Files
hermes-agent/hermes_cli
kshitijk4poor dcf0b4dfae refactor(profiles): one predicate decides what a distribution never writes
All three callers of _is_distribution_runtime_path had grown an
"or profile_path_is_private(...)"; fold the credential check into the
predicate (renamed _is_installer_owned_path, checked before the
single-part early return so root stores still match) and drop the ors.

Drop the always-true "not src.is_dir()" in
_refuse_store_ancestor_replacement (and its now-unused src arg): it is
only called for entries _merges_per_root rejected, which already merges
every store-ancestor directory. Share one _fold() between the two store
predicates.

Drop the PROFILE_CREDENTIAL_PATHS union from DEFAULT_EXPORT_EXCLUDE_ROOT:
its only consumer (scripts/, cli.py, hermes_cli/, tests/ grepped) is
USER_OWNED_EXCLUDE, whose both readers now go through
_is_installer_owned_path, which matches every root store case-folded.
The union changed no result and put credential names in the
infrastructure/runtime list.
2026-10-03 16:29:29 +05:30
..
…
…
…
…
…