Merge pull request #465 from spacedriveapp/fix/imap-proto-vendor

Fix imap-proto build issues and update Nix dependencies

Author: vsumner

AGENTS.md

@@ -43,6 +43,32 @@ Additional rules:
 - For changes in async/stateful paths (worker lifecycle, cancellation, retrigger, recall cache behavior), include explicit race/terminal-state reasoning in the PR summary and run targeted tests in addition to `just gate-pr`.
 - Do not push if any gate is red.
 
+## Nix Flake Workflow
+
+### Frontend Dependencies
+
+When updating frontend dependencies in `interface/`:
+
+1. **Update deps:** Modify `interface/package.json` or `interface/bun.lock` as needed
+2. **Update the Nix hash:** Run `just update-frontend-hash`
+   - This builds the `frontend-updater` package with `fakeHash`
+   - Extracts the new hash from the build output
+   - Updates `nix/default.nix` automatically
+3. **Verify:** Run `nix build .#frontend` to confirm the build works
+4. **Commit:** Include both the dependency changes and the hash update in the same PR
+
+**Note:** The `just update-frontend-hash` command uses the `fakeHash` pattern (standard Nix practice) where the build intentionally fails to reveal the correct hash, which is then extracted and applied automatically.
+
+### Nix Flake Inputs
+
+To update all Nix flake inputs (nixpkgs, crane, etc.) and regenerate `flake.lock`:
+
+```bash
+just update-flake
+```
+
+This runs `nix flake update` and updates all inputs to their latest versions.
+
 ## Architecture Overview
 
 Five process types. Every LLM process is a Rig `Agent<SpacebotModel, SpacebotHook>`. They differ in system prompt, tools, history, and hooks.

flake.lock

@@ -35,6 +35,17 @@
             ./src
             ./migrations
             ./prompts
+            ./presets
+            ./docs/content
+            ./docs/README.md
+            ./docs/docker.md
+            ./docs/metrics.md
+            ./AGENTS.md
+            ./README.md
+            ./CHANGELOG.md
+            ./.cargo/config.toml
+            (pkgs.lib.fileset.maybeMissing ./interface/dist)
+            ./vendor
           ];
         };
 
@@ -66,11 +77,14 @@
           inherit pkgs craneLib cargoSrc runtimeAssetsSrc frontendSrc;
         };
 
-        inherit (spacebotPackages) frontend spacebot spacebot-full spacebot-tests;
+        inherit (spacebotPackages) frontend frontendNodeModules spacebot spacebot-full spacebot-tests;
       in {
         packages = {
           default = spacebot;
           inherit frontend spacebot spacebot-full;
+          # Updater for frontend deps - run this to get the correct hash after updating interface deps
+          # Usage: nix build .#frontend-updater 2>&1 | grep "got:" | awk '{print $2}'
+          frontend-updater = frontendNodeModules { hash = pkgs.lib.fakeHash; };
         };
 
         devShells = {
@@ -88,11 +102,10 @@
               openssl
               pkg-config
               onnxruntime
-              chromium
-            ];
+            ] ++ pkgs.lib.optionals pkgs.stdenv.isLinux [ pkgs.chromium ];
 
             ORT_LIB_LOCATION = "${pkgs.onnxruntime}/lib";
-            CHROME_PATH = "${pkgs.chromium}/bin/chromium";
+            CHROME_PATH = if pkgs.stdenv.isLinux then "${pkgs.chromium}/bin/chromium" else "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome";
             CHROME_FLAGS = "--no-sandbox --disable-dev-shm-usage --disable-gpu";
           };
 

flake.nix

@@ -53,3 +53,44 @@ desktop-dev:
 # Tauri's beforeBuildCommand handles sidecar bundling and frontend build automatically.
 desktop-build:
     cd desktop && bun run tauri:build
+
+# Update the frontend node_modules hash in nix/default.nix after updating interface dependencies.
+# Usage: Update interface/package.json or interface/bun.lock, then run: just update-frontend-hash
+update-frontend-hash:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    echo "Building frontend-updater to get new hash..."
+    output=$(nix build .#frontend-updater 2>&1 || true)
+    new_hash=$(echo "$output" | awk '/got:/ {print $2}' || true)
+
+    if [ -z "$new_hash" ]; then
+        echo "Error: Failed to extract hash from build output"
+        echo "Build output:"
+        echo "$output"
+        exit 1
+    fi
+
+    echo "New hash: $new_hash"
+
+    # Check if hash is already up to date
+    current_hash=$(grep -E 'hash \?' nix/default.nix | head -1 | sed -E 's/.*hash \? "([^"]+)".*/\1/')
+    if [ "$current_hash" = "$new_hash" ]; then
+        echo "Hash is already up to date!"
+        exit 0
+    fi
+
+    # Update the hash in nix/default.nix (POSIX-safe in-place edit)
+    tmpfile=$(mktemp)
+    sed -E "s|hash \? \"[^\"]+\"|hash ? \"$new_hash\"|" nix/default.nix > "$tmpfile"
+    mv "$tmpfile" nix/default.nix
+    echo "Updated nix/default.nix with new hash"
+    echo ""
+    echo "Next steps:"
+    echo "  1. Review the changes: git diff nix/default.nix"
+    echo "  2. Test the build: nix build .#frontend"
+    echo "  3. Commit the changes: git add nix/default.nix && git commit -m 'update: frontend node_modules hash'"
+
+# Update all Nix flake inputs (flake.lock).
+# Use this when you want to update dependencies like nixpkgs, crane, etc.
+update-flake:
+    nix flake update --extra-experimental-features "nix-command flakes"