superconfig/tools/ at 2c81e8e84ab673f14a056207da33491d9335f5cd · hermes.pds.lassul.us/superconfig

age-detect

add ignavia tpm key, age-detect: accept age1tag1 recipients

1 month ago

android-webcam

tools: nix fmt

7 months ago

bin_shim

tools: simplify bin_shim to just nix run

1 year ago

book

tools.book: apply calendar edits to bookings

2 weeks ago

boosteroid

tools.boosteroid: fix download by setting User-Agent

7 months ago

build-installer-iso

tools: nix fmt

7 months ago

ci-farm

tools.ci-farm: add on-demand nix-grpc-store farm on GitHub Actions A farm job (scheduler, builder, envoy, client) and a pool of worker jobs build the requested machines together, each derivation once, and push the outputs to niks3 with the job's GitHub OIDC token. Runners can't reach each other, so every hop is a dumbpipe (iroh) tunnel ending on 127.0.0.1. All daemons and envoy share one TLS identity (FARM_KEY secret, farm.crt committed, SAN 127.0.0.1) and only trust it. The iroh endpoint keys are derived from FARM_KEY, so it is the only secret. Workers probe the farm with fresh dialers before starting their long-lived one: a dumbpipe dialer started before the farm is discoverable never reaches it. configs.nix-farm: niks3 accepts GitHub OIDC tokens of this repository.

1 week ago

claude

tools.say, skills.notify: add TTS attention tool and skill, wire into wrapper Adds `s say "..."` which speaks via flite TTS and posts a desktop notification. The notify skill documents when to use it; the wrapper registers the skill and allows `s` in Bash so calls don't prompt.

5 months ago

covibe

configs: rename from 2configs

3 weeks ago

deploy

tools.deploy: add --yes to switch without asking

2 weeks ago

firefox

tools.workspace-manager: add workspace-browser, run as systemd service

7 months ago

flaxget

tools: nix fmt

7 months ago

flix-prune

tools.flix-prune: report + prune sonarr series by size and jellyfin watch state also document why transmission-gc talks to 128.0.0.1: the daemon runs in its own netns (t1), the gc unit does not (t2), so localhost is not the daemon.

1 month ago

gh-act

tools: nix fmt

7 months ago

gpd-rumble

tools: add usage.kdl specs and zsh tab completion for s Add usage.kdl (https://usage.jdx.dev/spec/) files for all 32 tools describing their CLI interface. Each tool exposes its spec as a string via passthru.usage (builtins.readFile ./usage.kdl). The s wrapper now includes a zsh completion function that: - Instantly completes package names (baked in at build time) - Lazily fetches per-tool usage specs via nix eval on first use - Caches specs keyed by flake narHash for invalidation

7 months ago

herd

tools.herd: use omp from nixpkgs

2 weeks ago

hermes-voice

tools.hermes-voice: list all gpt-live-1 voices with language and character

1 week ago

install-ssh-keys

tools: nix fmt

7 months ago

jellyseekrr

tools.jellyseekrr: use rbw instead of pass for API key

7 months ago

kagi-search

tools.pinentry-rofi: support Assuan protocol for rbw/gpg-agent The script was previously SSH_ASKPASS-only (raw PIN on stdout), which broke rbw and gpg-agent: they speak the Assuan protocol over stdin/stdout and could not parse the output ('failed to read password from pinentry'). Dispatch by argv: - no args, or first arg starts with '-' (real pinentry flags like --timeout 0 --ttyname ... --display ... --no-global-grab) -> Assuan mode - bare prompt arg (SSH_ASKPASS convention used by ssh-tpm-agent) -> raw PIN on stdout (existing behaviour) Assuan mode handles SETTITLE/SETPROMPT/SETDESC/SETERROR/SETKEYINFO/OPTION/ RESET/NOP/BYE, percent-decodes incoming descriptions for the rofi -mesg, and percent-encodes the D-line PIN. Kernel-keyring caching is scoped to SSH_ASKPASS mode only; rbw and gpg-agent do their own caching, and sharing one keyring slot across unrelated secrets handed back the wrong PIN to whichever caller asked second. tools.kagi-search: default to 'rbw get kagi.com -f session_link' Matches the actual vault layout (a kagi.com login with a session_link field) instead of expecting a separate 'kagi-session-link' entry.

5 months ago

kitty

configs: rename from 2configs

3 weeks ago

lockscreen

wallpaper: live desktop + lockscreen from ~/wallpaper mpvpaper renders a random video/image from ~/wallpaper on the background layer, rotated daily; noctalia's own wallpaper is disabled to let it show through. lockscreen picks from the same folder. Seeds a moewalls pixel-art sunset starter. Drops the unused feh fetchWallpaper on ignavia.

2 months ago

memhack

tools: nix fmt

7 months ago

menu

tools: nix fmt

7 months ago

mic-to-text

tools: nix fmt

7 months ago

mpv

tools.mpv: reference dl_subs drv instead of the flake source

3 weeks ago

muchsync

muchsync: guard archive move against missing files

7 months ago

mutt

pkgs: rename from 5pkgs

3 weeks ago

name-generator

tools: nix fmt

7 months ago

nat-share

tools.nat-share: init

1 month ago

nnn

tools.nnn: init wrapped file manager with previews Colours stay inside the terminal's ANSI palette (NNN_FCOLORS, NNN_COLORS, bat's ansi theme, mdcat), including nnn's nerd icon table which hardcodes xterm-256 codes, so retheming the terminal also retints a session running on the far side of ssh. The image previewer asks the terminal which graphics protocol it speaks instead of letting chafa guess from inherited KITTY_* variables, which claim kitty even where the data cannot reach a terminal and leave blank placeholder cells behind. Frames are rendered into memory and written with signals blocked, so preview-tui killing the previewer on a selection change cannot truncate an escape sequence.

2 months ago

noctalia-shell

configs: rename from 2configs

3 weeks ago

notmuch

notmuch: ignore fts-flatcurve directories

7 months ago

nvim

tools.nvim: trim closure from 1.4G to 120M Language servers, providers, git/bat/wl-clipboard and 300 unused treesitter grammars came from the wrapper; take them from PATH instead and ship only the grammars we edit. Drop lsp-lines, virtual_lines is builtin.

1 month ago

pass

tools.pass: copy only keys/ into the store

3 weeks ago

pass-otp

tools: nix fmt

7 months ago

passmenu

tools: nix fmt

7 months ago

payment-qr

tools: nix fmt

7 months ago

pi

flake.lock: update

1 month ago

pinentry-rofi

tools.pinentry-rofi: time out unanswered prompts

1 month ago

pinentry-rofi-age

tools: nix fmt

7 months ago

power-profile

tools: nix fmt

7 months ago

pxe-serve

machines.atlas: fetch nix store over http in netboot stage 1

1 month ago

pxe-share

tools.pxe-share: run dnsmasq in the background so ctrl+c works

1 month ago

record

tools.record: add audio source tab completion via usage.kdl complete directive Uses self-contained pactl/ffmpeg commands so completions work without record being in PATH (e.g. when completing through `s record <TAB>`).

7 months ago

s

tools.s: fall back to github instead of the flake source

3 weeks ago

say

tools.say, skills.notify: add TTS attention tool and skill, wire into wrapper Adds `s say "..."` which speaks via flite TTS and posts a desktop notification. The notify skill documents when to use it; the wrapper registers the skill and allows `s` in Bash so calls don't prompt.

5 months ago

ssh-agent-pick

tools.ssh-agent-pick: offer local agents (ssh-tpm-agent, phonetpm, gpg, gcr) alongside forwarded ones

2 weeks ago

ssh-yubikey

tools: nix fmt

7 months ago

stt

tools: add usage.kdl specs and zsh tab completion for s Add usage.kdl (https://usage.jdx.dev/spec/) files for all 32 tools describing their CLI interface. Each tool exposes its spec as a string via passthru.usage (builtins.readFile ./usage.kdl). The s wrapper now includes a zsh completion function that: - Instantly completes package names (baked in at build time) - Lazily fetches per-tool usage specs via nix eval on first use - Caches specs keyed by flake narHash for invalidation

7 months ago

sway-spawn-workspace

tools.sway-spawn-workspace: keep new windows on their spawning process's workspace

2 months ago

tmux

tools.tmux: fix scrollback in new tmux version

1 month ago

tor-ssh-service

tools: nix fmt

7 months ago

tornade

tools: nix fmt

7 months ago

turbomode

tools: add usage.kdl specs and zsh tab completion for s Add usage.kdl (https://usage.jdx.dev/spec/) files for all 32 tools describing their CLI interface. Each tool exposes its spec as a string via passthru.usage (builtins.readFile ./usage.kdl). The s wrapper now includes a zsh completion function that: - Instantly completes package names (baked in at build time) - Lazily fetches per-tool usage specs via nix eval on first use - Caches specs keyed by flake narHash for invalidation

7 months ago

unmaintained-graph

tools.unmaintained-graph: show meta for all packages in the graph

2 weeks ago

video-webcam

tools: nix fmt

7 months ago

vm-boot

tools: nix fmt

7 months ago

whatsong

tools: nix fmt

7 months ago

wifi-qr

tools: nix fmt

7 months ago

workspace-manager

workspace-manager: bump extension to 1.0.1

1 month ago

worldview

tools.worldview: add spy satellite simulator

6 months ago

yt-dlp

tools.yt-dlp: fix args handling

8 months ago

yt-x

tools.yt-x: add wrapper with custom mpv Uses forked yt-x with support for full path extensions (-x flag). Passes our custom mpv (with quality-menu, sponsorblock, etc.) via extension file in nix store. PR upstream: https://github.com/Benexl/yt-x/pull/130

9 months ago

zsh

tools.zsh: add ssh-agent-pick alias

2 weeks ago

Configure Feed

Configure Feed