feat(hosts): add zcode and persist state directories

README.md

@@ -17,7 +17,7 @@
 - [Hosts](#hosts)
 - [Components](#components)
 - [Showcase](#showcase)
-- [Pain](#spent-weeks-on-this-system-configuration-)
+- [Pain](#spent-months-on-this-system-configuration-)
 
 ## Hosts
 
@@ -47,7 +47,7 @@
 ## Showcase
 
 | **Desktop**                                                                                                                 | **Tshell**                                                                                                                |
-| --------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------- |
+| :-------------------------------------------------------------------------------------------------------------------------: | :-----------------------------------------------------------------------------------------------------------------------: |
 | <img src="https://raw.githubusercontent.com/tuxdotrs/nix-config/refs/heads/main/assets/hyprland/desktop.png" width="100%">  | <img src="https://raw.githubusercontent.com/tuxdotrs/nix-config/refs/heads/main/assets/hyprland/tPanel.png" width="100%"> |
 | **Workflow**                                                                                                                | **Neovim**                                                                                                                |
 | <img src="https://raw.githubusercontent.com/tuxdotrs/nix-config/refs/heads/main/assets/hyprland/workflow.png" width="100%"> | <img src="https://github.com/user-attachments/assets/f881c672-8d77-43ec-b637-df5004c7d11f" width="100%">                  |

flake.nix

@@ -29,6 +29,16 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
+    trok = {
+      url = "github:tuxdotrs/trok";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    tfolio = {
+      url = "git+ssh://git@github.com/tuxdotrs/tfolio.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
     cyber-tux = {
       url = "git+ssh://git@github.com/tuxdotrs/cyber-tux.git";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -84,7 +94,6 @@
     voxtype.url = "github:peteonrails/voxtype/v0.7.5";
     opencode.url = "github:anomalyco/opencode";
     serpantinum.url = "github:ilyamiro/serpantinum";
-    trok.url = "github:tuxdotrs/trok";
+    llm-agents.url = "github:numtide/llm-agents.nix";
-    tfolio.url = "git+ssh://git@github.com/tuxdotrs/tfolio.git";
   };
 }

modules/flake/overlays.nix

@@ -1,6 +1,7 @@
 {inputs, ...}: {
   flake.overlays = {
     modifications = final: prev: {
+      omasnap = prev.callPackage ../../packages/omasnap.nix {};
       tnvim = inputs.tnvim.packages.${prev.stdenv.hostPlatform.system}.default;
       tshell = inputs.tshell.packages.${prev.stdenv.hostPlatform.system}.default;
       trok = inputs.trok.packages.${prev.stdenv.hostPlatform.system}.default;
@@ -14,6 +15,18 @@
       opencode-git = inputs.opencode.packages.${prev.stdenv.hostPlatform.system}.default;
       nix-index-small =
         inputs.nix-index-database.packages.${prev.stdenv.hostPlatform.system}.nix-index-with-small-db;
+
+      davinci-resolve = prev.davinci-resolve.override {
+        runCommandLocal = name: env: cmd:
+          if prev.lib.hasSuffix "-src.zip" name
+          then
+            prev.runCommandLocal name (env
+              // {
+                outputHash = "sha256-+3SB32EHpH9/0hM3h8CrO6f7V4ZAmxUFh3P8m6QDeO0=";
+              })
+            cmd
+          else prev.runCommandLocal name env cmd;
+      };
     };
 
     stable-packages = final: _prev: {
@@ -25,12 +38,17 @@
 
     nur = inputs.nur.overlays.default;
     copyparty = inputs.copyparty.overlays.default;
+    llm-agents = inputs.llm-agents.overlays.shared-nixpkgs;
   };
 
-  perSystem = {system, ...}: {
+  perSystem = {system, ...}: let
-    _module.args.pkgs = import inputs.nixpkgs {
+    pkgs = import inputs.nixpkgs {
       inherit system;
       overlays = builtins.attrValues inputs.self.overlays;
     };
+  in {
+    _module.args.pkgs = pkgs;
+
+    packages.omasnap = pkgs.omasnap;
   };
 }

modules/hm/desktop/brave.nix

@@ -4,7 +4,7 @@
     config,
     ...
   }: let
-    configDir = "${config.xdg.configHome}/BraveSoftware/Brave-Browser";
+    configDir = "${config.xdg.configHome}/BraveSoftware/Brave-Origin";
 
     extensionJson = ext: {
       name = "${configDir}/External Extensions/${ext.id}.json";
@@ -23,13 +23,15 @@
   in {
     programs.chromium = {
       enable = true;
-      package = pkgs.brave;
+      package = pkgs.brave-origin;
       commandLineArgs = [
         "--disable-features=WebRtcAllowInputVolumeAdjustment"
         "--force-device-scale-factor=1.0"
       ];
     };
 
+    home.packages = [pkgs.brave];
+
     home.file = builtins.listToAttrs (map extensionJson extensions);
   };
 }

modules/hm/desktop/hyprland.nix

@@ -30,6 +30,7 @@
       hyprshot
       wl-clipboard
       wl-screenrec
+      omasnap
       (writeShellScriptBin "hypr-screenshot" ''
         hyprshot -m region -r ppm - | satty --filename -
       '')

modules/hm/desktop/kitty.nix

@@ -0,0 +1,86 @@
+{
+  flake.modules.homeManager.desktop = {pkgs, ...}: {
+    programs.kitty = {
+      enable = true;
+      package = pkgs.kitty;
+
+      font = {
+        name = "JetBrainsMono Nerd Font";
+        size = 12.0;
+      };
+
+      shellIntegration.enableZshIntegration = true;
+
+      settings = {
+        background_opacity = "1.0";
+
+        enable_audio_bell = false;
+        confirm_os_window_close = 0;
+
+        cursor_trail = 3;
+
+        # Window
+        window_padding_width = 10;
+
+        foreground = "#f1f1f1";
+        background = "#0f0f0f";
+
+        # Borders
+        active_border_color = "#3d59a1";
+        inactive_border_color = "#101014";
+        bell_border_color = "#fffac2";
+
+        # Colors
+        color0 = "#0f0f0f";
+        color8 = "#a6accd";
+
+        color1 = "#d0679d";
+        color9 = "#d0679d";
+
+        color2 = "#5de4c7";
+        color10 = "#5de4c7";
+
+        color3 = "#fffac2";
+        color11 = "#fffac2";
+
+        color4 = "#89ddff";
+        color12 = "#add7ff";
+
+        color5 = "#fcc5e9";
+        color13 = "#fae4fc";
+
+        color6 = "#add7ff";
+        color14 = "#89ddff";
+
+        color7 = "#ffffff";
+        color15 = "#ffffff";
+
+        # Cursor
+        cursor = "#ffffff";
+        cursor_text_color = "#0f0f0f";
+
+        # Selection
+        selection_foreground = "none";
+        selection_background = "#28344a";
+
+        # URLs
+        url_color = "#5de4c7";
+
+        # Tab bar
+        tab_bar_edge = "bottom";
+        tab_bar_style = "fade";
+        tab_fade = "1";
+
+        active_tab_foreground = "#3d59a1";
+        active_tab_background = "#16161e";
+        active_tab_font_style = "bold";
+
+        inactive_tab_foreground = "#787c99";
+        inactive_tab_background = "#16161e";
+        inactive_tab_font_style = "bold";
+
+        tab_bar_background = "#101014";
+      };
+    };
+  };
+}

modules/hm/desktop/serpantinum.nix

@@ -25,11 +25,16 @@
           language = "en";
           weatherUnit = "metric";
           weatherInterval = 30;
+          avatarPath = "/home/tux/Wallpapers/tux.png";
+          muteSfx = true;
         };
 
         bar = {
           position = "top";
           style = "modular";
+          time = {
+            format = "hh:mm:ss A";
+          };
           width = 5;
           workspaceCount = 7;
           modules = {

modules/hm/desktop/theme.nix

@@ -4,7 +4,7 @@
       enable = true;
       package = pkgs.bibata-cursors;
       name = "Bibata-Modern-Ice";
-      size = 28;
+      size = 24;
     };
 
     qt = {

modules/hm/desktop/voxtype.nix

@@ -12,7 +12,14 @@
       service.enable = true;
       settings = {
         hotkey.enabled = false;
-        whisper.language = "en";
+        whisper = {
+          language = "en";
+          on_demand_loading = true;
+        };
+
+        parakeet = {
+          on_demand_loading = true;
+        };
       };
     };
   };

modules/hm/desktop/zed.nix

@@ -29,6 +29,25 @@
           diagnostics = false;
           metrics = false;
         };
+
+        agent = {
+          dock = "right";
+          favorite_models = [];
+          model_parameters = [];
+        };
+
+        collaboration_panel = {
+          button = false;
+        };
+
+        agent_servers = {
+          opencode = {
+            default_config_options = {
+              model = "opencode-go/deepseek-v4.1-flash";
+            };
+            type = "registry";
+          };
+        };
       };
     };
   };

modules/hm/shell/github.nix

@@ -0,0 +1,7 @@
+{
+  flake.modules.homeManager.shell = {
+    programs.gh = {
+      enable = true;
+    };
+  };
+}

modules/hm/shell/misc.nix

@@ -10,6 +10,77 @@
       dig
       lsof
       trok
+
+      (writeShellScriptBin "hm-override" ''
+        #!/usr/bin/env bash
+
+        set -euo pipefail
+
+        usage() {
+          echo "Usage:"
+          echo "  $0 <filename>              Override symlink"
+          echo "  $0 <filename> --restore    Restore symlink"
+          echo "  $0 <filename> -r           Restore symlink"
+          exit 1
+        }
+
+        if [[ $# -lt 1 || $# -gt 2 ]]; then
+          usage
+        fi
+
+        FILE="$1"
+        LINK_BACKUP="''${FILE}.backup-link"
+
+        # Restore
+        if [[ "''${2:-}" == "--restore" || "''${2:-}" == "-r" ]]; then
+          if [[ ! -f "$LINK_BACKUP" ]]; then
+            echo "Error: no backup symlink found: $LINK_BACKUP"
+            exit 1
+          fi
+
+          TARGET="$(cat "$LINK_BACKUP")"
+
+          # Remove the temporary override.
+          rm -f "$FILE"
+
+          # Restore the original symlink.
+          ln -s "$TARGET" "$FILE"
+
+          # Remove the temporary symlink target backup.
+          rm "$LINK_BACKUP"
+
+          echo "Restored: $FILE -> $TARGET"
+          exit 0
+        fi
+
+        # Override mode
+        if [[ ! -L "$FILE" ]]; then
+          echo "Error: $FILE is not a symlink"
+          exit 1
+        fi
+
+        if [[ -e "$LINK_BACKUP" ]]; then
+          echo "Error: backup already exists: $LINK_BACKUP"
+          echo "Restore the existing override before running again."
+          exit 1
+        fi
+
+        # Remember the original symlink target.
+        TARGET="$(readlink "$FILE")"
+        printf '%s\n' "$TARGET" > "$LINK_BACKUP"
+
+        # Copy the contents before removing the symlink.
+        cp "$FILE" "$FILE.tmp"
+
+        # Replace the symlink with a regular writable file.
+        rm "$FILE"
+        mv "$FILE.tmp" "$FILE"
+
+        chmod u+w "$FILE"
+
+        echo "Overridden: $FILE"
+        echo "Original:   $FILE -> $TARGET"
+      '')
     ];
   };
 }

modules/hm/shell/opencode.nix

@@ -7,7 +7,7 @@
         theme = "system";
       };
       settings = {
-        model = "opencode-go/kimi-k3";
+        model = "opencode-go/deepseek-v4.1-flash";
         provider = {
           google = {
             options = {
@@ -24,6 +24,11 @@
               apiKey = "{file:/run/secrets/opencode-go-api-key}";
             };
           };
+          zai-coding-plan = {
+            options = {
+              apiKey = "{file:/run/secrets/zai-coding-plan-api-key}";
+            };
+          };
         };
         plugin = ["@dietrichgebert/ponytail"];
       };

modules/hosts/alpha/config.nix

@@ -98,6 +98,11 @@
         owner = userName;
       };
 
+      zai-coding-plan-api-key = {
+        sopsFile = ./secrets.yaml;
+        owner = userName;
+      };
+
       netbird-key = {
         sopsFile = ./secrets.yaml;
         owner = userName;

modules/hosts/alpha/secrets.yaml

@@ -2,6 +2,7 @@ tux-password: ENC[AES256_GCM,data:tvx3nMoIuQSotxHDWLs7UesnyWY3u3EwkqAIzCw3Z2AJse
 gemini-api-key: ENC[AES256_GCM,data:Bo3Z5Jhce0UOBn77I2AcrXYbBgPLDx0eOjPC8J63E/VWNhMPbbxb,iv:iWOsTACOMcK3oqq848WnJ5Ku3tYy1aadmLB4IMgoyqg=,tag:BPzlXoP8/iJaj8c/YFCWyg==,type:str]
 openrouter-api-key: ENC[AES256_GCM,data:D+/ImUTg7UvBTh0fMlWMZ0O/GsQS/R4Hz+CO4l42R6mn+zk+udvw79BctXdWWyrFf2ZNOTJ/99QTtWOUOvHISWaEJogXyb+93g==,iv:c7OtgBu1Zaf7lA4InIsKOAPbAvTl3gaO7QGCFNx21Bo=,tag:KXiASj/qC1YzK6DUox57ug==,type:str]
 opencode-go-api-key: ENC[AES256_GCM,data:ipKkNcRqBERIQ6f6yFzVm999s+UwJys4elHWhzpL441RfOaG9MmRWMcD+wRLJ7DSWFjYu6uUPF7TKez8J6abWeKDgg==,iv:FDSYE3R8zKVxWiP2S/sCVcwEu3fEXg/hCeqCRSF+c6g=,tag:5RDuMFGMoN6xwAYj0HiyjQ==,type:str]
+zai-coding-plan-api-key: ENC[AES256_GCM,data:HrNfR+Ux/Iyt4qkD1uXzDFQb+l0ltMMrbRahEG3pofFbw98VXfRFbhspcxh9vEyqkw==,iv:lzkLxPV7Q38dn0IEgtchVMrvnVBz4e5q282704x/hmU=,tag:IKzE6Tp6D93nJHoEvCPGBQ==,type:str]
 netbird-key: ENC[AES256_GCM,data:NilfyafnGhFVYD6q4+jJQxlhXNdNC8BQ1CZfu8a5wc693Y1h,iv:Rpl0OpkQdBMPpIJ08t9Z0AjDAW6c97pFZKO1KPu8ipY=,tag:du3d0SQWuqJtJSwhSgJE4g==,type:str]
 cloudflare-credentials:
     email: ENC[AES256_GCM,data:K9L6H4dqNNgbCFg=,iv:jirDJb+Y2sXrup6/doRmOdd8tV7zLnttcgG75r4Fs04=,tag:XeyMVC+Q9TEuTxSfOeR2Uw==,type:str]
@@ -29,7 +30,7 @@ sops:
             4TkObqH8ddGpbd7cX5a/wboTjYuEdAviWxjK2oBPgtcFc1f03X3tmA==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1mzxxxzhy3us3rd960ufqv7vlxj5cnug86md6x69llg9ujzw2pqws057llf
-    lastmodified: "2026-08-07T20:02:00Z"
+    lastmodified: "2026-09-16T14:21:00Z"
-    mac: ENC[AES256_GCM,data:VrA2OPCcVvAzYjZTkHPxytclISP24P1FqiIQjSGQItkMLieom80N6933hB0Tdn3BM6600bHt2NweSqHjGx//pn2Gbur4pxeN3TpF9tKXc12IcAThUL9g48fMbk5y+kWWVUF1Pezod0YnzWAlalUXFqvKinfm4RqPNjDjndA/dcI=,iv:xfs9XD5ZIQ6dyMMZ8OE5FEs/hrSr/T2VwC7XvZ7xC2A=,tag:jYWo2kgwwltKB+njiYaPkQ==,type:str]
+    mac: ENC[AES256_GCM,data:Aqg1cboHKW5QrJooVIqgbHTFg9EpTEnfCv/RRSp0efzyXvDrR7eG5WTvJPE9IbrmS190yvOlT0fw1Bhzyr8kiyoO71sbyUessw5IMUGcLP+m2FNtt8osc7fSTGseojv3MXBndOMDEOpT+Clv6hbv/rr5eGbb05oK6rW97/pDDfU=,iv:s/9PAHHQ0mHQJosKGclSnumHqm6CG3fDVKD5eT4Q1Y0=,tag:3pgycAwYUz9aEOy4/aW30Q==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3

modules/hosts/arcturus/config.nix

@@ -25,6 +25,7 @@
               ".bun"
               ".rustup"
               ".config/sops"
+              ".config/nix"
               ".local/share/nvim"
               ".local/share/opencode"
               ".local/share/zsh"
@@ -80,6 +81,12 @@
           };
           configurePangolin = true;
         };
+
+        coder = {
+          enable = true;
+          domain = "coder.lab.tux.rs";
+          configurePangolin = true;
+        };
       };
 
       virtualisation = {
@@ -113,6 +120,11 @@
         owner = userName;
       };
 
+      zai-coding-plan-api-key = {
+        sopsFile = ./secrets.yaml;
+        owner = userName;
+      };
+
       netbird-key = {
         sopsFile = ./secrets.yaml;
         owner = userName;

modules/hosts/arcturus/secrets.yaml

@@ -3,6 +3,7 @@ discord-token: ENC[AES256_GCM,data:uzxkrNRRplL/1MfvPZ/EL+I8UACuZQBHZ95BSHuxW0nBj
 gemini-api-key: ENC[AES256_GCM,data:gLZSoYTdKY+rwIpYiXvN9n9PGkUD6q8Oe7dHnYkjEjwDf5qpjubg,iv:ySoNgQWTu9DjvbashF4ulyYP8fJUl4yrCTeBQ0jrGmw=,tag:FctubsQv50AP78JvTb9bpQ==,type:str]
 openrouter-api-key: ENC[AES256_GCM,data:6xONCl9lqOoO7b4CEyCz9607tICDUAkpglRjGS5nYq2ppg2UKqYTrWD1BGCA5Xfs/CWskniVhoNG3vscjKiYCCh9gbM6aqdmTQ==,iv:7Iwc9t00HOOBjA7URXcUO41badqYyJCkFHM/uPkLFxY=,tag:Cl39kitr2e0//HVwAdsdUQ==,type:str]
 opencode-go-api-key: ENC[AES256_GCM,data:dmeRKn7TWHnqvpyPQpcEG6yHTb2bRby/rh10ytL0jHj5R+lRmNVdmqUF92GTznY9vEaB6ZYCJecWhpm8g4upNfOWBg==,iv:9UMJpAlD8gpcNiN+liu3nawoAZQKapEg7sCp561N9E8=,tag:OZlASpOa5BQaQwFWjoLCRw==,type:str]
+zai-coding-plan-api-key: ENC[AES256_GCM,data:lLegmS/RIo7JoBoAyVdcS++rXS8W62cwz+zVsv4dPnlfjGFO/nVlI5InqC34sPxLRQ==,iv:BRC7eYVmdZuWwb+2k2FrnlJih63HXrcvhVp/K5t5td8=,tag:aP8x+Xcnkz2t0hn7erCkKw==,type:str]
 netbird-key: ENC[AES256_GCM,data:q6eKisca04qn/CvALrvXF79MsToDhvLRLv2JTiUBAZglCC9m,iv:jj0/ZD7IDgopprTVUgSfJmdAJmUP3iqewU3dqssGYbk=,tag:6IPRdCm2FGdlTEIX7jt3qA==,type:str]
 copyparty: ENC[AES256_GCM,data:QXt8IgTekg9rzFyuzpg=,iv:vJYfHqCiheq290K9TGACHNHyOWzIn60j1Kz502SE27w=,tag:ECt7Wavlqw1V6zgXiRZtUg==,type:str]
 newt: ENC[AES256_GCM,data:r5Rd81ZrzrIYbXtFkypbJltoGCOYrW6P4IpwGCtaH7lqCg7wD/WMboMx13HN4Mm0J4qbBpDakpfVv9qUTrisYP1xwpKkmY1kqPlFWRZN8hzuuNS2Tv3qUjavTp5XGotVPLHj1Cg/cwGcf8EAssYTwTy7H0PgdQKwqigQD1f1s/j4iXQ=,iv:1xP38/Ayt1xvn2fJGa5zgOrVNOw2J5taG1Orx6uNgZI=,tag:H9JXu9gzyyvTPWgXaoTsiw==,type:str]
@@ -27,7 +28,7 @@ sops:
             TLKEYsPQgOJ7s8P9gw2uPUY6HRz86CtiC6EbO27u0+8BbI85x1QScg==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1huqa3hc7wcxk4dpelrzny437nzrx4fnll3d8g9ahznzk268yju5qufapxy
-    lastmodified: "2026-08-12T13:48:51Z"
+    lastmodified: "2026-09-16T14:20:26Z"
-    mac: ENC[AES256_GCM,data:0GyC8VW0qoPaIcKfGKto8wDF64gDmiIhczok8oiJ0l5B7+ZUCVAKmWkMaXHyrU7kqg06WSiIixsnclEjIMxlyZVBOcfQaXeSO51uom/ax+4CfzxSGxgnpySarWRfCHgkcGUeO/eci5MzmZPgAHy7b8IBcJWzVUCS7XBIMMyYwNs=,iv:yUsltZZ1y4fzi3Kakwt/ji/J+r/P1/3mLEQqZiN2pm4=,tag:6Fwo34LOX+jCXF9DoYUv/A==,type:str]
+    mac: ENC[AES256_GCM,data:I33KZL3u+7jfOFu0qn4LVx2nACiURSd6RcEn0ojfT62yC/TcXlGGu4QeN1Dx4Nta77n/h8RzDTcZtiUJylLhiVBmqyMOoNaBOmLDJ+P1L7weYLoWMoaDP7IWyzttGkNTgvyv2nW5IxbdcTZwrcSlPtdupsJeNy76ATHO+eUsvGQ=,iv:FvQKGH5Vzm36huGDnMr15wQL9vsH2hsAhvu0BE/NfEI=,tag:fzAzzgmv3vjWs1VYhh4GeA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3

modules/hosts/canopus/config.nix

@@ -27,11 +27,14 @@
               ".bun"
               ".rustup"
               ".cache/awww"
+              ".cache/serpantinum"
               ".config/BraveSoftware"
               ".config/zed"
               ".config/Vencord"
               ".config/vesktop"
               ".config/sops"
+              ".config/nix"
+              ".config/coderv2"
               ".config/obs-studio"
               ".config/easyeffects"
               ".config/DankMaterialShell"
@@ -49,10 +52,18 @@
               ".local/share/GalaxyBudsClient"
               ".local/state/serpantinum"
               ".local/share/zed"
+
+              ".claude"
+              ".orca"
+              ".config/orca"
+              ".zcode"
+              ".config/ZCode"
             ];
 
             files = [
               ".wakatime.cfg"
+              ".claude.json"
+              ".config/gh/hosts.yml"
             ];
           };
         };
@@ -95,6 +106,11 @@
         owner = userName;
       };
 
+      zai-coding-plan-api-key = {
+        sopsFile = ./secrets.yaml;
+        owner = userName;
+      };
+
       netbird-key = {
         sopsFile = ./secrets.yaml;
         owner = userName;
@@ -132,6 +148,10 @@
       telegram-desktop
       galaxy-buds-client
       impala
+      llm-agents.claude-code
+      llm-agents.orca
+      llm-agents.zcode
+      coder
     ];
 
     # !!! DO NOT CHANGE THIS !!!

modules/hosts/canopus/secrets.yaml

@@ -2,12 +2,12 @@ tux-password: ENC[AES256_GCM,data:Xb4/JMAZCBnBheDCJdRRGXLnMJ1ej8HbN+AUqA/+2sdYES
 gemini-api-key: ENC[AES256_GCM,data:Q6+actg0oyUWiUJVy/9yZmea1QyGu2o8LfMsuAVFD6k7kp0dYIrl,iv:ukyouqrHxzVpBBE98KL6PW8P3j+seemm/e0Gl1urUcM=,tag:Z7MM3dJ414CmdxE72cdzNA==,type:str]
 openrouter-api-key: ENC[AES256_GCM,data:SalhWKR6artX/kOVKZGpKSmrgsQDU/heshrdkK3wotOZ3BRn/ZqZRBldvl1JPSenMAMvE2LWUdmBQmwG/id7L7JL1O/+lUHIQw==,iv:hLlHayFJgUkWOirVLfqP0pGRBZAqGKe+EE2yG1ELGNk=,tag:0qoo0tb+xWjjQXr4n1qGmw==,type:str]
 opencode-go-api-key: ENC[AES256_GCM,data:zbeTcaXJZFVfYnM/7sgblJFU9WfeosX/44KsXvrzKwiLPfGLLYYo9AFaCvWzzG6jHuSZC5OYrBWfOZv4+3omfCgglQ==,iv:LscUQE+PNhXGim9PSqc9nZIZichWSgAn/zsNxQ/HM/o=,tag:MaBCobnRM42fopiibibe5Q==,type:str]
+zai-coding-plan-api-key: ENC[AES256_GCM,data:osUoFOvBgu+PtNiTIDIm3JoxsBJnQ9I8zY//9oeTpJxIvMctSWYnT4GYP4oI5mClZg==,iv:z5qxUPomGF1avLyk8PrAS3t+34ZGlQMRjbxVJ4JH9Cc=,tag:Qbz/LYAMXejXU4RS3RUPqA==,type:str]
 netbird-key: ENC[AES256_GCM,data:swmaa+RjxeUmEl8hS2riGrW4lP5jdks9HM3x57/FLpOuqFtR,iv:MrpVjiocrPi+dBGPk7pwgSUNlJ1eryRpMjC8+jkU+T0=,tag:j6sqpQ02apqc6FwkdDvk9g==,type:str]
 vicinae-json: ENC[AES256_GCM,data:FarBf6l8pl3hF7kGKPIWztUhwiKoQXmyTufCuJ120K/bPh1Bfiyi+ETt4DLYOGI6FJXfpVz4BbZOA29bXTLhVPxH0QtyBu/F5uEqA015b/c8VevDJSyy9huR13qO9ksLbMBt8RfWbAd9j26t7A1C8/mMyiJOEXCCTV9CEIW3xWrsYmhwsT8RYM+PwrPSeN1gQXHSMyRUjf/kOdJoda8+iXpLfjo4II4r2ELpbqi8QxhrRdsJsoOfAymFM784NtlTjE+h6S4TMehmoF/9ARif6I5SGQ0WfIKt/8orTGCPllL+NupLziSnpIGRGSybdArD+o5NCw59GOAbVRADxq8rCESwEkq3cF+hm8HabfYbiQ==,iv:Y/hXLFTJT3gNF3B6tgKoAh7njVuneoUzjVTlsCZiySw=,tag:2hfrwph6IccJdRu/yGu3XA==,type:str]
 sops:
     age:
-        - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
+        - enc: |
-          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqS2RZdVJaNTlRamZPMkll
             MDRVSVl1b2x2LzZpdlBrdmZtdyt3UE15RldRCldXUXE2a1BFeHg5NGNPbW5IMDht
@@ -15,8 +15,8 @@ sops:
             bThQTFdZU29ISm93TWcwVk5ZTkhRWm8KCcprmLGhahgDkXCBpzjctHgao+gc+rKC
             xLIwheUyFJOGK+ixqcdoZ/PC0kY68hVLt1YzLAyxFi4Ur1wltPrNug==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1x36yr8h993srfj29sfpzt4wyz52nztvncpmhgmfs0j26qvfecq3qvcm0an
+          recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGVW13WFE1Ylh3Uk1HNU1i
             bU9kRzFqTmhkQlRzMlRkM0VhMlNmMDUyK25NCkZYUStxM2tScGozRXJGekxGa1RX
@@ -24,7 +24,8 @@ sops:
             V1N3eUVjZ0VZRjBZdXRPNng3Y3JoUTAKQau9CG9XfvM+5JZVRwaJr/o/sXMaJiy2
             wo2YcDb+4vfT4Wr+/8J3ccQgbLRZH916X5ZPL+A+nFyVXVKOCl3ENg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-12T06:33:00Z"
+          recipient: age1x36yr8h993srfj29sfpzt4wyz52nztvncpmhgmfs0j26qvfecq3qvcm0an
-    mac: ENC[AES256_GCM,data:htDJdEx34Q5NG8vwbBimnFENZawbLZ4FC0DkyG6J5RYP0BFnycKcKGsYR87SvIjcJZXvfZ0e6fXdtc78dd6I0sQtrQ7aNn4Iktbu/AkPmntsBwpIjVI99X9zUyQB87go/oX15yuyt8loB6ds2RkL/pfFsgLbFc10JHsBy+WcEzI=,iv:HvY+5LYzyHpRm8XCSKrN8ra/LJT9v23TPSsZg/4QVNU=,tag:k+d45+zgBYq4vlWmmc8ZkQ==,type:str]
+    lastmodified: "2026-09-16T14:20:36Z"
+    mac: ENC[AES256_GCM,data:mhJvvn/+VBfNrP1pXRweLSNVlHq9/DLDcKQv8k9ZVsEcd077ifEAqduOXVKXcXDM0VTuBzArw9hmih+kZbCHoUZAQrk8LF7FC4a4FFwXG9p45uKWbUloTuq5w3MCxyU8IoyiAufZcWUlYFQjZ8K4n8N0bVrGQGHogemnrBXTUIo=,iv:H3tKQOuIe/pEIp0pUWCSar8VDompXNZ4BZfD1Wg4pb0=,tag:lyPR4Prlal1bpSRLmGfy7A==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.12.2
+    version: 3.13.3

modules/hosts/sirius/config.nix

@@ -23,15 +23,18 @@
           home = {
             directories = [
               "Distrobox"
+              ".steam"
               ".bun"
               ".rustup"
-              ".steam"
               ".cache/awww"
+              ".cache/serpantinum"
               ".config/BraveSoftware"
               ".config/zed"
               ".config/Vencord"
               ".config/vesktop"
               ".config/sops"
+              ".config/nix"
+              ".config/coderv2"
               ".config/obs-studio"
               ".config/easyeffects"
               ".config/DankMaterialShell"
@@ -46,13 +49,22 @@
               ".local/state/lazygit"
               ".local/share/vicinae"
               ".local/share/TelegramDesktop"
+              ".local/share/GalaxyBudsClient"
               ".local/state/serpantinum"
               ".local/share/zed"
+
+              ".claude"
+              ".orca"
+              ".config/orca"
+              ".zcode"
+              ".config/ZCode"
             ];
 
             files = [
               ".wakatime.cfg"
               ".config/lan-mouse/lan-mouse.pem"
+              ".claude.json"
+              ".config/gh/hosts.yml"
             ];
           };
         };
@@ -95,6 +107,11 @@
         owner = userName;
       };
 
+      zai-coding-plan-api-key = {
+        sopsFile = ./secrets.yaml;
+        owner = userName;
+      };
+
       netbird-key = {
         sopsFile = ./secrets.yaml;
         owner = userName;
@@ -130,7 +147,12 @@
     environment.systemPackages = with pkgs; [
       davinci-resolve
       telegram-desktop
+      galaxy-buds-client
       impala
+      llm-agents.claude-code
+      llm-agents.orca
+      llm-agents.zcode
+      coder
     ];
 
     # !!! DO NOT CHANGE THIS !!!

modules/hosts/sirius/secrets.yaml

@@ -2,12 +2,12 @@ tux-password: ENC[AES256_GCM,data:JWQVd2MYX2U4UP4II62ixG9hWI5MtgHAFhl8aCmyrYPl1H
 gemini-api-key: ENC[AES256_GCM,data:Y9YgXp/tB3Q1Rb5YMsZLgWCq+bdeIjsXAVeO3Yh7nZ8MwDH7d5De,iv:FIXxJCn6JDYsHIoNn8f8Un3z9ZPVbxdjR48Ux88poRg=,tag:bMJ4i69HTspnhzsrsxkbrw==,type:str]
 openrouter-api-key: ENC[AES256_GCM,data:HfZgZz4NyCLLM9woTZp2I6JGOlVcFblw2OMjx8k0TG5ZU2ycBCF6bKqp3wFibUxXcHy+nIfjI82fkLeSyIaGILRLYCJCc8BHKw==,iv:umUcn8MRaj7JXo6IFrGMXOu+jsFSCEikMxsQxfaFS/Q=,tag:l2s61C4EpJoKv8cc9nYGFA==,type:str]
 opencode-go-api-key: ENC[AES256_GCM,data:BGERcZg5Jpnznc4cXeYFMhPk9kKBkd9GvIuQBV9TW3JE1utgrLLYK6mKNCQqrEStRFiO2jUUnBm3opUNL4SuEHFLpw==,iv:fgFAwx6z9yruK27PvAJX/Q2CS9gU+LJ5zMUK/f/rzpo=,tag:BPu3M+jppPB8sLoLmfuY/Q==,type:str]
+zai-coding-plan-api-key: ENC[AES256_GCM,data:u5RHaBq5WHit+GjcKYnr6vN7jkputBtt3G0lCNBciMgBnBzIcZd/JjJcNaKXfbal5w==,iv:x+mG1aoct7yfm4Hvu1mMqBq8MiF8UZbQ8SFjA99qTIw=,tag:9cEIO2tuhqE6df2M2N/R+g==,type:str]
 netbird-key: ENC[AES256_GCM,data:qXAnRnLM2TlzpOvWG4exJv0+pUvpe0FpRN5xOWx3+KNt+yhq,iv:X+yl4o1RSYMCMWdVXo1hpzy+6IdKXUpsKPtYNSiHiCY=,tag:I8HbnD5iw6EJ1TdsNrhvfw==,type:str]
 vicinae-json: ENC[AES256_GCM,data:JjxolEgS6uakqR4eHOx3VyrOO5kaL4dj1jcEiLWsrktCU32UB7OmP1kJEVomA1rZjODpFHL89+FRpcNFspTFrc365WlANE81RLg/M2Ja1MiLYaDFNcBGtqMX9Yc1muor53Xl7t+rTSvDIj1oE1L7xPPcjCLfwC5QDzJjCBWj9FhCxnU5BwvoJNv9vgA6xnkzAOYSPZK/ihULMD0DxyqOUEa5ECGX62OPM9Gbr7jEviaItYzOOxaRs/yQVqizodGGl/BcK6fPqvOYSxip9ABYRVSI9ZvysY7ofAkeX91ardPwVG5VvEYfxZwBvGFjV7ZfTzVkK+BiUUNrvciAETHqwkjHftPpfJjxWsgLr8lbOA==,iv:HjDE/sqVDnxeww7r2upxH57rc1+LpuMKnhhyGXoc1Ms=,tag:d2kZeWkg17eVoNACIQ3Q9A==,type:str]
 sops:
     age:
-        - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
+        - enc: |
-          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQNGdHcDc4bTFkR0EyZlUr
             eXovR1lyeTZJTDg5R281MFFuMHVwOXZXYzNvCkpIT1g3K05WUUswaEVjVVJWQkJq
@@ -15,8 +15,8 @@ sops:
             Z0JwWWR0STUybjVhSXdDR3NiKzV1eDQK22HmMuyqYaR/eGuALkAPB1Y5bN2KwIt3
             pamM8vbnjB//hXoyrv4vsoDk9WzLGFGjgiw2qsM2HQgzQqtrwF1/1A==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1maxsx5tq2h3d92rfyl8ekcdan5gu5cpch4qs3c56cu7qag02xgvs3h0gqc
+          recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1N3ZBd1pHODFtZkZxaHNP
             OXlXUzVFS0ZIam1IWVkxNldOdTEwY0s4aUNZCjVlcnF1aXJxUUlQSXhteXJ6OU1W
@@ -24,7 +24,8 @@ sops:
             M3JocWZJeXFxenhXOENBVWpvNkd3bm8KqhNLzCyEAI643jGWpZF/uTchHmBj8ozU
             HtpOzKsshif66D0XOHeJQfQamJI4TyKsj3Sk3j9rstsLmN2lxTRGHg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-10T00:35:50Z"
+          recipient: age1maxsx5tq2h3d92rfyl8ekcdan5gu5cpch4qs3c56cu7qag02xgvs3h0gqc
-    mac: ENC[AES256_GCM,data:u27zQ1PPnWy5Parbh/1DkVP3ICmHnLZJKaLbN3dZEVONgqOWi32LV3t0iNhtLWwVnzFPBusRWahQiqAkUdnQtrXF0OtjPCpLuIw86xB75QPGbet0GZlLNb8/xPshChZe4v520csdJMWiy3vYeKrk8LxMSViAGhmhYK2a5NbGhzI=,iv:/9vePmvCNqoP0kx24fP3HfCjS2FkjBmI5B+SycvKKW4=,tag:gE1/DnLolwhoyfMJYejGIQ==,type:str]
+    lastmodified: "2026-09-16T14:20:48Z"
+    mac: ENC[AES256_GCM,data:i2I6vo/tKTLq44Tu6vI2Cqp0EqQPbwuuRM2WUflD58UCr7huXIKnKrxmB1Hz/fdmpZPiCZ2dSlmOh733fKFclRmpHJLScYRX4+lFXEzToYExZlybVergxC6Cr4IaiB+A/HZIkW6iKK/ULr2mtXYNCqQgDQw8BgJuV2M/bAMM/V4=,iv:9akzmVH4CMMdDS5aukeLOxncMLKfvQCw2BYl36WAfOM=,tag:4F26bqEI8fEtNugqjHCUOg==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.12.2
+    version: 3.13.3

modules/nixos/boot/impermanence.nix

@@ -57,6 +57,7 @@
             "/etc/ssh/ssh_host_ed25519_key.pub"
             "/etc/ssh/ssh_host_rsa_key"
             "/etc/ssh/ssh_host_rsa_key.pub"
+            "/etc/ly/save.txt"
           ]
           ++ cfg.impermanence.files;
       };

modules/nixos/core/env.nix

@@ -0,0 +1,5 @@
+{
+  flake.modules.nixos.core = {...}: {
+    environment.enableAllTerminfo = true;
+  };
+}

modules/nixos/core/substituters.nix

@@ -33,6 +33,10 @@
         "wezterm.cachix.org-1:kAbhjYUC9qvblTE+s7S+kl5XM1zVa4skO+E/1IDWdH0="
         "cache.nixos-cuda.org:74DUi4Ye579gUqzH4ziL9IyiJBlDpMRn9MBN8oNan9M="
       ];
+      extra-substituters = ["https://cache.numtide.com"];
+      extra-trusted-public-keys = [
+        "niks3.numtide.com-1:DTx8wZduET09hRmMtKdQDxNNthLQETkc/yaX7M4qK0g="
+      ];
     };
   };
 }

modules/nixos/services/coder.nix

@@ -0,0 +1,95 @@
+{
+  flake.modules.nixos.services = {
+    config,
+    lib,
+    options,
+    ...
+  }:
+    with lib; let
+      cfg = config.tnix.services.coder;
+      port = toString cfg.port;
+    in {
+      options.tnix.services.coder = {
+        enable = mkEnableOption "Coder";
+
+        host = mkOption {
+          type = types.str;
+          default = "127.0.0.1";
+          description = "Host on which Coder listens";
+        };
+
+        port = mkOption {
+          type = types.port;
+          default = 1116;
+          description = "Port on which Coder listens";
+        };
+
+        environment = options.services.coder.environment;
+
+        domain = mkOption {
+          type = types.str;
+          default = "";
+          description = "Domain on which Coder is available";
+        };
+
+        configureNginx = mkOption {
+          type = types.bool;
+          default = false;
+          description = "Whether to configure Nginx as a reverse proxy for Coder";
+        };
+
+        configurePangolin = mkOption {
+          type = types.bool;
+          default = false;
+          description = "Whether to configure Pangolin as a reverse proxy for Coder";
+        };
+      };
+
+      config = mkIf cfg.enable {
+        users.users.coder.extraGroups = ["docker"];
+
+        services = {
+          coder = {
+            enable = true;
+            accessUrl = "https://${cfg.domain}";
+            listenAddress = "${cfg.host}:${port}";
+            environment = cfg.environment;
+          };
+
+          nginx.virtualHosts.${cfg.domain} = mkIf cfg.configureNginx {
+            forceSSL = acmeHost != "";
+            useACMEHost = mkIf (acmeHost != "") acmeHost;
+            locations."/" = {
+              proxyPass = "http://${cfg.host}:${port}";
+              proxyWebsockets = true;
+            };
+          };
+
+          newt.blueprint.proxy-resources = mkIf cfg.configurePangolin {
+            gitea = {
+              auth = {
+                sso-enabled = false;
+              };
+              full-domain = cfg.domain;
+              name = "coder";
+              protocol = "http";
+              targets = [
+                {
+                  hostname = "localhost";
+                  method = "http";
+                  port = cfg.port;
+                  healthcheck = {
+                    hostname = "localhost";
+                    port = cfg.port;
+                    scheme = "http";
+                    method = "GET";
+                    path = "/";
+                  };
+                }
+              ];
+            };
+          };
+        };
+      };
+    };
+}

modules/nixos/services/hermes-agent.nix

@@ -24,7 +24,7 @@
           enable = true;
           settings.model = {
             provider = "opencode-go";
-            default = "deepseek-v4-flash";
+            default = "deepseek-v4.1-flash";
           };
           environmentFiles = cfg.environmentFiles;
           addToSystemPackages = true;

packages/omasnap.nix

@@ -0,0 +1,68 @@
+{
+  lib,
+  stdenv,
+  cmake,
+  fetchFromGitHub,
+  hyprland,
+  kdePackages,
+  ninja,
+  pkg-config,
+  tesseract,
+  wayland,
+  wayland-protocols,
+  wayland-scanner,
+  wl-clipboard,
+}:
+stdenv.mkDerivation {
+  pname = "omasnap";
+  version = "v1.20.1";
+
+  src = fetchFromGitHub {
+    owner = "omacom";
+    repo = "omasnap";
+    rev = "d339588f3aba554f314d6233da2dddc98f83de55";
+    hash = "sha256-90p1lZDj4cksAAhpbJMQwN6cMqqcZyRVESMLpjmw294=";
+  };
+
+  postPatch = ''
+    substituteInPlace CMakeLists.txt \
+      --replace-fail "/usr/share/wayland-protocols" \
+        "${wayland-protocols}/share/wayland-protocols"
+  '';
+
+  nativeBuildInputs = [
+    cmake
+    kdePackages.wrapQtAppsHook
+    ninja
+    pkg-config
+    wayland-scanner
+  ];
+
+  buildInputs = [
+    kdePackages.layer-shell-qt
+    kdePackages.qtbase
+    wayland
+    wayland-protocols
+  ];
+
+  cmakeFlags = [(lib.cmakeBool "BUILD_TESTING" false)];
+
+  qtWrapperArgs = [
+    "--prefix"
+    "PATH"
+    ":"
+    (lib.makeBinPath [
+      hyprland
+      tesseract
+      wl-clipboard
+    ])
+  ];
+
+  meta = {
+    description = "Fast Wayland screenshot and annotation overlay for Hyprland";
+    homepage = "https://github.com/omacom/omasnap";
+    license = lib.licenses.mit;
+    mainProgram = "omasnap";
+    platforms = lib.platforms.linux;
+  };
+}