From f2c3cb82ada9ff902bd2ccea7b3b60664a1b7ae6 Mon Sep 17 00:00:00 2001
From: ibbem <ibbem@ibbem.net>
Date: Tue, 27 Jan 2026 21:57:11 +0100
Subject: [PATCH 1/4] pass-git-helper,python3Packages.{hystack-ai,molecule}:
 Use a hook for the temporary home directory

The content of `env.HOME` is a string taken as verbatim value for the
home directory name. In particular, `env.HOME` isn't evaluated by bash.
Hence, `pass-git-helper`, `haystack-ai` and `molecule` created
unintended directories which ended up in the derivation. Now, they use a
temporary directory which doesn't end up in the derivation.

Note that haystack-ai is currently broken. Hence, I don't know if
setting `HOME` is actually necessary. In any case, it's misleading.
---
 pkgs/by-name/pa/pass-git-helper/package.nix             | 3 ++-
 pkgs/development/python-modules/haystack-ai/default.nix | 4 ++--
 pkgs/development/python-modules/molecule/default.nix    | 3 ++-
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/pkgs/by-name/pa/pass-git-helper/package.nix b/pkgs/by-name/pa/pass-git-helper/package.nix
index d5891066cc11..30cec7a4530b 100644
--- a/pkgs/by-name/pa/pass-git-helper/package.nix
+++ b/pkgs/by-name/pa/pass-git-helper/package.nix
@@ -2,6 +2,7 @@
   lib,
   python3Packages,
   fetchFromGitHub,
+  writableTmpDirAsHomeHook,
 }:
 
 python3Packages.buildPythonApplication (finalAttrs: {
@@ -20,7 +21,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
 
   dependencies = with python3Packages; [ pyxdg ];
 
-  env.HOME = "$TMPDIR";
+  nativeBuildInputs = [ writableTmpDirAsHomeHook ];
 
   pythonImportsCheck = [ "passgithelper" ];
 
diff --git a/pkgs/development/python-modules/haystack-ai/default.nix b/pkgs/development/python-modules/haystack-ai/default.nix
index 5a8249999456..fd9700dd0579 100644
--- a/pkgs/development/python-modules/haystack-ai/default.nix
+++ b/pkgs/development/python-modules/haystack-ai/default.nix
@@ -3,6 +3,7 @@
   buildPythonPackage,
   fetchFromGitHub,
   hatchling,
+  writableTmpDirAsHomeHook,
   boilerpy3,
   events,
   httpx,
@@ -103,6 +104,7 @@ buildPythonPackage rec {
 
   nativeBuildInputs = [
     hatchling
+    writableTmpDirAsHomeHook
   ];
 
   propagatedBuildInputs = [
@@ -131,8 +133,6 @@ buildPythonPackage rec {
     transformers
   ];
 
-  env.HOME = "$(mktemp -d)";
-
   optional-dependencies = {
     # all = [
     #   farm-haystack
diff --git a/pkgs/development/python-modules/molecule/default.nix b/pkgs/development/python-modules/molecule/default.nix
index 14c7a725c332..762c29351013 100644
--- a/pkgs/development/python-modules/molecule/default.nix
+++ b/pkgs/development/python-modules/molecule/default.nix
@@ -16,6 +16,7 @@
   testers,
   wcmatch,
   withPlugins ? true,
+  writableTmpDirAsHomeHook,
   molecule-plugins,
   yamllint,
 }:
@@ -61,7 +62,7 @@ buildPythonPackage rec {
     }).overrideAttrs
       (old: {
         # workaround the error: Permission denied: '/homeless-shelter'
-        HOME = "$(mktemp -d)";
+        nativeBuildInputs = old.nativeBuildInputs ++ [ writableTmpDirAsHomeHook ];
       });
 
   meta = {

From e8dc8d60be0486fbab6a9458fb85c90819bcf97c Mon Sep 17 00:00:00 2001
From: ibbem <ibbem@ibbem.net>
Date: Wed, 13 May 2026 15:06:43 +0200
Subject: [PATCH 2/4] pass-git-helper: 4.1.0 -> 4.3.0

---
 pkgs/by-name/pa/pass-git-helper/package.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/by-name/pa/pass-git-helper/package.nix b/pkgs/by-name/pa/pass-git-helper/package.nix
index 30cec7a4530b..36f755873c8d 100644
--- a/pkgs/by-name/pa/pass-git-helper/package.nix
+++ b/pkgs/by-name/pa/pass-git-helper/package.nix
@@ -7,14 +7,14 @@
 
 python3Packages.buildPythonApplication (finalAttrs: {
   pname = "pass-git-helper";
-  version = "4.1.0";
+  version = "4.3.0";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "languitar";
     repo = "pass-git-helper";
     tag = "v${finalAttrs.version}";
-    sha256 = "sha256-gMhTYIFNCrUm6YoOOesJcQScugQ/SawiyeXjRG3cpQY=";
+    sha256 = "sha256-/Brx86YRmSkSr00xj5B5J/bNBqknoXRwX9B6595dEwU=";
   };
 
   build-system = with python3Packages; [ setuptools ];

From 8e629613f4bd375fb47462ca98974f673b8cc2fb Mon Sep 17 00:00:00 2001
From: ibbem <ibbem@ibbem.net>
Date: Sun, 17 May 2026 17:14:33 +0200
Subject: [PATCH 3/4] maintainers: add ibbem

---
 maintainers/maintainer-list.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix
index 486a8a2c8d70..fa4e42ac9a3b 100644
--- a/maintainers/maintainer-list.nix
+++ b/maintainers/maintainer-list.nix
@@ -11270,6 +11270,12 @@
     githubId = 1031119;
     name = "Ian-Woo Kim";
   };
+  ibbem = {
+    name = "ibbem";
+    github = "ibbem";
+    githubId = 61984399;
+    email = "ibbem@ibbem.net";
+  };
   ibizaman = {
     email = "ibizapeanut@gmail.com";
     github = "ibizaman";

From 1028ac4309ff975e0178072e25692b11fab8b263 Mon Sep 17 00:00:00 2001
From: ibbem <ibbem@ibbem.net>
Date: Sun, 17 May 2026 17:15:20 +0200
Subject: [PATCH 4/4] pass-git-helper: add ibbem as maintainer

---
 pkgs/by-name/pa/pass-git-helper/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/pa/pass-git-helper/package.nix b/pkgs/by-name/pa/pass-git-helper/package.nix
index 36f755873c8d..1fb89e316f16 100644
--- a/pkgs/by-name/pa/pass-git-helper/package.nix
+++ b/pkgs/by-name/pa/pass-git-helper/package.nix
@@ -37,6 +37,7 @@ python3Packages.buildPythonApplication (finalAttrs: {
     license = lib.licenses.lgpl3Plus;
     maintainers = with lib.maintainers; [
       hmenke
+      ibbem
     ];
     mainProgram = "pass-git-helper";
   };