropsDevOnlyTrees ✅ spaces-src.testDropsLocalStateAndSecrets ✅ spaces-src.testKeepsTheSystemSources ✅ vm-openrouter-key-staging.keyStaging.testHostAutostartsTheHermesVm ✅ vm-openrouter-key-staging.keyStaging.testStagerRunsBeforeEveryVm ✅ voxtype-language-config.whisperLanguage.testDefaultStaysBareString ✅ voxtype-language-config.whisperLanguage.testListStaysList ✅ voxtype-nemotron-config.nemotron.testEngineDefaults ✅ voxtype-nemotron-config.nemotron.testStreamingAndTargetLangFlowThrough ✅ voxtype-user-override.cudaVariant.testWrapperKeepsCudaLibraries ✅ voxtype-user-override.wrapper.testUnitRunsTheWrapper ✅ voxtype-vad-config.vad.testEnergyBackendDefaults 😢 323/324 successful error: Tests failed