manakish: fix imports

.bin/256color

@@ -0,0 +1,38 @@
+#! /bin/sh
+set -euf
+
+pl() {
+  for i in $(seq $1 $(expr $2 - 1)); do
+    printf '\e[38;5;%sm%03i\e[m ' $i $i
+  done
+  printf '\e[38;5;%sm%03i\e[m\n' $2 $2
+}
+
+p() {
+  printf '\e[38;5;%sm%03i\e[m ' $1 $1
+}
+pn() {
+  printf '\e[38;5;%sm%03i\e[m\n' $1 $1
+}
+
+p6x6() {
+  for i in $(seq 0 5); do
+    for j in $(seq 0 5); do
+      p $(expr $1 + $i + $j \* 6)
+    done
+    echo
+  done
+}
+
+pl 0 7
+pl 8 15
+
+p6x6 16
+p6x6 52
+p6x6 88
+p6x6 124
+p6x6 160
+p6x6 196
+
+pl 232 243
+pl 244 255

.bin/anki-poem.sh

@@ -0,0 +1,29 @@
+#!/bin/sh
+file="${1?please supply a poetry file}"
+[ -f "$file" ] || {
+  echo "'$file' is no file"
+  exit 1
+}
+
+poem="$(mktemp)"
+clean () {
+  rm "$poem"
+}
+trap clean EXIT
+sed '/^$/d' "$file" > "$poem"
+
+htmlize() {
+  awk 'ORS="<br/>"' \
+    | head -c -5          # remove final <br/> characters
+}
+
+for line_number in $(seq 1 "$(wc -l "$poem" | cut -d' ' -f1)"); do
+  if [ "$line_number" -gt 3 ] && [ "$line_number" -gt 1 ]; then
+    sed -n "$((line_number - 3)),$((line_number - 1))p" "$poem"
+  else
+    sed -n "1,$((line_number - 1))p" "$poem"
+  fi | htmlize
+  printf '\t'
+  sed -n "${line_number},+1p" "$poem" | htmlize
+  printf '\n'
+done

.bin/avesta.sed

@@ -0,0 +1,54 @@
+#!/usr/bin/env -S sed -f
+s/ā̊/𐬃/g
+s/t̰/𐬝/g
+s/ṣ̌/𐬴/g
+s/š́/𐬳/g
+s/ą̄/𐬅/g
+s/ŋᵛ/𐬤/g
+s/ə̄/𐬇/g
+s/ŋ́/𐬣/g
+s/x́/𐬒/g
+s/xᵛ/𐬓/g
+s/a/𐬀/g
+s/ā/𐬁/g
+s/å/𐬂/g
+s/ą/𐬄/g
+s/ə/𐬆/g
+s/e/𐬈/g
+s/ē/𐬉/g
+s/o/𐬊/g
+s/ō/𐬋/g
+s/i/𐬌/g
+s/ī/𐬍/g
+s/u/𐬎/g
+s/ū/𐬏/g
+s/k/𐬐/g
+s/x/𐬑/g
+s/g/𐬔/g
+s/ġ/𐬕/g
+s/γ/𐬖/g
+s/c/𐬗/g
+s/j/𐬘/g
+s/t/𐬙/g
+s/θ/𐬚/g
+s/d/𐬛/g
+s/δ/𐬜/g
+s/p/𐬞/g
+s/f/𐬟/g
+s/b/𐬠/g
+s/β/𐬡/g
+s/ŋ/𐬢/g
+s/n/𐬥/g
+s/ń/𐬦/g
+s/ṇ/𐬧/g
+s/m/𐬨/g
+s/m̨/𐬩/g
+s/ẏ/𐬫/g
+s/y/𐬪/g
+s/v/𐬬/g
+s/r/𐬭/g
+s/s/𐬯/g
+s/z/𐬰/g
+s/š/𐬱/g
+s/ž/𐬲/g
+s/h/𐬵/g

.bin/browser

@@ -0,0 +1,24 @@
+#!/bin/sh -e
+#
+# Usage: browser
+#        pipe html to a browser
+# e.g.
+#  $ echo '<h1>hi mom!</h1>' | browser
+#  $ ron -5 man/rip.5.ron | browser   
+
+if [ -t 0 ]; then
+  if [ -n "$1" ]; then
+    open $1
+  else
+    cat <<usage
+Usage: browser
+       pipe html to a browser
+$ echo '<h1>hi mom!</h1>' | browser
+$ ron -5 man/rip.5.ron | browser
+usage
+fi
+else
+  f="/tmp/browser.$RANDOM.html"
+  cat /dev/stdin > $f
+  xdg-open $f
+fi

.bin/bvg.sh

@@ -0,0 +1,46 @@
+#!/bin/sh
+interesting="U6 N6 140 M46 184 N84"
+
+curl -sSL 'https://www.bvg.de/disruption-reports/q' \
+  --data-raw '{"variables":{},"query":"{
+    allDisruptions {
+      disruptions {
+        meldungsId
+        linie
+        verkehrsmittel
+        __typename
+        ... on Traffic {
+          datum
+          gueltigVonDatum
+          gueltigVonZeit
+          gueltigBisDatum
+          gueltigBisZeit
+          richtungName
+          richtungHafasId
+          beginnAbschnittName
+          beginnAbschnittHafasId
+          endeAbschnittName
+          endeAbschnittHafasId
+          textIntUrsache
+          sev
+          textIntAuswirkung
+          umfahrung
+          textWAPSMSUrsache
+          textWAPSMSAuswirkung
+          prioritaet
+          __typename
+        }
+      }
+      __typename
+    }
+  }"}' \
+  | jq --arg interesting "$interesting" '
+    .data.allDisruptions.disruptions
+    | map(select(
+      (.linie as $linie
+      | $interesting
+      | split(" ")
+      | index($linie))
+      and (.["__typename"] == "Traffic")
+    ))
+  '

.bin/calendars.sh

@@ -0,0 +1,19 @@
+#!/bin/sh
+
+directory="$(mktemp -d)"
+trap clean EXIT
+clean() {
+  rm -rf "$directory"
+}
+
+year=$(date +%Y)
+output=/tmp/$year.pdf
+
+for month in $(seq 1 12); do
+  printf "\r%d" "$month" 1>&2
+  astrolog -zN Berlin -qm "$month" "$year" -X -K -XA -Xr -Xm -Xb -Xo "$(printf "%s/%02d.bmp" "$directory" "$month")" -Xw 1080 720 2>/dev/null
+done
+printf "\r"
+
+convert "$directory/*.bmp" "$output"
+echo "$output"

.bin/candyman

@@ -0,0 +1,25 @@
+#!/bin/sh
+set -efu
+
+usage() {
+  echo >&2 "$0 add-{reddit,telegram,youtube,twitch,twitter} NAME"
+  exit 1
+}
+
+candyman() {
+  curl -fsSv http://news.r/api -H content-type:application/json -d "$(jq -n "
+    {
+      command: \"PRIVMSG\",
+      params: [\"#all\", \"candyman: $1 $2\"]
+    }
+  ")"
+}
+
+[ $# -ge 2 ] || usage
+
+case "$1" in
+  add-reddit|add-telegram|add-youtube|add-twitter|add-twitch)
+    candyman "$@"
+  ;;
+  *) usage;;
+esac

.bin/chunk-pdf

@@ -0,0 +1,23 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -i bash -p pdftk gnugrep
+set -efu
+
+INPUT_FILE="${2:?Pass the PDF path as second argument.}"
+PAGES_PER_REPORT="${1:?Pass the chunk size as first argument.}"
+
+if [ ! -f "$INPUT_FILE" ]; then
+  echo >&2 "File $INPUT_FILE does not exist."
+  exit 1
+fi
+
+TOTAL_PAGES="$(pdftk "$INPUT_FILE" dump_data | grep NumberOfPages | cut -f2 -d' ')"
+
+RUNS=$((TOTAL_PAGES/PAGES_PER_REPORT))
+
+for run in $(seq 0 "$((RUNS-1))"); do
+  start_page=$((run*PAGES_PER_REPORT+1))
+  end_page=$(((run+1)*PAGES_PER_REPORT))
+  output_file="chunk_$((run+1)).pdf"
+  echo "splitting $INPUT_FILE from $start_page to $end_page into $output_file"
+  pdftk "$INPUT_FILE" cat "$start_page-$end_page" output "$output_file"
+done

.bin/countdown

@@ -0,0 +1,13 @@
+#!/usr/bin/env -S awk -f
+function z() {
+  getline < "/proc/uptime"
+  close("/proc/uptime")
+  return $0
+}
+BEGIN {
+  x = z()
+  while (1) {
+    y = z()
+    printf "%02d:%05.2f\r", (y - x) / 60, (y - x) % 60
+  }
+}

.bin/csv2json

@@ -0,0 +1,14 @@
+#!/usr/bin/env python3
+
+import csv
+import json
+import sys
+import argparse
+
+parser = argparse.ArgumentParser()
+parser.add_argument("--delimiter", "-d", default=",", help="CSV field separator")
+
+args = parser.parse_args()
+
+if __name__ == "__main__":
+    json.dump(list(csv.DictReader(sys.stdin, delimiter=args.delimiter)), sys.stdout)

.bin/dummy-alert

@@ -0,0 +1,43 @@
+#!/bin/bash
+
+name=$RANDOM
+url='http://localhost:9093/api/v1/alerts'
+
+echo "firing up alert $name"
+
+# change url o
+curl -XPOST $url -d "[{
+	\"status\": \"firing\",
+	\"labels\": {
+		\"alertname\": \"$name\",
+		\"service\": \"my-service\",
+		\"severity\":\"warning\",
+		\"instance\": \"$name.example.net\"
+	},
+	\"annotations\": {
+		\"summary\": \"High latency is high!\"
+	},
+	\"generatorURL\": \"http://prometheus.int.example.net/<generating_expression>\"
+}]"
+
+echo ""
+
+echo "press enter to resolve alert"
+read
+
+echo "sending resolve"
+curl -XPOST $url -d "[{
+	\"status\": \"resolved\",
+	\"labels\": {
+		\"alertname\": \"$name\",
+		\"service\": \"my-service\",
+		\"severity\":\"warning\",
+		\"instance\": \"$name.example.net\"
+	},
+	\"annotations\": {
+		\"summary\": \"High latency is high!\"
+	},
+	\"generatorURL\": \"http://prometheus.int.example.net/<generating_expression>\"
+}]"
+
+echo ""

.bin/elm-publish-private

@@ -0,0 +1,7 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -p "(import <nixpkgs> { overlays = [ (import ~/work/fysiweb/engiadina-pwa/devops/pkgs) ]; }).elm-publish-private"
+#! nix-shell -i bash
+
+set -efux
+
+exec elm-publish-private "$@"

.bin/fix-sd.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+set -xfu
+
+drive="$1"
+mountpoint="/media/sd-card-$(date +%s)"
+backup_directory="$(pwd)"
+
+trap clean EXIT
+clean() {
+  umount "$mountpoint"
+  rmdir "$mountpoint"
+  fsck.exfat "$drive"
+}
+
+filenames="$(fsck.exfat "$drive" 2>&1 | sed -nE "s/.* file '(.*?)' is not allocated.*/\1/p")"
+mkdir "$mountpoint"
+mount "$drive" "$mountpoint"
+
+echo "$filenames" | while read -r filename; do
+  find "$mountpoint" -type f -name "$filename" -exec mv {} "$backup_directory" \;
+done

.bin/horoscope.sh

@@ -0,0 +1,34 @@
+#!/bin/sh
+set -efu
+
+# Berlin:  -d lodeg=13 -d lomin=22 -d losec=41 -d lodir=E -d ladeg=52 -d lamin=27 -d lasec=42 -d ladir=N -d usecoords=1 \
+# Kassel:  -d lodeg=9 -d lomin=32 -d losec=5 -d lodir=E -d ladeg=51 -d lamin=18 -d lasec=17 -d ladir=N -d usecoords=1 \
+
+
+[ $# -eq 1 ] || {
+  echo >&2 Usage: "$0" TIMESTAMP
+  exit 1
+}
+
+export TZ=UTC
+
+chart_path="$(mktemp /tmp/chart_XXX.pdf)"
+
+timestamp="$1"
+
+year="$(date -d "@$timestamp" +%Y)"
+month="$(date -d "@$timestamp" +%m)"
+day="$(date -d "@$timestamp" +%d)"
+hour="$(date -d "@$timestamp" +%H)"
+minute="$(date -d "@$timestamp" +%M)"
+
+curl -sSL 'https://edifyingfellowship.org/astro/' \
+  -d lodeg=9 -d lomin=32 -d losec=5 -d lodir=E -d ladeg=51 -d lamin=18 -d lasec=17 -d ladir=N -d usecoords=1 \
+  -d ybyr="$year" -d ybmo="$month" -d ybdy="$day" -d ybhr="$hour" -d ybmi="$minute" -d ybsc=0 -d ybtz="$TZ" \
+  -d currenttime=0 \
+  -d title="$timestamp" \
+  -d options[]=VancouverWheel -d options[]=Arrow -d options[]=XBold -d options[]=HouseLabels -d options[]=Placidus \
+  -d options[]=Sun -d options[]=Moon -d options[]=Mercury -d options[]=Venus -d options[]=Mars -d options[]=Jupiter -d options[]=Saturn -d options[]=Uranus -d options[]=Neptune -d options[]=Pluto -d options[]=Ascendant -d options[]=MC -d options[]=Lilith -d options[]=MeanNode -d options[]=TrueNode \
+  -d aspectpct=100 -d format=PDF -d Submit= -o "$chart_path"
+
+zathura "$chart_path"

.bin/json2csv

@@ -0,0 +1,24 @@
+#!/usr/bin/env python3
+import csv
+import json
+import sys
+
+if __name__ == "__main__":
+    json_list = json.load(sys.stdin)
+    if not isinstance(json_list, list):
+        print("JSON object is not a list.", file=sys.stderr)
+        sys.exit(1)
+    if len(json_list) == 0:
+        print("JSON list is empty.", file=sys.stderr)
+        sys.exit(1)
+    keys = set()
+    for element in json_list:
+        if isinstance(element, dict):
+            keys |= element.keys()
+        else:
+            print("Non-dict element:", element, file=sys.stderr)
+            sys.exit(1)
+    writer = csv.DictWriter(sys.stdout, fieldnames=list(keys))
+    writer.writeheader()
+    for element in json_list:
+        writer.writerow(element)

.bin/json2csv.jq

@@ -0,0 +1,5 @@
+#!/usr/bin/env -S jq -r -f
+(map(keys) | add | unique) as $cols
+| map(. as $row | $cols | map($row[.])) as $rows
+| $cols, $rows[]
+| @csv

.bin/libib.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+session_id=7b638c194d9bda74f80043045018cc9e
+
+declare -A libraries
+
+libraries["Literatur"]=344428
+libraries["Sprache"]=344160
+libraries["Miscellanea"]=344427
+libraries["Wissenschaft"]=344429
+libraries["Relicta"]=565920
+
+for library in ${!libraries[@]}
+do
+  curl -sSL 'https://www.libib.com/library/functions/csv-export.php' -H "Cookie: PHPSESSID=$session_id" -d export="${libraries[$library]}" > "$library.csv"
+done

.bin/lieferando.sh

@@ -0,0 +1,81 @@
+#!/bin/sh
+set -efu
+
+if echo "$1" | grep -Eq '[[:digit:]]{5}'; then
+  PLZ="$1"
+else
+  echo >&2 "Usage: $0 PLZ"
+  exit 1
+fi
+
+lieferando_dir=/tmp/lieferando
+mkdir -p "$lieferando_dir/$PLZ"
+
+fetch_restaurants() {
+  cache_path="$lieferando_dir/$PLZ.json"
+
+  if [ -r "$cache_path" ]; then
+    cat "$cache_path"
+  else
+    w3m -dump_source "http://www.lieferando.de/$PLZ" \
+      | gunzip \
+      | sed -n '/var restaurants/,/];$/p' \
+      | sed 's/var restaurants =//;$s/;$//' \
+      | prettier --parser=json \
+      | jq '
+        map({
+          name: .[30] | .name,
+          category: .[30] |.categories | split(", "),
+          url: "http://lieferando.de\(.[30] | .url)",
+          minutes: .[19],
+          minimum: .[10],
+          delivery: .[14]
+        })' \
+      | tee "$cache_path"
+  fi
+}
+
+fetch_menu() {
+  [ $# -eq 1 ] || exit 1
+
+  slug="$(echo "$1" | sed 's!.*/!!')"
+  cache_path="$lieferando_dir/$PLZ/$slug.json"
+
+  if [ -r "$cache_path" ]; then
+    cat "$cache_path"
+  else
+    w3m -dump_source "$1" \
+      | gunzip \
+      | sed -n '/var MenucardProducts/,/\];/p' \
+      | sed 's/var MenucardProducts =//;s/;$//' \
+      | jq -r '
+        unique_by(.productId)
+        | group_by(.categoryId)
+        | flatten
+      ' \
+      | tee "$cache_path"
+  fi
+}
+
+data="$(fetch_restaurants)"
+
+# echo "$data" | jq -c '.[]' | while read -r restaurant; do
+#   fetch_menu "$(echo "$restaurant" | jq -r .url)"
+# done
+
+selected_categories="$(echo "$data" | jq -r 'map(.category) | flatten | unique | .[]' | fzf -m)"
+
+selected_restaurant_url="$(echo "$selected_categories" | jq --argjson restaurants "$data" -sRr '
+  split("\n")[:-1] as $categories
+  | $restaurants[]
+  | select(.category - $categories != .category)
+  | "\(.name) [🚴\(.minutes)min 💰\(.minimum)€ + \(.delivery)€] (\(.url))"
+  ' \
+  | fzf \
+  | sed 's/.*(//;s/)$//'
+)"
+
+fetch_menu "$selected_restaurant_url" \
+  | jq -r '.[] | "\(.price)\t\(.name)"' \
+  | fzf -m \
+  | awk '{print $0; sum += $1} END {print "-----"; print sum}'

.bin/lit.awk

@@ -0,0 +1,17 @@
+BEGIN {
+  if (!comment) comment = "--";
+  if (!begin) begin = "\\begin{code}";
+  if (!end) end = "\\end{code}";
+}
+{
+  if ($0 == begin) {
+    code = 1;
+    print comment, $0;
+  } else if ($0 == end) {
+    code = 0;
+    print comment, $0;
+  } else {
+    if (code) print $0;
+    else print comment, $0;
+  }
+}

.bin/load.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+uptime | sed 's/.*load average: \(.*\), \(.*\), \(.*\)/\1 \2 \3/'

.bin/mail-current-part

@@ -0,0 +1,3 @@
+#! /bin/sh
+set -efu
+exec curl -fSs --unix-socket /tmp/much.api.sock http://localhost/current/part

.bin/mail-current-query-find-part-by-name

@@ -0,0 +1,27 @@
+#! /bin/sh
+# usage: mail-current-query-find-part-by-name NAME
+set -efu
+
+name=$1
+
+query=$(mail-current-query)
+result=$(notmuch show --entire-thread=false --format=json "$query")
+
+part_id=$(printf %s "$result" | jq --arg name "$name" '
+  [
+    recurse |
+    select(type == "object") |
+    { id, name: .filename } |
+    select(.id != null and .name != null)
+  ] |
+  map(select(.name == $name))[0].id
+')
+
+if test "$part_id" = null; then
+  printf 'error: could not find part with name %s\n' \
+    "$name" \
+    >&2
+  exit 1
+fi
+
+exec notmuch show --part="$part_id" "$query"

.bin/mail-current-query-find-part-by-type

@@ -0,0 +1,39 @@
+#! /bin/sh
+# usage: mail-current-query-find-part-by-type TYPE
+set -efu
+
+type=$1
+
+query=$(mail-current-query)
+result=$(notmuch show --entire-thread=false --format=json "$query")
+
+part_id=$(printf %s "$result" | jq --arg type "$type" '
+  #flatten|map(select(.!=null))[0].body[0] |
+  #
+  #if .["content-type"] == $type then
+  #  .id
+  #elif .["content-type"] | test("^multipart/") then
+  #  .content|map(select(.["content-type"]==$type))[0].id
+  #else
+  #  null
+  #end
+
+  [
+    recurse |
+    select(type == "object") |
+    { id, type: .["content-type"] } |
+    select(.id != null and .type != null)
+  ] |
+  map(select(.type == $type))[0].id
+')
+
+if test "$part_id" = null; then
+  printf 'error: could not find part with type %s\n' \
+    "$type" \
+    >&2
+  exit 1
+fi
+
+exec notmuch show --part="$part_id" "$query"
+
+

.bin/mp3player-write

@@ -0,0 +1,117 @@
+#!/usr/bin/env bash
+
+# Usage:
+# ./mp3_transfer.sh -s 1.3 /mnt/mp3player file1.m4a file2.m4a ...
+
+set -e
+
+# Default speed
+SPEED=1.0
+
+# Parse options
+while getopts ":s:" opt; do
+  case $opt in
+    s)
+      SPEED=$OPTARG
+      ;;
+    \?)
+      echo "Invalid option: -$OPTARG" >&2
+      exit 1
+      ;;
+    :)
+      echo "Option -$OPTARG requires a value." >&2
+      exit 1
+      ;;
+  esac
+done
+
+# Shift past the options
+shift $((OPTIND -1))
+
+# Check arguments
+if [ "$#" -lt 2 ]; then
+  echo "Usage: $0 [-s speed] MOUNT_POINT FILE1 [FILE2 ...]"
+  exit 1
+fi
+
+MOUNT_POINT=$1
+shift
+FILES=("$@")
+
+# Check mount point exists
+if [ ! -d "$MOUNT_POINT" ]; then
+  echo "Error: Mount point '$MOUNT_POINT' does not exist."
+  exit 1
+fi
+
+# Estimate required space
+TOTAL_SIZE=0
+for f in "${FILES[@]}"; do
+  if [ ! -f "$f" ]; then
+    echo "Warning: File '$f' does not exist, skipping."
+    continue
+  fi
+  # Get file size in bytes
+  FILE_SIZE=$(stat --printf="%s" "$f")
+  # Estimate mp3 output size: roughly 1/2 of original m4a (adjust if needed)
+  TOTAL_SIZE=$((TOTAL_SIZE + FILE_SIZE / 2))
+done
+
+# Get available space in bytes
+AVAILABLE=$(df --output=avail "$MOUNT_POINT" | tail -n 1)
+AVAILABLE=$((AVAILABLE * 1024))  # df reports in KB
+
+if [ "$TOTAL_SIZE" -gt "$AVAILABLE" ]; then
+  echo "Error: Not enough space on device. Required: $TOTAL_SIZE bytes, Available: $AVAILABLE bytes"
+  exit 1
+fi
+
+echo "Enough space available. Starting conversion..."
+
+sanitize_filename() {
+  local name="$1"
+  # Remove path, keep only base name
+  name=$(basename "$name")
+  # Remove any extension
+  name=${name%.*}
+  # Replace spaces and special chars with underscore
+  name=$(echo "$name" | tr ' ' '_' | tr -cd '[:alnum:]_-')
+  # Truncate to max 50 chars
+  echo "${name:0:50}"
+}
+
+# Convert and copy files
+for f in "${FILES[@]}"; do
+  if [ ! -f "$f" ]; then
+    continue
+  fi
+
+  # Determine the next prefix
+  existing_prefixes=$(ls "$MOUNT_POINT" | grep -E '^[0-9].*\.mp3$' | sed -E 's/^([0-9]).*/\1/' | sort -n | uniq)
+  for i in {0..9}; do
+    if ! echo "$existing_prefixes" | grep -q "^$i$"; then
+      PREFIX=$i
+      break
+    fi
+  done
+
+  echo "Using prefix: $PREFIX"
+
+  BASENAME=$(sanitize_filename "$f")
+  OUT_PATTERN="$MOUNT_POINT/${PREFIX}_%03d_${BASENAME}.mp3"
+
+  echo "Converting '$f' to '$OUT_PATTERN' at speed $SPEED..."
+
+  ffmpeg -nostdin -i "$f" \
+    -filter:a "atempo=$SPEED" \
+    -ar 22050 -ac 1 -c:a libmp3lame -b:a 32k \
+    -f segment -segment_time 300 \
+    "$OUT_PATTERN"
+
+  # Update prefix for next file
+  # Count how many segments were created
+  SEG_COUNT=$(ls "$MOUNT_POINT" | grep -E "^${PREFIX}[0-9]{2}_" | wc -l)
+  PREFIX=$((PREFIX + SEG_COUNT))
+done
+
+echo "All files processed successfully."

.bin/mud.sh

@@ -0,0 +1 @@
+ssh mud@hotdog.r -t "MUD_NICKNAME=$LOGNAME mud"

.bin/mushakkil.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+curl -sSL 'https://diac.alsharekh.org/Diac/DiacText' \
+  -H "Content-Type: application/json" \
+  --data-raw "$(jq --raw-input '{word: ., type: 1}')" \
+  --compressed \
+  | jq -r .diacWord

.bin/nix-haddock-index

@@ -0,0 +1,93 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -i bash -p coreutils gnugrep gnused graphviz
+#
+# usage: nix-haddock-index
+#
+# Run this script in an environment where either NIX_GHC is set, or the ghc
+# executable exists, to generate an HTML index file pointing to all Haddock
+# files accessible to the respective ghc version.
+#
+# Additionally, an SVG dependency graph of all packages is linked at the
+# bottom of the index file.
+#
+# Note: all files will be generated in /tmp, and won't be deleted automatically
+#
+
+set -efux
+
+if test -z "${NIX_GHC-}"; then
+  NIX_GHC=$(readlink -f "$(type -P ghc)")
+fi
+
+if ! echo $NIX_GHC | grep -q '^/nix/store/'; then
+  printf '%s: error: unsupported GHC executable path (not in Nix store): %q\n' \
+      "$0" \
+      "$NIX_GHC" \
+    >&2
+  exit -1
+fi
+
+NIX_GHC_PREFIX=$(dirname "$(dirname "$NIX_GHC")")
+NIX_GHC_DOCDIR=$NIX_GHC_PREFIX/share/doc/ghc/html
+
+main() {
+
+  hash=$(echo $NIX_GHC_PREFIX | sed -n 's|^/nix/store/\([a-z0-9]\+\).*|\1|p')
+  title="Haddock index for $NIX_GHC_PREFIX"
+
+  header=$(
+    printf 'Haddock index for <a href="%s">%s</a>\n' \
+        $NIX_GHC_PREFIX \
+        $NIX_GHC_PREFIX \
+  )
+
+  suffix=${hash:+-$hash}
+  index_file=/tmp/haddock$suffix-index.html
+  svg_file=/tmp/haddock$suffix.svg
+
+  #if ! test -e $index_file; then
+    eval "$(
+      echo 'gen_index() {'
+      echo '  html_head'
+      "$NIX_GHC_PREFIX"/bin/ghc-pkg dump | sed -n '
+        s/^---$/  reset/p
+        s/^\(name\|version\):\s*\([-A-Za-z0-9_.]\+\)$/  \1=\2/p
+        s/^haddock-html:\s*\([-A-Za-z0-9_./]\+\)$/  haddock_html \1/p
+      '
+      echo '  html_foot'
+      echo '}'
+    )"
+
+    gen_index > $index_file
+  #fi
+
+  #if ! test -e $svg_file; then
+    "$NIX_GHC_PREFIX"/bin/ghc-pkg dot | tred | dot -Tsvg | sed '
+      s/<svg width="[0-9]\+pt" height="[0-9]\+pt"/<svg width="3600px" height="100%"/
+    ' > $svg_file
+  #fi
+
+  echo $index_file
+}
+reset() {
+  unset name version
+}
+haddock_html() {
+  printf '<li>'
+  printf '<a href="%s/index.html">%s</a>' "$1" "$name-$version"
+  printf '</li>\n'
+}
+html_head() {
+  printf '<!doctype html>\n'
+  printf '<title>%s</title>\n' "$title"
+  printf '<link href="%s" rel="stylesheet" type="text/css">\n' \
+      "$NIX_GHC_DOCDIR/libraries/ocean.css"
+  printf '<h1>%s</h1>\n' "$header"
+  printf '<ul>\n'
+}
+html_foot() {
+  printf '</ul>\n'
+  printf '<a href="%s">graph</a>\n' "$svg_file"
+}
+
+main "$@"

.bin/notetags.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+
+# inspired by https://github.com/connermcd/bin/blob/1d38cb98812906d8b95dc6e51e1149e29261617d/notetags
+
+cd "$HOME/notes/" || exit
+
+[ -f tags ] && rm tags
+grep -r 'tags:' ./* | while read -r line; do
+  file=$(echo "$line" | cut -d: -f1)
+  unparsed_tags=$(echo "$line" | cut -d: -f3) #
+  tags=$(echo "$unparsed_tags" | sed -e 's/tags: *//g' -e 's/[][,]//g')
+  for tag in $tags; do
+    echo "$tag	$file	/^$unparsed_tags$/;" >> tags
+  done
+done

.bin/pdf-ocr.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env nix-shell
+#! nix-shell -i bash -p poppler_utils tesseract4
+set -eu
+
+pdf_path="$(realpath "$1")"
+
+[ -f "$pdf_path" ] || {
+  echo "Usage: $0 FILE.pdf" >&2
+  exit 1
+}
+
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf $tmpdir' EXIT
+
+cd "$tmpdir"
+
+pdftoppm -png "$pdf_path" pdf-ocr
+for png in pdf-ocr*.png; do
+  tesseract "$png" "$png.txt" 2>/dev/null
+done
+
+cat pdf-ocr-*.txt

.bin/playlist_entries.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+youtube-dl -ij "$*" | jq -sr '.[] | .webpage_url'

.bin/prospekte.sh

@@ -0,0 +1,65 @@
+#!/bin/sh
+lidl() {
+  echo LIDL
+  curl -sSL 'https://endpoints.lidl-flyer.com/v3/region-overview/lidl/de-DE/0.json' \
+    | jq -r '
+      .categories
+      | map(select(.name == "Filial-Angebote") | .subcategories | map(.flyers))
+      | flatten
+      | flatten
+      | .[]
+      | .pdfUrl
+    '
+}
+
+aldi_nord() {
+  echo ALDI nord
+  echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-aktuell/GetPDF.ashx'
+  echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-vorschau/GetPDF.ashx'
+}
+
+rewe_berlin() {(
+  store_id=662366923
+  publisher_id=1062
+
+  echo REWE
+  curl -sSL 'https://www.bonialserviceswidget.de/de/stores/'$store_id'/brochures?storeId='$store_id'&publisherId='$publisher_id | while read -r brochure_id; do
+    curl -sSL 'https://www.bonialserviceswidget.de/de/v5/brochureDetails/'"$brochure_id"'?publisherId='$publisher_id  | jq -r .pdfUrl
+  done
+)}
+
+kaufland() {(
+  region_code=8920
+  echo KAUFLAND
+  curl -sSL https://filiale.kaufland.de/prospekte.html | htmlq --attribute href '.flyer a' | grep -Eo 'DE_de_KDZ[^/]*' | sed "s/_3000_/_${region_code}_/" | while read -r flyer_id; do
+    curl -sSL "https://endpoints.leaflets.kaufland.com/v3/$flyer_id/flyer.json?regionCode=$region_code" | jq -r .flyer.pdfUrl
+  done
+)}
+
+netto_schwarz() {
+  echo 'NETTO (schwarz)'
+  curl -sSL 'https://squid-api.tjek.com/v2/catalogs?dealer_ids=90f2VL&order_by=created' \
+    | jq -r '.[] | .id' \
+    | while read -r flyer_id; do
+      curl -sSL "https://squid-api.tjek.com/v2/catalogs/$flyer_id/download" \
+        | jq -r .pdf_url
+    done
+}
+
+dir="$(mktemp -d)"
+trap clean EXIT
+
+clean() {
+  rm -rf "$dir"
+}
+
+prospekt_url="$( (
+  lidl
+  aldi_nord
+  rewe_berlin
+  kaufland
+  netto_schwarz
+) | fzf)"
+
+curl -sSL "$prospekt_url" -o "$dir/prospekt.pdf"
+zathura "$dir/prospekt.pdf"

.bin/proxies.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+curl -sSL https://www.netzwelt.de/proxy/index.html \
+  | pup ".tblc" \
+  | xml-to-json /dev/stdin \
+  | jq '
+    .div.table.tbody.tr
+    | map(
+      .td
+      | {
+        ip: .[0].a.value,
+        port: .[1],
+        country: .[2] | (if type == "string" then . else .a.value end),
+        security: .[3],
+        protocol: .[4]
+      }
+    )
+  '

.bin/readme

@@ -0,0 +1,4 @@
+#!/bin/sh
+curl -sSL "https://raw.githubusercontent.com/$*/master/README.md" \
+  | pandoc -f gfm -t man -s \
+  | man -l -

.bin/sample-pdf.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+filepath="$(shuf --head-count=1)"
+pages="$(pdfinfo "$filepath" | awk '/^Pages:/{print $2}')"
+random_page="$(shuf --input-range="1-$pages" --head-count=1)"
+zathura --page="$random_page" "$filepath"

.bin/screencap.sh

@@ -0,0 +1,16 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -i sh -p coreutils byzanz xorg.xwininfo gnused
+
+# shellcheck shell=sh
+# ref https://gist.github.com/aforemny/0994cb7f06ea30d56c8b9681ff5d2054
+
+set -eux
+
+eval "$(xwininfo | \
+  sed -n -e 's/^ \+Absolute upper-left X: \+\([0-9]\+\).*/x=\1/p' \
+         -e 's/^ \+Absolute upper-left Y: \+\([0-9]\+\).*/y=\1/p' \
+         -e 's/^ \+Width: \+\([0-9]\+\).*/w=\1/p' \
+         -e 's/^ \+Height: \+\([0-9]\+\).*/h=\1/p')"
+
+trap "pkill -f 'sleep 360d'" INT
+byzanz-record -e "sleep 360d" -c -x $x -y $y -w $w -h $h "$@"

.bin/space.py

@@ -0,0 +1,49 @@
+import ephem
+from datetime import datetime, date, timedelta
+
+now = datetime.now()
+limit = now + timedelta(days=365)
+
+
+def events_until(limit):
+    initial_date = ephem.Date(datetime.now())
+    events = {}
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_full_moon(now)
+        events[now] = "🌕"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_new_moon(now)
+        events[now] = "🌑"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_vernal_equinox(now)
+        events[now] = "spring equinox"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_autumnal_equinox(now)
+        events[now] = "fall equinox"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_winter_solstice(now)
+        events[now] = "winter solstice"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_summer_solstice(now)
+        events[now] = "summer solstice"
+    return events
+
+
+events = events_until(limit)
+
+
+for date, event in sorted(events.items(), key=lambda x: x[0]):
+    if ephem.localtime(date) < limit:
+        print(ephem.localtime(date), event)

.bin/toposort.nix

@@ -0,0 +1,81 @@
+let
+  lib = import <nixpkgs/lib>;
+in
+rec {
+  inherit lib;
+
+  input = [
+    {
+      x = [
+        "pool"
+        "zfs"
+      ];
+      y = [
+        "mdadm"
+        "raid1"
+      ];
+    }
+    {
+      x = [
+        "pool"
+        "zfs"
+      ];
+      y = [
+        "disk"
+        "sda"
+      ];
+    }
+    {
+      x = [
+        "mdadm"
+        "raid1"
+      ];
+      y = [
+        "disk"
+        "sdb"
+      ];
+    }
+    {
+      x = [
+        "mdadm"
+        "raid1"
+      ];
+      y = [
+        "disk"
+        "sdc"
+      ];
+    }
+  ];
+
+  outNodes = node: graph: lib.unique (builtins.map (e: e.y) (builtins.filter (v: v.x == node) graph));
+
+  vertices = graph: lib.unique (builtins.map (x: x.y) graph ++ builtins.map (x: x.x) graph);
+
+  deleteVertex = node: graph: (builtins.filter (v: v.x != node && v.y != node) graph);
+
+  findSink =
+    graph:
+    lib.findFirst (v: outNodes v graph == [ ]) (lib.trace graph (builtins.abort "No sink found")) (
+      vertices graph
+    );
+
+  topSort =
+    graph:
+    if graph == [ ] then
+      [ ]
+    else if builtins.length graph == 1 then
+      let
+        only = builtins.head graph;
+      in
+      [
+        only.y
+        only.x
+      ]
+    else
+      let
+        sink = findSink graph;
+      in
+      [ sink ] ++ topSort (deleteVertex sink graph);
+
+  output = topSort input;
+}

.bin/ttrss-unread

@@ -0,0 +1,18 @@
+#/usr/bin/env -S deno run -A:q
+set -x
+session_cache="$HOME/.cache/tt-rss.session"
+ttrss_endpoint=https://feed.kmein.de/api/
+ttrss_user=k
+ttrss_password=$(pass shared/tt-rss/password)
+
+login() {
+  if [ -f "$session_cache" ]; then
+    session_id="$(cat "$session_cache")"
+  else
+    session_id="$(curl -d '{"op":"login","user":"'"$ttrss_user"'","password":"'"$ttrss_password"'"}' "$ttrss_endpoint" | jq -r .content.session_id)"
+    echo "$session_id" > "$session_cache"
+  fi
+}
+
+login
+curl -d '{"sid":"'"$session_id"'","op":"getUnread"}' "$ttrss_endpoint" | jq .content

.bin/tuesday-1800

@@ -0,0 +1,16 @@
+#!/bin/sh
+set -efux
+expected_max_results=1024 # the upper bound on the number of restaurants
+radius=250
+
+echo '[out:json];node(id:260050809)->.cbase;
+(
+  node(around.cbase:'$radius')[amenity=fast_food];
+  node(around.cbase:'$radius')[amenity=restaurant];
+);out;' \
+  | curl -sSL -d @- -X POST http://overpass-api.de/api/interpreter \
+  | jq --argjson random "$(shuf -i 0-$expected_max_results -n 1)" '
+    .elements
+    | length as $length
+    | .[$random % $length]
+  '

.bin/unicode

@@ -0,0 +1,8 @@
+import sys
+import unicodedata
+
+for index, character in enumerate(sys.stdin.read().strip()):
+  try:
+    print(index, character, hex(ord(character)), unicodedata.category(character), unicodedata.name(character))
+  except:
+    print(index, character, hex(ord(character)))

.bin/watson2fdf.sh

@@ -0,0 +1,26 @@
+project=Filli
+year=2022
+
+for month in Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec; do
+  from="$(date +%F -d "$month 1, $year")"
+  to="$(date +%F -d "$month 1, $year + 1 month")"
+  watson report --json --from "$from" --to "$to" --project "$project"
+done | jq --slurp '
+  def in_array($arr):
+      . as $value | any($arr[]; . == $value);
+
+  map(
+    ["engadin-app","fysiweb","val-muestair","mia-engiadina","ol"] as $official_projects
+    | (.timespan.from | .[0:7]) as $timespan
+    | .projects | .[0]
+    | .time as $total_time
+    | .tags
+    | select(. != null)
+    | map(select(.name | in_array($official_projects)))
+    | (map(.time)|add) as $official_time
+    | map({key:.name, value:.time}) | from_entries
+    | .other |= ($total_time - $official_time)
+    | map_values(. / (60*60) | ceil)
+    | .month |= $timespan
+  )
+'

AGENTS.md

@@ -1,96 +0,0 @@
-# niveum — Agent Notes
-
-## What This Is
-
-A NixOS flake managing ~9 machines (desktops, servers, family laptops) for one user (kmein/kfm).
-Levantine food-themed hostnames: fatteh, kabsa, kibbeh, makanek, manakish, tabula, tahina, zaatar, ful.
-
-## Repository Structure
-
-```
-flake.nix          # ~670 lines — inputs, overlay, nixosConfigurations, apps, packages output
-configs/           # ~50 NixOS config fragments imported by systems
-  default.nix      # 200+ line mega-module for desktop machines (user, shell, gnupg, i18n, etc.)
-  graphical/       # Hyprland + home-manager config (415 lines in home-manager.nix)
-  packages.nix     # ~250 lines of environment.systemPackages
-  bots/            # Telegram/Mastodon/Matrix bot configs
-  keyboard/        # XKB layouts (Coptic, Avestan, Gothic, etc.)
-configs/*.nix      # Individual concerns: bluetooth, sound, printing, ssh, fonts, etc.
-modules/           # Proper NixOS modules with options (retiolum, telegram-bot, passport, power-action, etc.)
-packages/          # ~107 package files (scripts, wrappers, small tools)
-systems/<name>/    # Per-machine: configuration.nix + hardware-configuration.nix + extras
-lib/               # default.nix (niveum helpers), machines.nix (IP/key inventory), panoptikon.nix
-secrets/           # agenix-encrypted .age files (empty dir in checkout, tracked via secrets.txt)
-```
-
-## Key Relationships
-
-- **niphas** (input): Provides shared "how I like things" config — nixosModules (shell, editor, git, desktop, nix, udiskie) and overlay (niphas-* packages). Used in `profiles.default` and `profiles.desktop`.
-- **configs/default.nix**: The "big desktop profile" — imported by fatteh, kabsa, manakish (the main desktop machines). NOT imported by servers or family laptops.
-- **profiles** (in flake.nix): `profiles.default`, `profiles.desktop`, `profiles.server` — lists of modules composed per machine.
-- **lib.niveum**: Custom lib injected via overlay (`pkgs.lib.niveum`) — used everywhere for machine addresses, SSH port, helper functions.
-
-## Coding Conventions
-
-- Packages use `writers.writeDashBin`, `writers.writeBashBin`, or `writers.writePython3Bin`
-- Dependencies are referenced via `lib.getExe pkg` (main executable) or `lib.getExe' pkg "name"` (specific binary)
-- For packages needing many commands via PATH, use `lib.makeBinPath` instead (see `packages/prospekte.nix`)
-- Overlay entries use `prev.callPackage packages/foo.nix { }` pattern
-- Packages are exported via `inherit (pkgs) ...` in the `packages` output
-
-## Known Bugs / Broken References
-
-All previously broken references have been fixed (see commits `36132b04`, `e67d6d7d`).
-
-Remaining issues:
-- `modules/retiolum.nix` uses `<retiolum/hosts>` and `<system-secrets/...>` NIX_PATH lookups — breaks flake purity but works with current `NIX_PATH` setup
-
-## Architectural Issues
-
-### 1. configs/default.nix is a grab-bag (200+ lines, ~15 inline anonymous modules)
-It's a list of `imports` mixing inline `{ ... }` blocks with file imports. Hard to find what's defined where.
-
-### 2. Retiolum secret boilerplate repeated 9 times
-Every system has a near-identical block:
-```nix
-age.secrets.retiolum-rsa = { file = ../../secrets/${hostname}-retiolum-privateKey-rsa.age; mode = "400"; owner = "tinc-retiolum"; ... };
-age.secrets.retiolum-ed25519 = { ... same ... };
-```
-Could be a function or module parameterized by hostname.
-
-### 3. Nginx + ACME boilerplate duplicated
-ful and makanek have identical nginx recommended settings + ACME config.
-
-### 4. niveum-* overlay aliases
-`niveum-terminal`, `niveum-browser`, `niveum-filemanager` are aliases to niphas equivalents. Could be removed by updating ~6 references in configs/ to use niphas-* names directly.
-
-### 5. The `pkgs.lib.niveum` pattern
-Custom lib injected via overlay into `pkgs.lib`. Unconventional — only available where overlay is applied. A `specialArgs` approach or standalone lib would be cleaner.
-
-### 6. Restic backup config scattered
-`services.restic.backups.niveum` is configured in configs/backup.nix, configs/applicative.nix, and extended in 5+ system files. Hard to see what a given machine backs up.
-
-### 7. configs/ vs modules/ distinction blurry
-`configs/` has both stateless config fragments (spacetime.nix = timezone) and stateful ones (backup.nix, cloud.nix). `modules/` has proper option-declaring modules. Some configs/ files import from modules/.
-
-## Machines Overview
-
-| Machine   | Role         | Profile          | Arch    | Notes                               |
-|-----------|--------------|------------------|---------|---------------------------------------|
-| fatteh    | Desktop      | default+desktop  | x86_64  | ThinkPad T480, CUDA, main daily       |
-| kabsa     | Desktop      | default+desktop  | x86_64  | ThinkPad X220, constrained (2 jobs)   |
-| manakish  | Desktop      | default+desktop  | x86_64  | ThinkPad X230                         |
-| kibbeh    | Desktop      | default+desktop  | x86_64  | Pantheon DE, travel laptop            |
-| ful       | Server       | default+server   | aarch64 | Oracle/Hetzner, nginx, web services   |
-| makanek   | Server       | default+server   | x86_64  | Hetzner, gitea, nextcloud, weechat    |
-| zaatar    | Server/Home  | default+server   | x86_64  | Home assistant, backup server         |
-| tabula    | Family laptop| default           | x86_64  | LXQt, user "xenos"                   |
-| tahina    | Family laptop| default           | x86_64  | Pantheon, user "xenos", German        |
-
-## Remaining Improvement Ideas
-
-1. **Extract retiolum secret boilerplate** into a function/module
-2. **Break up configs/default.nix** into proper named files
-3. **Extract nginx+ACME server profile**
-4. **Replace niveum-* aliases** with direct niphas-* references
-5. **Fix modules/retiolum.nix** NIX_PATH usage for flake purity

configs/aerc.nix

@@ -91,7 +91,7 @@
           imap.host = mailhost;
           imap.port = 993;
           smtp.host = mailhost;
-          smtp.port = 587;
+          smtp.port = 25;
           smtp.tls.useStartTls = true;
         };
       ical-ephemeris =

configs/applicative.nix

@@ -26,6 +26,8 @@
     })
   ];
 
+  services.getty.autologinOnce = lib.mkForce false;
+
   # to run nspawn in nix sandbox
   nix.settings = {
     auto-allocate-uids = true;

configs/bash.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  programs.bash = {
+    promptInit = ''PS1="$(${pkgs.ncurses}/bin/tput bold)\w \$([[ \$? == 0 ]] && echo \"\[\033[1;32m\]\" || echo \"\[\033[1;31m\]\")\$$(${pkgs.ncurses}/bin/tput sgr0) "'';
+    interactiveShellInit = ''
+      set -o vi
+    '';
+    completion.enable = true;
+  };
+}

configs/bots/default.nix

@@ -69,7 +69,7 @@ in
     wantedBy = [ "multi-user.target" ];
     description = "Telegram reverse bot";
     path = [ pkgs.ffmpeg ];
-    enable = false;
+    enable = true;
     script = ''
       TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-reverse
     '';
@@ -81,7 +81,7 @@ in
   systemd.services.telegram-streaming-link = {
     wantedBy = [ "multi-user.target" ];
     description = "Telegram bot converting YouTube Music <-> Spotify";
-    enable = false;
+    enable = true;
     script = ''
       TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-streaming-link
     '';
@@ -92,7 +92,7 @@ in
   systemd.services.telegram-betacode = {
     wantedBy = [ "multi-user.target" ];
     description = "Telegram beta code bot";
-    enable = false;
+    enable = true;
     script = ''
       TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-betacode
     '';
@@ -103,7 +103,7 @@ in
   systemd.services.telegram-proverb = {
     wantedBy = [ "multi-user.target" ];
     description = "Telegram proverb bot";
-    enable = false;
+    enable = true;
     script = ''
       TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-proverb
     '';

configs/default.nix

@@ -16,6 +16,9 @@ in
       nixpkgs = {
         config = {
           allowUnfree = true;
+          packageOverrides = pkgs: {
+            dmenu = pkgs.writers.writeDashBin "dmenu" ''exec ${pkgs.rofi}/bin/rofi -dmenu "$@"'';
+          };
           permittedInsecurePackages = [
           ];
         };
@@ -66,8 +69,6 @@ in
         extraGroups = [
           "pipewire"
           "audio"
-          "lp"
-          "scanner"
         ];
       };
 
@@ -88,7 +89,7 @@ in
         {
           sxiv = swallow "${pkgs.nsxiv}/bin/nsxiv";
           zathura = swallow "${pkgs.zathura}/bin/zathura";
-          im = "${pkgs.openssh}/bin/ssh weechat@makanek -t screen -x weechat";
+          im = "${pkgs.openssh}/bin/ssh weechat@makanek -t tmux attach-session -t IM";
           yt = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata -ic"; # Download video link
           yta = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata --audio-format mp3 --audio-quality 0 -xic"; # Download with audio
         };
@@ -152,7 +153,7 @@ in
         dconf.enable = true;
         dconf.settings = {
           # Change the default terminal for Nemo
-          "org/cinnamon/desktop/applications/terminal".exec = lib.getExe pkgs.niphas-terminal;
+          "org/cinnamon/desktop/applications/terminal".exec = lib.getExe pkgs.niveum-terminal;
         };
       };
     }

configs/direnv.nix

@@ -0,0 +1,42 @@
+{ pkgs, ... }:
+let
+  nixify = pkgs.writers.writeDashBin "nixify" ''
+    set -efuC
+
+    if [ ! -e ./.envrc ]; then
+      echo use_nix > .envrc
+      direnv allow
+    fi
+    if [ ! -e shell.nix ]; then
+      cat > shell.nix <<'EOF'
+    { pkgs ? import <nixpkgs> {} }:
+    pkgs.mkShell {
+      packages = [];
+    }
+    EOF
+      ''${EDITOR:-vim} shell.nix
+    fi
+  '';
+in
+{
+  environment.systemPackages = [
+    pkgs.direnv
+    nixify
+  ];
+
+  home-manager.users.me.programs.direnv = {
+    enable = true;
+    stdlib = builtins.readFile "${
+      pkgs.fetchFromGitHub {
+        owner = "Mic92";
+        repo = "dotfiles";
+        rev = "a0a9b7e358fa70a85cd468f8ca1fbb02ae0a91df";
+        sha256 = "1y9h5s1lf59sczsm0ksq2x1yhl98ba9lwk5yil3q53rg7n4574pg";
+      }
+    }/home/.direnvrc";
+  };
+
+  programs.zsh.interactiveShellInit = ''
+    eval "$(${pkgs.direnv}/bin/direnv hook zsh)"
+  '';
+}

configs/editor.nix

@@ -38,6 +38,7 @@
     pkgs.pyright
     pkgs.haskellPackages.haskell-language-server
     pkgs.texlab
+    pkgs.nil
     pkgs.gopls
     pkgs.nixfmt-rfc-style
     pkgs.rust-analyzer

configs/graphical/default.nix

@@ -35,8 +35,10 @@
     pkgs.xdg-desktop-portal-hyprland
   ];
 
-  services.getty.autologinOnce = true;
+  services.getty.autologinOnce = {
-  services.getty.autologinUser = config.users.users.me.name;
+    enable = true;
+    user = config.users.users.me.name;
+  };
 
   home-manager.users.me = import ./home-manager.nix {
     inherit lib pkgs config;

configs/graphical/home-manager.nix

@@ -265,9 +265,9 @@ in
         exec-once = [
           (lib.getExe pkgs.ashell)
           "hyprctl dispatch exec \"[workspace special:${language.obsidian} silent] obsidian\""
-          (lib.getExe pkgs.niphas-clipboard-watcher)
+          "${lib.getExe' pkgs.wl-clipboard "wl-paste"} -t text --watch ${lib.getExe pkgs.clipman} store"
-          (lib.getExe pkgs.niphas-redshift)
+          (lib.getExe pkgs.hyprsunset)
-          (lib.getExe pkgs.niphas-set-wallpaper)
+          (lib.getExe pkgs.hyprpaper)
         ];
 
         device = [
@@ -341,7 +341,7 @@ in
           ",XF86AudioMicMute, exec, wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"
           ",XF86MonBrightnessUp, exec, brightnessctl -e4 -n2 set 5%+"
           ",XF86MonBrightnessDown, exec, brightnessctl -e4 -n2 set 5%-"
-          ", Print, exec, ${lib.getExe pkgs.niphas-screenshot}"
+          ", Print, exec, ${lib.getExe pkgs.niphas-screenshot} -m region --clipboard-only"
         ];
         bindl = [
           ", XF86AudioNext, exec, playerctl next"
@@ -350,12 +350,12 @@ in
           ", XF86AudioPrev, exec, playerctl previous"
         ];
         bind = [
-          "${mod}, Return, exec, ${lib.getExe pkgs.niphas-terminal}"
+          "${mod}, Return, exec, ${lib.getExe pkgs.niveum-terminal}"
           "${mod} SHIFT, Q, killactive,"
           "${mod} SHIFT, R, exit,"
-          "${mod}, t, exec, ${lib.getExe pkgs.niphas-file-browser}"
+          "${mod}, t, exec, ${lib.getExe pkgs.niveum-filemanager}"
-          "${mod}, Y, exec, ${lib.getExe pkgs.niphas-web-browser}"
+          "${mod}, Y, exec, ${lib.getExe pkgs.niveum-browser}"
-          "${mod}, Q, exec, ${lib.getExe pkgs.niphas-clipman}"
+          "${mod}, Q, exec, ${lib.getExe pkgs.clipman} pick --tool=rofi"
           "${mod}, u, exec, ${lib.getExe pkgs.unicodmenu}"
           "${mod}, p, exec, ${lib.getExe pkgs.rofi-pass-wayland}"
           "${mod} SHIFT, Z, togglefloating,"

configs/hledger.nix

@@ -4,6 +4,7 @@
 }:
 let
   ledgerDirectory = "/home/kfm/sync/src/ledger";
+  hora = pkgs.callPackage ../packages/hora.nix { timeLedger = "${ledgerDirectory}/time.timeclock"; };
 in
 {
   environment.systemPackages =
@@ -11,6 +12,7 @@ in
       git = "${pkgs.git}/bin/git -C ${ledgerDirectory}";
     in
     [
+      hora
       pkgs.hledger
       (pkgs.writers.writeDashBin "hledger-git" ''
         if [ "$1" = entry ]; then

configs/i3.nix

@@ -243,9 +243,9 @@ in
           "${modifier}+w" = "layout tabbed";
           "${modifier}+q" = "exec ${config.services.clipmenu.package}/bin/clipmenu";
 
-          "${modifier}+Return" = "exec ${lib.getExe pkgs.niphas-terminal}";
+          "${modifier}+Return" = "exec ${lib.getExe pkgs.niveum-terminal}";
-          "${modifier}+t" = "exec ${lib.getExe pkgs.niphas-file-browser}";
+          "${modifier}+t" = "exec ${lib.getExe pkgs.niveum-filemanager}";
-          "${modifier}+y" = "exec ${lib.getExe pkgs.niphas-web-browser}";
+          "${modifier}+y" = "exec ${lib.getExe pkgs.niveum-browser}";
 
           "${modifier}+d" =
             "exec ${pkgs.writers.writeDash "run" ''exec rofi -modi run,ssh,window -show run''}";

configs/packages.nix

@@ -70,17 +70,23 @@ in
       GPODDER_DOWNLOAD_DIR=${config.users.users.me.home}/mobile/audio/Text/podcasts exec ${pkgs.gpodder}/bin/gpodder "$@"
     '')
     # INTERNET
+    aria2
     telegram-desktop
-    ferdium
+    whois
+    dnsutils
     # FILE MANAGERS
     lf
+    pcmanfm
     # MEDIA
     ffmpeg
     simplescreenrecorder
     imagemagick
     exiftool
+    nsxiv
     graphviz
     # SHELL
+    bat # better cat
+    dos2unix
     genpass # generate passwords
     (pkgs.writers.writeDashBin "genpassphrase" ''${pkgs.genpass}/bin/genpass "$@" --passphrase | ${pkgs.gnused}/bin/sed 's/ /-/g;s/\(^\|-\)\([a-z]\)/\1\U\2/g;s/$/-'$(${pkgs.coreutils}/bin/date +%Y)'/' '')
     gcc
@@ -88,10 +94,16 @@ in
     pup # html toolkit
     xan # csv toolkit
     magic-wormhole-rs # file transfer
+    man-pages
+    man-pages-posix
     exfat # to mount windows drives
     # HARDWARE TOOLS
     gnome-disk-utility
     arandr # xrandr for noobs
+    wdisplays
+    libnotify # for notify-send
+    wl-clipboard # clipboard CLI
+    dragon-drop # drag and drop
     portfolio # personal finance overview
     audacity
     calibre
@@ -130,7 +142,6 @@ in
     polyglot
     qrpaste
     ttspaste
-    pi # llm agent
     new-mac # get a new mac address
     scanned
     default-gateway
@@ -194,8 +205,6 @@ in
 
     #krebs
     pkgs.nur.repos.mic92.ircsink
-    cyberlocker-tools
-    kpaste
 
     (haskellPackages.ghcWithHoogle (hs: [
       hs.text
@@ -245,6 +254,10 @@ in
     # proselint
     asciidoctor
     wordnet
+    tokei # count lines of code
+    gnumake
+    binutils # for strip, ld, ...
+    # nightly.rust
     shellcheck
 
     # photography

configs/printing.nix

@@ -26,7 +26,7 @@ in
     openFirewall = true;
   };
 
-  # users.users.me.extraGroups is set in configs/default.nix which defines the "me" user
+  users.users.me.extraGroups = [ "lp" "scanner" ];
 
   hardware.printers.ensurePrinters = [
     {

flake.lock

@@ -113,28 +113,6 @@
         "type": "github"
       }
     },
-    "blueprint": {
-      "inputs": {
-        "nixpkgs": [
-          "llm-agents",
-          "nixpkgs"
-        ],
-        "systems": "systems_2"
-      },
-      "locked": {
-        "lastModified": 1769353768,
-        "narHash": "sha256-zI+7cbMI4wMIR57jMjDSEsVb3grapTnURDxxJPYFIW0=",
-        "owner": "numtide",
-        "repo": "blueprint",
-        "rev": "c7da5c70ad1c9b60b6f5d4f674fbe205d48d8f6c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "blueprint",
-        "type": "github"
-      }
-    },
     "buildbot-nix": {
       "inputs": {
         "flake-parts": "flake-parts_3",
@@ -143,7 +121,7 @@
           "stockholm",
           "nixpkgs"
         ],
-        "treefmt-nix": "treefmt-nix_3"
+        "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
         "lastModified": 1768927382,
@@ -398,26 +376,6 @@
         "type": "github"
       }
     },
-    "llm-agents": {
-      "inputs": {
-        "blueprint": "blueprint",
-        "nixpkgs": "nixpkgs",
-        "treefmt-nix": "treefmt-nix"
-      },
-      "locked": {
-        "lastModified": 1771167156,
-        "narHash": "sha256-hvlg7rTzAmfX2HW0GgrVGvbXoNioTK0bidbRv42QEhY=",
-        "owner": "numtide",
-        "repo": "llm-agents.nix",
-        "rev": "bbd22c02ac546b7ba07147eb14194128b44ff209",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "llm-agents.nix",
-        "type": "github"
-      }
-    },
     "menstruation-backend": {
       "inputs": {
         "fenix": [
@@ -464,24 +422,6 @@
         "type": "github"
       }
     },
-    "meteora": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_2"
-      },
-      "locked": {
-        "lastModified": 1773473448,
-        "narHash": "sha256-RpqPNdf0GTcpROKh6Au77cKUbR3MQyYTOMri8KoyGeU=",
-        "ref": "refs/heads/master",
-        "rev": "2fdcc62d97623f10e9a041e5c05b141950866551",
-        "revCount": 1380,
-        "type": "git",
-        "url": "ssh://git@github.com/kmein/meteora.git"
-      },
-      "original": {
-        "type": "git",
-        "url": "ssh://git@github.com/kmein/meteora.git"
-      }
-    },
     "naersk": {
       "inputs": {
         "fenix": [
@@ -510,15 +450,15 @@
         "nixpkgs": [
           "nixpkgs-unstable"
         ],
-        "treefmt-nix": "treefmt-nix_2",
+        "treefmt-nix": "treefmt-nix",
         "wrappers": "wrappers"
       },
       "locked": {
-        "lastModified": 1773416451,
+        "lastModified": 1770756688,
-        "narHash": "sha256-EZbY8AT7fmqmjW/IjYKMI3XFgDkdNqcJH7uMnzUAnMs=",
+        "narHash": "sha256-raCwOTt5xT7J1ysxdGrmBva6OVrvjf47EgVLi5B5R5o=",
         "ref": "refs/heads/master",
-        "rev": "cd556263286754a37ac7d3a4a71b8699923ea37c",
+        "rev": "86bf2150a7cabd225149f35c0ff57576af6ded44",
-        "revCount": 45,
+        "revCount": 38,
         "type": "git",
         "url": "https://code.kmein.de/kfm/niphas"
       },
@@ -607,16 +547,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1770843696,
+        "lastModified": 1769598131,
-        "narHash": "sha256-LovWTGDwXhkfCOmbgLVA10bvsi/P8eDDpRudgk68HA8=",
+        "narHash": "sha256-e7VO/kGLgRMbWtpBqdWl0uFg8Y2XWFMdz0uUJvlML8o=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "2343bbb58f99267223bc2aac4fc9ea301a155a16",
+        "rev": "fa83fd837f3098e3e678e6cf017b2b36102c7211",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixpkgs-unstable",
+        "ref": "nixos-25.11",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -668,54 +608,6 @@
         "type": "github"
       }
     },
-    "nixpkgs_2": {
-      "locked": {
-        "lastModified": 1772479524,
-        "narHash": "sha256-u7nCaNiMjqvKpE+uZz9hE7pgXXTmm5yvdtFaqzSzUQI=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "4215e62dc2cd3bc705b0a423b9719ff6be378a43",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1769598131,
-        "narHash": "sha256-e7VO/kGLgRMbWtpBqdWl0uFg8Y2XWFMdz0uUJvlML8o=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "fa83fd837f3098e3e678e6cf017b2b36102c7211",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-25.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1771369470,
-        "narHash": "sha256-0NBlEBKkN3lufyvFegY4TYv5mCNHbi5OmBDrzihbBMQ=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "0182a361324364ae3f436a63005877674cf45efb",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
     "nur": {
       "inputs": {
         "flake-parts": "flake-parts_2",
@@ -762,47 +654,6 @@
         "type": "github"
       }
     },
-    "opencrow": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "treefmt-nix": [
-          "treefmt-nix"
-        ]
-      },
-      "locked": {
-        "lastModified": 1773693388,
-        "narHash": "sha256-bYppS16wQsnvCpDMVXqUOaYvP2oSqvkzsrYGjJsrt48=",
-        "owner": "pinpox",
-        "repo": "opencrow",
-        "rev": "7f35d518cf0a0a4d5c90fea324425534a947ee33",
-        "type": "github"
-      },
-      "original": {
-        "owner": "pinpox",
-        "repo": "opencrow",
-        "type": "github"
-      }
-    },
-    "panoptikon": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_4"
-      },
-      "locked": {
-        "lastModified": 1771686951,
-        "narHash": "sha256-+s19xrH0kVVDT48TtpulmuWFMagi/ysjWL+PjKcmF/k=",
-        "ref": "refs/heads/main",
-        "rev": "8868eb8736c3395186fa410c040e0000abca56bd",
-        "revCount": 3,
-        "type": "git",
-        "url": "https://code.kmein.de/kfm/panoptikon"
-      },
-      "original": {
-        "type": "git",
-        "url": "https://code.kmein.de/kfm/panoptikon"
-      }
-    },
     "retiolum": {
       "locked": {
         "lastModified": 1756302470,
@@ -824,29 +675,26 @@
         "autorenkalender": "autorenkalender",
         "fenix": "fenix",
         "home-manager": "home-manager",
-        "llm-agents": "llm-agents",
         "menstruation-backend": "menstruation-backend",
         "menstruation-telegram": "menstruation-telegram",
-        "meteora": "meteora",
         "naersk": "naersk",
         "niphas": "niphas",
         "nix-index-database": "nix-index-database",
         "nix-topology": "nix-topology",
         "nixos-hardware": "nixos-hardware",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs",
         "nixpkgs-old": "nixpkgs-old",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "nur": "nur",
-        "opencrow": "opencrow",
-        "panoptikon": "panoptikon",
         "retiolum": "retiolum",
         "scripts": "scripts",
         "stockholm": "stockholm",
         "stylix": "stylix",
         "telebots": "telebots",
         "tinc-graph": "tinc-graph",
-        "treefmt-nix": "treefmt-nix_4",
+        "treefmt-nix": "treefmt-nix_3",
         "voidrice": "voidrice",
+        "wallpapers": "wallpapers",
         "wetter": "wetter",
         "wrappers": "wrappers_2"
       }
@@ -929,7 +777,7 @@
           "nixpkgs"
         ],
         "nur": "nur_2",
-        "systems": "systems_3",
+        "systems": "systems_2",
         "tinted-foot": "tinted-foot",
         "tinted-kitty": "tinted-kitty",
         "tinted-schemes": "tinted-schemes",
@@ -981,21 +829,6 @@
         "type": "github"
       }
     },
-    "systems_3": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
     "telebots": {
       "inputs": {
         "nixpkgs": [
@@ -1124,27 +957,6 @@
       }
     },
     "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "llm-agents",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1770228511,
-        "narHash": "sha256-wQ6NJSuFqAEmIg2VMnLdCnUc0b7vslUohqqGGD+Fyxk=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "337a4fe074be1042a35086f15481d763b8ddc0e7",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
-    },
-    "treefmt-nix_2": {
       "inputs": {
         "nixpkgs": [
           "niphas",
@@ -1165,7 +977,7 @@
         "type": "github"
       }
     },
-    "treefmt-nix_3": {
+    "treefmt-nix_2": {
       "inputs": {
         "nixpkgs": [
           "stockholm",
@@ -1187,7 +999,7 @@
         "type": "github"
       }
     },
-    "treefmt-nix_4": {
+    "treefmt-nix_3": {
       "inputs": {
         "nixpkgs": [
           "nixpkgs"
@@ -1223,6 +1035,22 @@
         "type": "github"
       }
     },
+    "wallpapers": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1589319718,
+        "narHash": "sha256-2NruGq3z37vY3uAH8S4sLqHvFAGi8gaDJAgEzMIvM/4=",
+        "owner": "kmein",
+        "repo": "wallpapers",
+        "rev": "7c553bc6bd78afa6dbf2824691466bbad0d8e6e9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "wallpapers",
+        "type": "github"
+      }
+    },
     "wetter": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -2,6 +2,8 @@
   description = "niveum: packages, modules, systems";
 
   inputs = {
+    self.submodules = true;
+
     agenix.url = "github:ryantm/agenix";
     autorenkalender.url = "github:kmein/autorenkalender";
     home-manager.url = "github:nix-community/home-manager/release-25.11";
@@ -12,7 +14,6 @@
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
     nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
     niphas.url = "git+https://code.kmein.de/kfm/niphas";
-    panoptikon.url = "git+https://code.kmein.de/kfm/panoptikon";
     nixos-hardware.url = "github:NixOS/nixos-hardware";
     nur.url = "github:nix-community/NUR";
     retiolum.url = "github:krebs/retiolum";
@@ -23,14 +24,13 @@
     tinc-graph.url = "github:kmein/tinc-graph";
     treefmt-nix.url = "github:numtide/treefmt-nix";
     voidrice.url = "github:Lukesmithxyz/voidrice";
+    wallpapers.url = "github:kmein/wallpapers";
     nix-topology.url = "github:oddlama/nix-topology";
     wetter.url = "github:4z3/wetter";
     wrappers.url = "github:lassulus/wrappers";
-    llm-agents.url = "github:numtide/llm-agents.nix";
-    opencrow.url = "github:pinpox/opencrow";
-    meteora.url = "git+ssh://git@github.com/kmein/meteora.git";
 
     voidrice.flake = false;
+    wallpapers.flake = false;
 
     naersk.url = "github:nix-community/naersk";
     fenix.url = "github:nix-community/fenix";
@@ -48,8 +48,6 @@
 
     agenix.inputs.home-manager.follows = "home-manager";
 
-    opencrow.inputs.treefmt-nix.follows = "treefmt-nix";
-
     agenix.inputs.nixpkgs.follows = "nixpkgs";
     autorenkalender.inputs.nixpkgs.follows = "nixpkgs";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
@@ -67,7 +65,6 @@
     wetter.inputs.nixpkgs.follows = "nixpkgs";
     niphas.inputs.nixpkgs.follows = "nixpkgs-unstable";
     wrappers.inputs.nixpkgs.follows = "nixpkgs";
-    opencrow.inputs.nixpkgs.follows = "nixpkgs";
   };
 
   outputs =
@@ -83,8 +80,6 @@
       scripts,
       tinc-graph,
       nix-topology,
-      llm-agents,
-      opencrow,
       nixpkgs-unstable,
       nixos-hardware,
       niphas,
@@ -92,13 +87,10 @@
       autorenkalender,
       telebots,
       stockholm,
-      panoptikon,
       nix-index-database,
       stylix,
       voidrice,
       wetter,
-      wrappers,
-      meteora,
       ...
     }:
     let
@@ -176,7 +168,7 @@
                       ${pkgs.nixos-rebuild-ng}/bin/nixos-rebuild-ng switch \
                         --max-jobs 2 \
                         --log-format internal-json \
-                        --flake .?submodules=1#${hostname} \
+                        --flake .#${hostname} \
                         --use-substitutes \
                         --target-host "$target" \
                         ${lib.optionalString (localSystem != machines.${hostname}.system) "--build-host $target"} \
@@ -198,29 +190,19 @@
       nixosModules = {
         moodle-dl = import modules/moodle-dl.nix;
         passport = import modules/passport.nix;
+        panoptikon = import modules/panoptikon.nix;
         power-action = import modules/power-action.nix;
         system-dependent = import modules/system-dependent.nix;
         telegram-bot = import modules/telegram-bot.nix;
         go-webring = import modules/go-webring.nix;
+
+        zsh-kmein = import config/zsh.nix;
       };
 
       overlays.default = final: prev: {
-
+        niveum-terminal = prev.alacritty;
-        # packaged from .bin/
+        niveum-browser = prev.firefox;
-        two56color = prev.callPackage packages/256color.nix { };
+        niveum-filemanager = prev.pcmanfm;
-        avesta = prev.callPackage packages/avesta.nix { };
-        bvg = prev.callPackage packages/bvg.nix { };
-        charinfo = prev.callPackage packages/charinfo.nix { };
-        chunk-pdf = prev.callPackage packages/chunk-pdf.nix { };
-        csv2json = prev.callPackage packages/csv2json.nix { };
-        fix-sd = prev.callPackage packages/fix-sd.nix { };
-        json2csv = prev.callPackage packages/json2csv.nix { };
-        mp3player-write = prev.callPackage packages/mp3player-write.nix { };
-        mushakkil = prev.callPackage packages/mushakkil.nix { };
-        nix-haddock-index = prev.callPackage packages/nix-haddock-index.nix { };
-        pdf-ocr = prev.callPackage packages/pdf-ocr.nix { };
-        prospekte = prev.callPackage packages/prospekte.nix { };
-        readme = prev.callPackage packages/readme.nix { };
 
         ashell = nixpkgs-unstable.legacyPackages.${prev.system}.ashell;
 
@@ -269,7 +251,6 @@
         morris = prev.callPackage packages/morris.nix { };
         cro = prev.callPackage packages/cro.nix { };
         exodus = prev.callPackage packages/exodus.nix { };
-        picoclaw = prev.callPackage packages/picoclaw.nix { };
         dmenu = prev.writers.writeDashBin "dmenu" ''exec ${final.rofi}/bin/rofi -dmenu "$@"'';
         weechatScripts = prev.weechatScripts // {
           hotlist2extern = prev.callPackage packages/weechatScripts/hotlist2extern.nix { }; # TODO upstream
@@ -290,7 +271,6 @@
         };
 
         # packaged from inputs
-        opencrow = opencrow.packages.${prev.stdenv.hostPlatform.system}.opencrow;
         wetter = wetter.packages.${prev.stdenv.hostPlatform.system}.wetter;
         agenix = agenix.packages.${prev.stdenv.hostPlatform.system}.default;
         pun-sort-api = scripts.packages.${prev.stdenv.hostPlatform.system}.pun-sort-api;
@@ -300,12 +280,10 @@
         menstruation-backend =
           menstruation-backend.packages.${prev.stdenv.hostPlatform.system}.menstruation-backend;
         telebots = telebots.packages.${prev.stdenv.hostPlatform.system}.telebots;
-        pi-llm = llm-agents.packages.${prev.stdenv.hostPlatform.system}.pi;
         hesychius = scripts.packages.${prev.stdenv.hostPlatform.system}.hesychius;
         autorenkalender = autorenkalender.packages.${prev.stdenv.hostPlatform.system}.default;
         onomap = scripts.packages.${prev.stdenv.hostPlatform.system}.onomap;
         tinc-graph = tinc-graph.packages.${prev.stdenv.hostPlatform.system}.tinc-graph;
-        meteora-website = meteora.packages.${prev.stdenv.hostPlatform.system}.website;
 
         # krebs
         brainmelter = prev.callPackage packages/brainmelter.nix { };
@@ -315,10 +293,6 @@
         radio-news = prev.callPackage packages/radio-news { };
         untilport = prev.callPackage packages/untilport.nix { };
         weechat-declarative = prev.callPackage packages/weechat-declarative.nix { };
-        pi = prev.callPackage packages/pi {
-          pkgs = final;
-          inherit wrappers;
-        };
 
         # my packages
         betacode = prev.callPackage packages/betacode.nix { };
@@ -369,6 +343,7 @@
         unicodmenu = prev.callPackage packages/unicodmenu.nix { };
         vg = prev.callPackage packages/vg.nix { };
         vim-kmein = prev.callPackage packages/vim-kmein { };
+        vimv = prev.callPackage packages/vimv.nix { };
         klem = prev.callPackage packages/klem.nix { };
         yt-dlp-master = prev.callPackage packages/yt-dlp-master.nix { };
 
@@ -377,6 +352,10 @@
             inherit lib;
             pkgs = final;
           };
+          panoptikon = import lib/panoptikon.nix {
+            inherit lib;
+            pkgs = final;
+          };
         };
       };
 
@@ -388,7 +367,6 @@
               nixpkgs.overlays = [
                 self.overlays.default
                 niphas.overlays.default
-                panoptikon.overlays.default
                 (final: prev: {
                   niphas-git =
                     (prev.niphas-git.passthru.configuration.apply {
@@ -453,17 +431,11 @@
               ++ profiles.server
               ++ [
                 systems/ful/configuration.nix
-                panoptikon.nixosModules.default
+                self.nixosModules.panoptikon
                 self.nixosModules.go-webring
                 stockholm.nixosModules.reaktor2
-                opencrow.nixosModules.default
                 nur.modules.nixos.default
-                {
+                { nixpkgs.overlays = [ stockholm.overlays.default ]; }
-                  nixpkgs.overlays = [
-                    stockholm.overlays.default
-                    llm-agents.overlays.default
-                  ];
-                }
               ];
           };
           zaatar = nixpkgs.lib.nixosSystem {
@@ -520,7 +492,7 @@
               ++ profiles.desktop
               ++ [
                 systems/manakish/configuration.nix
-                nixos-hardware.nixosModules.lenovo-thinkpad-x220
+                nixos-hardware.nixosModules.lenovo-thinkpad-x230
               ];
           };
           kabsa = nixpkgs.lib.nixosSystem {
@@ -531,7 +503,7 @@
               ++ profiles.desktop
               ++ [
                 systems/kabsa/configuration.nix
-                nixos-hardware.nixosModules.lenovo-thinkpad-x230
+                nixos-hardware.nixosModules.lenovo-thinkpad-x220
               ];
           };
           fatteh = nixpkgs.lib.nixosSystem {
@@ -573,20 +545,14 @@
             ];
           };
           inherit (pkgs)
-            two56color
-            avesta
             auc
             betacode
             booksplit
             brainmelter
             brassica
-            bvg
-            charinfo
             cheat-sh
-            chunk-pdf
             closest
             cro
-            csv2json
             cyberlocker-tools
             dawn-editor
             default-gateway
@@ -597,7 +563,6 @@
             emailmenu
             exodus
             fkill
-            fix-sd
             fzfmenu
             gfs-fonts
             bring-out-the-gimp
@@ -608,7 +573,6 @@
             image-convert-tolino
             ipa
             jsesh
-            json2csv
             kirciuoklis
             klem
             kpaste
@@ -617,31 +581,23 @@
             mansplain
             manual-sort
             morris
-            mp3player-write
             mpv-iptv
             mpv-radio
             mpv-tuner
             mpv-tv
-            mushakkil
             new-mac
             niveum-ssh
             nix-git
-            nix-haddock-index
             noise-waves
             notemenu
             obsidian-vim
             opustags
-            pdf-ocr
-            pi
-            picoclaw
             pls
             polyglot
-            prospekte
             q
             qrpaste
             radio-news
             random-zeno
-            readme
             rfc
             scanned
             stag
@@ -659,6 +615,7 @@
             vim-kmein
             vim-typewriter
             vim-email
+            vimv
             weechat-declarative
             wttr
             yt-dlp-master
@@ -666,9 +623,4 @@
         }
       );
     };
-
-  nixConfig = {
-    extra-substituters = [ "https://cache.numtide.com" ];
-    extra-trusted-public-keys = [ "niks3.numtide.com-1:DTx8wZduET09hRmMtKdQDxNNthLQETkc/yaX7M4qK0g=" ];
-  };
 }

lib/panoptikon.nix

@@ -0,0 +1,47 @@
+{
+  pkgs,
+  lib,
+  ...
+}:
+{
+  # watcher scripts
+  url =
+    address:
+    pkgs.writers.writeDash "watch-url" ''
+      ${pkgs.curl}/bin/curl -sSL ${lib.escapeShellArg address} \
+        | ${pkgs.python3Packages.html2text}/bin/html2text --decode-errors=ignore
+    '';
+  urlSelector =
+    selector: address:
+    pkgs.writers.writeDash "watch-url-selector" ''
+      ${pkgs.curl}/bin/curl -sSL ${lib.escapeShellArg address} \
+        | ${pkgs.htmlq}/bin/htmlq ${lib.escapeShellArg selector} \
+        | ${pkgs.python3Packages.html2text}/bin/html2text
+    '';
+  urlJSON =
+    {
+      jqScript ? ".",
+    }:
+    address:
+    pkgs.writers.writeDash "watch-url-json" ''
+      ${pkgs.curl}/bin/curl -sSL ${lib.escapeShellArg address} | ${pkgs.jq}/bin/jq -f ${pkgs.writeText "script.jq" jqScript}
+    '';
+
+  # reporter scripts
+  kpaste-irc =
+    {
+      target,
+      retiolumLink ? false,
+      server ? "irc.r",
+      messagePrefix ? "change detected: ",
+      nick ? ''"$PANOPTIKON_WATCHER"-watcher'',
+    }:
+    pkgs.writers.writeDash "kpaste-irc-reporter" ''
+      KPASTE_CONTENT_TYPE=text/plain ${pkgs.kpaste}/bin/kpaste \
+        | ${pkgs.gnused}/bin/sed -n "${if retiolumLink then "2" else "3"}s/^/${messagePrefix}/p" \
+        | ${pkgs.nur.repos.mic92.ircsink}/bin/ircsink \
+          --nick ${nick} \
+          --server ${server} \
+          --target ${target}
+    '';
+}

modules/panoptikon.nix

@@ -0,0 +1,123 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  options.services.panoptikon = {
+    enable = lib.mkEnableOption "Generic command output / website watcher";
+    watchers = lib.mkOption {
+      type = lib.types.attrsOf (
+        lib.types.submodule (watcher: {
+          options = {
+            script = lib.mkOption {
+              type = lib.types.path;
+              description = ''
+                A script whose stdout is to be watched.
+              '';
+              example = ''
+                pkgs.writers.writeDash "github-meta" '''
+                  ''${pkgs.curl}/bin/curl -sSL https://api.github.com/meta | ''${pkgs.jq}/bin/jq
+                '''
+              '';
+            };
+            frequency = lib.mkOption {
+              type = lib.types.str;
+              description = ''
+                How often to run the script. See systemd.time(7) for more information about the format.
+              '';
+              example = "*:0/3";
+              default = "daily";
+            };
+            loadCredential = lib.mkOption {
+              type = lib.types.listOf lib.types.str;
+              description = ''
+                This can be used to pass secrets to the systemd service without adding them to the nix store.
+              '';
+              default = [ ];
+            };
+            reporters = lib.mkOption {
+              type = lib.types.listOf lib.types.path;
+              description = ''
+                A list of scripts that take the diff (if any) via stdin and report it (e.g. to IRC, Telegram or Prometheus). The name of the watcher will be in the $PANOPTIKON_WATCHER environment variable.
+              '';
+              example = ''
+                [
+                  (pkgs.writers.writeDash "telegram-reporter" '''
+                    ''${pkgs.curl}/bin/curl -X POST https://api.telegram.org/bot''${TOKEN}/sendMessage \
+                      -d chat_id=123456 \
+                      -d text="$(cat)"
+                  ''')
+                  (pkgs.writers.writeDash "notify" '''
+                    ''${pkgs.libnotify}/bin/notify-send "$PANOPTIKON_WATCHER has changed."
+                  ''')
+                ]
+              '';
+            };
+          };
+          config = { };
+        })
+      );
+    };
+  };
+
+  config =
+    let
+      cfg = config.services.panoptikon;
+    in
+    lib.mkIf cfg.enable {
+      users.extraUsers.panoptikon = {
+        isSystemUser = true;
+        createHome = true;
+        home = "/var/lib/panoptikon";
+        group = "panoptikon";
+      };
+
+      users.extraGroups.panoptikon = { };
+
+      systemd.timers = lib.attrsets.mapAttrs' (
+        watcherName: _:
+        lib.nameValuePair "panoptikon-${watcherName}" {
+          timerConfig.RandomizedDelaySec = toString (60 * 60);
+        }
+      ) cfg.watchers;
+
+      systemd.services = lib.attrsets.mapAttrs' (
+        watcherName: watcherOptions:
+        lib.nameValuePair "panoptikon-${watcherName}" {
+          enable = true;
+          startAt = watcherOptions.frequency;
+          serviceConfig = {
+            Type = "oneshot";
+            User = "panoptikon";
+            Group = "panoptikon";
+            WorkingDirectory = "/var/lib/panoptikon";
+            RestartSec = toString (60 * 60);
+            Restart = "on-failure";
+            LoadCredential = watcherOptions.loadCredential;
+          };
+          unitConfig = {
+            StartLimitIntervalSec = "300";
+            StartLimitBurst = "5";
+          };
+          environment.PANOPTIKON_WATCHER = watcherName;
+          wants = [ "network-online.target" ];
+          script = ''
+            set -fux
+            ${watcherOptions.script} > ${lib.escapeShellArg watcherName}
+            diff_output=$(${pkgs.diffutils}/bin/diff --new-file ${
+              lib.escapeShellArg (watcherName + ".old")
+            } ${lib.escapeShellArg watcherName} || :)
+            if [ -n "$diff_output" ]
+            then
+              ${lib.strings.concatMapStringsSep "\n" (
+                reporter: ''echo "$diff_output" | ${reporter} || :''
+              ) watcherOptions.reporters}
+            fi
+            mv ${lib.escapeShellArg watcherName} ${lib.escapeShellArg (watcherName + ".old")}
+          '';
+        }
+      ) cfg.watchers;
+    };
+}

modules/retiolum.nix

@@ -0,0 +1,73 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib;
+let
+  netname = "retiolum";
+  cfg = config.networking.retiolum;
+in
+{
+  options = {
+    networking.retiolum.ipv4 = mkOption {
+      type = types.str;
+      description = ''
+        own ipv4 address
+      '';
+    };
+    networking.retiolum.ipv6 = mkOption {
+      type = types.str;
+      description = ''
+        own ipv6 address
+      '';
+    };
+    networking.retiolum.nodename = mkOption {
+      type = types.str;
+      default = config.networking.hostName;
+      description = ''
+        tinc network name
+      '';
+    };
+  };
+
+  config = {
+    services.tinc.networks.${netname} = {
+      name = cfg.nodename;
+      hosts = builtins.mapAttrs (name: _: builtins.readFile "${<retiolum/hosts>}/${name}") (
+        builtins.readDir <retiolum/hosts>
+      );
+      rsaPrivateKeyFile = toString <system-secrets/retiolum.key>;
+      ed25519PrivateKeyFile = toString <system-secrets/retiolum.ed25519>;
+      extraConfig = ''
+        LocalDiscovery = yes
+        AutoConnect = yes
+      '';
+    };
+
+    networking.extraHosts = builtins.readFile (toString <retiolum/etc.hosts>);
+
+    environment.systemPackages = [ config.services.tinc.networks.${netname}.package ];
+
+    networking.firewall = {
+      allowedTCPPorts = [ 655 ];
+      allowedUDPPorts = [ 655 ];
+    };
+    #services.netdata.portcheck.checks.tinc.port = 655;
+
+    systemd.network = {
+      enable = true;
+      networks = {
+        "${netname}".extraConfig = ''
+          [Match]
+          Name = tinc.${netname}
+
+          [Network]
+          Address=${cfg.ipv4}/12
+          Address=${cfg.ipv6}/16
+        '';
+      };
+    };
+  };
+}

packages/256color.nix

@@ -1,37 +0,0 @@
-{
-  writers,
-}:
-writers.writeDashBin "256color" ''
-  pl() {
-    for i in $(seq $1 $(expr $2 - 1)); do
-      printf '\e[38;5;%sm%03i\e[m ' $i $i
-    done
-    printf '\e[38;5;%sm%03i\e[m\n' $2 $2
-  }
-
-  p() {
-    printf '\e[38;5;%sm%03i\e[m ' $1 $1
-  }
-
-  p6x6() {
-    for i in $(seq 0 5); do
-      for j in $(seq 0 5); do
-        p $(expr $1 + $i + $j \* 6)
-      done
-      echo
-    done
-  }
-
-  pl 0 7
-  pl 8 15
-
-  p6x6 16
-  p6x6 52
-  p6x6 88
-  p6x6 124
-  p6x6 160
-  p6x6 196
-
-  pl 232 243
-  pl 244 255
-''

packages/avesta.nix

@@ -1,66 +0,0 @@
-# Transliterate Latin-script Avestan to Avestan Unicode script
-{
-  lib,
-  writers,
-  gnused,
-}:
-let
-  sedScript = builtins.toFile "avesta.sed" ''
-    s/ā̊/𐬃/g
-    s/t̰/𐬝/g
-    s/ṣ̌/𐬴/g
-    s/š́/𐬳/g
-    s/ą̄/𐬅/g
-    s/ŋᵛ/𐬤/g
-    s/ə̄/𐬇/g
-    s/ŋ́/𐬣/g
-    s/x́/𐬒/g
-    s/xᵛ/𐬓/g
-    s/a/𐬀/g
-    s/ā/𐬁/g
-    s/å/𐬂/g
-    s/ą/𐬄/g
-    s/ə/𐬆/g
-    s/e/𐬈/g
-    s/ē/𐬉/g
-    s/o/𐬊/g
-    s/ō/𐬋/g
-    s/i/𐬌/g
-    s/ī/𐬍/g
-    s/u/𐬎/g
-    s/ū/𐬏/g
-    s/k/𐬐/g
-    s/x/𐬑/g
-    s/g/𐬔/g
-    s/ġ/𐬕/g
-    s/γ/𐬖/g
-    s/c/𐬗/g
-    s/j/𐬘/g
-    s/t/𐬙/g
-    s/θ/𐬚/g
-    s/d/𐬛/g
-    s/δ/𐬜/g
-    s/p/𐬞/g
-    s/f/𐬟/g
-    s/b/𐬠/g
-    s/β/𐬡/g
-    s/ŋ/𐬢/g
-    s/n/𐬥/g
-    s/ń/𐬦/g
-    s/ṇ/𐬧/g
-    s/m/𐬨/g
-    s/m̨/𐬩/g
-    s/ẏ/𐬫/g
-    s/y/𐬪/g
-    s/v/𐬬/g
-    s/r/𐬭/g
-    s/s/𐬯/g
-    s/z/𐬰/g
-    s/š/𐬱/g
-    s/ž/𐬲/g
-    s/h/𐬵/g
-  '';
-in
-writers.writeDashBin "avesta" ''
-  exec ${lib.getExe gnused} -f ${sedScript} "$@"
-''

packages/bvg.nix

@@ -1,52 +0,0 @@
-# Berlin BVG transit disruption checker
-{
-  lib,
-  writers,
-  curl,
-  jq,
-}:
-writers.writeDashBin "bvg" ''
-  ${lib.getExe curl} -sSL 'https://www.bvg.de/disruption-reports/q' \
-    --data-raw '{"variables":{},"query":"{
-      allDisruptions {
-        disruptions {
-          meldungsId
-          linie
-          verkehrsmittel
-          __typename
-          ... on Traffic {
-            datum
-            gueltigVonDatum
-            gueltigVonZeit
-            gueltigBisDatum
-            gueltigBisZeit
-            richtungName
-            richtungHafasId
-            beginnAbschnittName
-            beginnAbschnittHafasId
-            endeAbschnittName
-            endeAbschnittHafasId
-            textIntUrsache
-            sev
-            textIntAuswirkung
-            umfahrung
-            textWAPSMSUrsache
-            textWAPSMSAuswirkung
-            prioritaet
-            __typename
-          }
-        }
-        __typename
-      }
-    }"}' \
-    | ${lib.getExe jq} --arg interesting "$interesting" '
-      .data.allDisruptions.disruptions
-      | map(select(
-        (.linie as $linie
-        | $interesting
-        | split(" ")
-        | index($linie))
-        and (.["__typename"] == "Traffic")
-      ))
-    '
-''

packages/charinfo.nix

@@ -1,17 +0,0 @@
-# Print Unicode character info for each character on stdin
-{
-  writers,
-  python3,
-}:
-writers.writePython3Bin "charinfo" {
-  flakeIgnore = [ "E501" "E722" ];
-} ''
-  import sys
-  import unicodedata
-
-  for index, character in enumerate(sys.stdin.read().strip()):
-      try:
-          print(index, character, hex(ord(character)), unicodedata.category(character), unicodedata.name(character))
-      except Exception:
-          print(index, character, hex(ord(character)))
-''

packages/chunk-pdf.nix

@@ -1,31 +0,0 @@
-# Split a PDF into chunks of N pages
-{
-  lib,
-  writers,
-  pdftk,
-  gnugrep,
-  coreutils,
-}:
-writers.writeDashBin "chunk-pdf" ''
-  set -efu
-
-  INPUT_FILE="''${2:?Pass the PDF path as second argument.}"
-  PAGES_PER_REPORT="''${1:?Pass the chunk size as first argument.}"
-
-  if [ ! -f "$INPUT_FILE" ]; then
-    echo >&2 "File $INPUT_FILE does not exist."
-    exit 1
-  fi
-
-  TOTAL_PAGES="$(${lib.getExe pdftk} "$INPUT_FILE" dump_data | ${lib.getExe gnugrep} NumberOfPages | ${lib.getExe' coreutils "cut"} -f2 -d' ')"
-
-  RUNS=$((TOTAL_PAGES/PAGES_PER_REPORT))
-
-  for run in $(${lib.getExe' coreutils "seq"} 0 "$((RUNS-1))"); do
-    start_page=$((run*PAGES_PER_REPORT+1))
-    end_page=$(((run+1)*PAGES_PER_REPORT))
-    output_file="chunk_$((run+1)).pdf"
-    echo "splitting $INPUT_FILE from $start_page to $end_page into $output_file"
-    ${lib.getExe pdftk} "$INPUT_FILE" cat "$start_page-$end_page" output "$output_file"
-  done
-''

packages/csv2json.nix

@@ -1,21 +0,0 @@
-# Convert CSV to JSON
-{
-  writers,
-  python3,
-}:
-writers.writePython3Bin "csv2json" {
-  flakeIgnore = [ "E501" ];
-} ''
-  import csv
-  import json
-  import sys
-  import argparse
-
-  parser = argparse.ArgumentParser()
-  parser.add_argument("--delimiter", "-d", default=",", help="CSV field separator")
-
-  args = parser.parse_args()
-
-  if __name__ == "__main__":
-      json.dump(list(csv.DictReader(sys.stdin, delimiter=args.delimiter)), sys.stdout)
-''

packages/fix-sd.nix

@@ -1,35 +0,0 @@
-# Recover files from a corrupted exFAT SD card
-{
-  lib,
-  writers,
-  exfatprogs,
-  util-linux,
-  coreutils,
-  findutils,
-  gnused,
-}:
-writers.writeDashBin "fix-sd" ''
-  set -efu
-
-  drive="''${1:?Usage: fix-sd /dev/sdX [output-dir]}"
-  output_dir="''${2:-$(${lib.getExe' coreutils "mktemp"} -d "''${TMPDIR:-/tmp}/fix-sd-XXXXXX")}"
-  mountpoint="$(${lib.getExe' coreutils "mktemp"} -d "''${TMPDIR:-/tmp}/fix-sd-mount-XXXXXX")"
-
-  trap clean EXIT
-  clean() {
-    ${lib.getExe' util-linux "umount"} "$mountpoint" 2>/dev/null || true
-    ${lib.getExe' coreutils "rmdir"} "$mountpoint" 2>/dev/null || true
-  }
-
-  filenames="$(${lib.getExe' exfatprogs "fsck.exfat"} "$drive" 2>&1 | ${lib.getExe gnused} -nE "s/.* file '(.*?)' is not allocated.*/\1/p")"
-  ${lib.getExe' coreutils "mkdir"} -p "$mountpoint" "$output_dir"
-  ${lib.getExe' util-linux "mount"} "$drive" "$mountpoint"
-
-  echo "$filenames" | while read -r filename; do
-    [ -n "$filename" ] || continue
-    ${lib.getExe' findutils "find"} "$mountpoint" -type f -name "$filename" -exec ${lib.getExe' coreutils "cp"} {} "$output_dir" \;
-  done
-
-  echo "Recovered files saved to $output_dir"
-  ${lib.getExe' exfatprogs "fsck.exfat"} "$drive"
-''

packages/gpt.nix

@@ -0,0 +1,15 @@
+{
+  curl,
+  writers,
+  jq,
+  apiKeyCommand ? "pass api-keys/openai.com",
+  model ? "gpt-3.5-turbo",
+}:
+writers.writeDashBin "gpt" ''
+  json=$(jq --slurp --raw-input '{model:"${model}", messages: [{role: "user", content: .}]}')
+  ${curl}/bin/curl -sSL https://api.openai.com/v1/chat/completions \
+    -H "Content-Type: application/json" \
+    -H "Authorization: Bearer $(${apiKeyCommand})" \
+    -d "$json" \
+    | ${jq}/bin/jq -r '.choices[] | .message.content'
+''

packages/hora.nix

@@ -0,0 +1,81 @@
+{
+  symlinkJoin,
+  hledger,
+  writers,
+  lib,
+  git,
+  coreutils,
+  gnugrep,
+  timeLedger,
+  ...
+}:
+let
+  date = "${coreutils}/bin/date +'%Y-%m-%d %H:%M:%S'";
+
+  hora = writers.writeDashBin "hora" "${hledger}/bin/hledger -f ${lib.escapeShellArg timeLedger} \"$@\"";
+  hora-edit = writers.writeDashBin "hora-edit" "$EDITOR ${lib.escapeShellArg timeLedger}";
+  hora-status = writers.writeDashBin "hora-status" "${coreutils}/bin/tac ${lib.escapeShellArg timeLedger} | ${gnugrep}/bin/grep -m 1 .";
+
+  hora-start = writers.writeDashBin "hora-start" ''
+    last_nonempty_line=$(${hora-status}/bin/hora-status)
+    (echo $last_nonempty_line | ${gnugrep}/bin/grep -q "^o") || {
+        echo "Last activity must be closed: $last_nonempty_line" >/dev/stderr
+        exit 1
+    }
+
+    account=$1
+    (${hora}/bin/hora accounts | ${gnugrep}/bin/grep -q "^$account\$") || {
+        echo "The account '$account' is not known. Please add manually."
+        exit 1
+    }
+
+    message=$2
+    date=$(${date})
+    echo "i $date $account  $message\n" >> "${timeLedger}"
+    echo "Started $account at $date" >/dev/stderr 
+  '';
+
+  hora-stop = writers.writeDashBin "hora-stop" ''
+    last_nonempty_line=$(${hora-status}/bin/hora-status)
+
+    (echo $last_nonempty_line | ${gnugrep}/bin/grep "^i") || {
+        echo "Last activity cannot be closed: $last_nonempty_line" >/dev/stderr
+        exit 1
+    }
+
+    last_activity=$(echo "$last_nonempty_line" | ${coreutils}/bin/cut -d' ' -f 4)
+    date=$(${date})
+
+    echo "o $date\n" >> ${timeLedger}
+    echo "Stopped $last_activity at $date" >/dev/stderr
+  '';
+
+  hora-year = writers.writeDashBin "hora-year" ''
+    ${hora}/bin/hora balance --tree --monthly --begin $(${coreutils}/bin/date +%Y) --depth 1
+  '';
+  hora-git = writers.writeDashBin "hora-git" ''
+    directory=$(${coreutils}/bin/dirname ${lib.escapeShellArg timeLedger})
+    if [ $# -gt 0 ]
+    then
+      ${git}/bin/git -C "$directory" --all --message=$(${date})
+    else
+      ${git}/bin/git -C "$directory" "$@"
+    fi
+  '';
+  hora-weekly = writers.writeDashBin "hora-weekly" ''
+    ${hora}/bin/hora register -p weekly --depth 1 --empty
+  '';
+in
+symlinkJoin {
+  name = "hora";
+  paths = [
+    hora
+    hora-edit
+    hora-start
+    hora-status
+    hora-stop
+    hora-year
+    hora-git
+    hora-weekly
+  ];
+}

packages/json2csv.nix

@@ -1,32 +0,0 @@
-# Convert JSON array of objects to CSV
-{
-  writers,
-  python3,
-}:
-writers.writePython3Bin "json2csv" {
-  flakeIgnore = [ "E501" ];
-} ''
-  import csv
-  import json
-  import sys
-
-  if __name__ == "__main__":
-      json_list = json.load(sys.stdin)
-      if not isinstance(json_list, list):
-          print("JSON object is not a list.", file=sys.stderr)
-          sys.exit(1)
-      if len(json_list) == 0:
-          print("JSON list is empty.", file=sys.stderr)
-          sys.exit(1)
-      keys = set()
-      for element in json_list:
-          if isinstance(element, dict):
-              keys |= element.keys()
-          else:
-              print("Non-dict element:", element, file=sys.stderr)
-              sys.exit(1)
-      writer = csv.DictWriter(sys.stdout, fieldnames=list(keys))
-      writer.writeheader()
-      for element in json_list:
-          writer.writerow(element)
-''

packages/k-lock.nix

@@ -0,0 +1,30 @@
+{
+  writers,
+  lib,
+  xlockmore,
+}:
+let
+  xlockModes = lib.concatStringsSep "\\n" [
+    # "braid"
+    "galaxy"
+    # "lightning"
+    # "matrix"
+    "pyro2"
+    "space"
+  ];
+in
+writers.writeDashBin "k-lock" ''
+  MODE=$(printf "${xlockModes}" | shuf -n 1)
+
+  ${xlockmore}/bin/xlock \
+    -saturation 0.4 \
+    -erasemode no_fade \
+    +description \
+    -showdate \
+    -username " " \
+    -password " " \
+    -info " " \
+    -validate "..." \
+    -invalid "Computer says no." \
+    -mode "$MODE"
+''

packages/mp3player-write.nix

@@ -1,70 +0,0 @@
-# Convert and transfer audio files to an MP3 player
-{
-  lib,
-  writers,
-  ffmpeg,
-  coreutils,
-  gnugrep,
-  gnused,
-}:
-writers.writeBashBin "mp3player-write" ''
-  set -e
-
-  SPEED=1.0
-
-  while getopts ":s:" opt; do
-    case $opt in
-      s) SPEED=$OPTARG ;;
-      \?) echo "Invalid option: -$OPTARG" >&2; exit 1 ;;
-      :) echo "Option -$OPTARG requires a value." >&2; exit 1 ;;
-    esac
-  done
-  shift $((OPTIND -1))
-
-  if [ "$#" -lt 2 ]; then
-    echo "Usage: mp3player-write [-s speed] MOUNT_POINT FILE1 [FILE2 ...]"
-    exit 1
-  fi
-
-  MOUNT_POINT=$1
-  shift
-  FILES=("$@")
-
-  if [ ! -d "$MOUNT_POINT" ]; then
-    echo "Error: Mount point '$MOUNT_POINT' does not exist."
-    exit 1
-  fi
-
-  sanitize_filename() {
-    local name
-    name=$(${lib.getExe' coreutils "basename"} "$1")
-    name=''${name%.*}
-    name=$(echo "$name" | ${lib.getExe' coreutils "tr"} ' ' '_' | ${lib.getExe' coreutils "tr"} -cd '[:alnum:]_-')
-    echo "''${name:0:50}"
-  }
-
-  for f in "''${FILES[@]}"; do
-    [ -f "$f" ] || continue
-
-    existing_prefixes=$(${lib.getExe' coreutils "ls"} "$MOUNT_POINT" | ${lib.getExe gnugrep} -E '^[0-9].*\.mp3$' | ${lib.getExe gnused} -E 's/^([0-9]).*/\1/' | ${lib.getExe' coreutils "sort"} -n | ${lib.getExe' coreutils "uniq"})
-    for i in {0..9}; do
-      if ! echo "$existing_prefixes" | ${lib.getExe gnugrep} -q "^$i$"; then
-        PREFIX=$i
-        break
-      fi
-    done
-
-    BASENAME=$(sanitize_filename "$f")
-    OUT_PATTERN="$MOUNT_POINT/''${PREFIX}_%03d_''${BASENAME}.mp3"
-
-    echo "Converting '$f' to '$OUT_PATTERN' at speed $SPEED..."
-
-    ${lib.getExe ffmpeg} -nostdin -i "$f" \
-      -filter:a "atempo=$SPEED" \
-      -ar 22050 -ac 1 -c:a libmp3lame -b:a 32k \
-      -f segment -segment_time 300 \
-      "$OUT_PATTERN"
-  done
-
-  echo "All files processed successfully."
-''

packages/mushakkil.nix

@@ -1,14 +0,0 @@
-# Add Arabic diacritics (tashkeel) to text via alsharekh.org
-{
-  lib,
-  writers,
-  curl,
-  jq,
-}:
-writers.writeDashBin "mushakkil" ''
-  ${lib.getExe curl} -sSL 'https://diac.alsharekh.org/Diac/DiacText' \
-    -H "Content-Type: application/json" \
-    --data-raw "$(${lib.getExe jq} --raw-input '{word: ., type: 1}')" \
-    --compressed \
-    | ${lib.getExe jq} -r .diacWord
-''

packages/nix-haddock-index.nix

@@ -1,84 +0,0 @@
-# Generate a Haddock index page for all packages visible to the current GHC
-{
-  lib,
-  writers,
-  coreutils,
-  gnugrep,
-  gnused,
-  graphviz,
-}:
-writers.writeBashBin "nix-haddock-index" ''
-  set -efux
-
-  if test -z "''${NIX_GHC-}"; then
-    NIX_GHC=$(${lib.getExe' coreutils "readlink"} -f "$(type -P ghc)")
-  fi
-
-  if ! echo $NIX_GHC | ${lib.getExe gnugrep} -q '^/nix/store/'; then
-    printf '%s: error: unsupported GHC executable path (not in Nix store): %q\n' \
-        "$0" \
-        "$NIX_GHC" \
-      >&2
-    exit 1
-  fi
-
-  NIX_GHC_PREFIX=$(${lib.getExe' coreutils "dirname"} "$(${lib.getExe' coreutils "dirname"} "$NIX_GHC")")
-  NIX_GHC_DOCDIR=$NIX_GHC_PREFIX/share/doc/ghc/html
-
-  main() {
-    hash=$(echo $NIX_GHC_PREFIX | ${lib.getExe gnused} -n 's|^/nix/store/\([a-z0-9]\+\).*|\1|p')
-    title="Haddock index for $NIX_GHC_PREFIX"
-
-    header=$(
-      printf 'Haddock index for <a href="%s">%s</a>\n' \
-          $NIX_GHC_PREFIX \
-          $NIX_GHC_PREFIX \
-    )
-
-    suffix=''${hash:+-$hash}
-    index_file=/tmp/haddock$suffix-index.html
-    svg_file=/tmp/haddock$suffix.svg
-
-    eval "$(
-      echo 'gen_index() {'
-      echo '  html_head'
-      "$NIX_GHC_PREFIX"/bin/ghc-pkg dump | ${lib.getExe gnused} -n '
-        s/^---$/  reset/p
-        s/^\(name\|version\):\s*\([-A-Za-z0-9_.]\+\)$/  \1=\2/p
-        s/^haddock-html:\s*\([-A-Za-z0-9_./]\+\)$/  haddock_html \1/p
-      '
-      echo '  html_foot'
-      echo '}'
-    )"
-
-    gen_index > $index_file
-
-    "$NIX_GHC_PREFIX"/bin/ghc-pkg dot | ${lib.getExe' graphviz "tred"} | ${lib.getExe' graphviz "dot"} -Tsvg | ${lib.getExe gnused} '
-      s/<svg width="[0-9]\+pt" height="[0-9]\+pt"/<svg width="3600px" height="100%"/
-    ' > $svg_file
-
-    echo $index_file
-  }
-  reset() {
-    unset name version
-  }
-  haddock_html() {
-    printf '<li>'
-    printf '<a href="%s/index.html">%s</a>' "$1" "$name-$version"
-    printf '</li>\n'
-  }
-  html_head() {
-    printf '<!doctype html>\n'
-    printf '<title>%s</title>\n' "$title"
-    printf '<link href="%s" rel="stylesheet" type="text/css">\n' \
-        "$NIX_GHC_DOCDIR/libraries/ocean.css"
-    printf '<h1>%s</h1>\n' "$header"
-    printf '<ul>\n'
-  }
-  html_foot() {
-    printf '</ul>\n'
-    printf '<a href="%s">graph</a>\n' "$svg_file"
-  }
-
-  main "$@"
-''

packages/pdf-ocr.nix

@@ -1,30 +0,0 @@
-# OCR a PDF file to text using tesseract
-{
-  lib,
-  writers,
-  poppler-utils,
-  tesseract,
-  coreutils,
-}:
-writers.writeDashBin "pdf-ocr" ''
-  set -efu
-
-  pdf_path="$(${lib.getExe' coreutils "realpath"} "$1")"
-
-  [ -f "$pdf_path" ] || {
-    echo "Usage: pdf-ocr FILE.pdf" >&2
-    exit 1
-  }
-
-  tmpdir="$(${lib.getExe' coreutils "mktemp"} -d)"
-  trap 'rm -rf $tmpdir' EXIT
-
-  cd "$tmpdir"
-
-  ${lib.getExe' poppler-utils "pdftoppm"} -png "$pdf_path" pdf-ocr
-  for png in pdf-ocr*.png; do
-    ${lib.getExe tesseract} "$png" "$png.txt" 2>/dev/null
-  done
-
-  cat pdf-ocr-*.txt
-''

packages/pi/default.nix

@@ -1,70 +0,0 @@
-{ pkgs, wrappers }:
-let
-  piWrapper = wrappers.lib.wrapModule {
-    imports = [ ./module.nix ];
-    inherit pkgs;
-
-    settings = {
-      packages = [
-        {
-          source = "npm:pi-hooks";
-          version = "1.0.3";
-          hash = "sha256-jU3akfqsWgjvOG+8+Md2qEzkXp48LUaXVncpUMXxy7s=";
-          deps = [
-            {
-              source = "npm:shell-quote";
-              version = "1.8.3";
-              hash = "sha256-32QLNUuvjigj1scqLlCVFTfgS3MHm9dBjPk9iVB+IsE=";
-            }
-            {
-              source = "npm:vscode-languageserver-protocol";
-              version = "3.17.5";
-              hash = "sha256-dHPrLSFj8/i+oJZE+dgDeJoZXllrZdOUbEFX5YPjzMg=";
-              deps = [
-                {
-                  source = "npm:vscode-jsonrpc";
-                  version = "8.2.0";
-                  hash = "sha256-PaRFMcOY8VRQdMtyjjWagi81ufiscXHIR/QvByi5x8s=";
-                }
-                {
-                  source = "npm:vscode-languageserver-types";
-                  version = "3.17.5";
-                  hash = "sha256-1nP55/i75RNRvlHFjzLU3PqXpnDruGvGMzaDlMYJysA=";
-                }
-              ];
-            }
-          ];
-        }
-        {
-          source = "npm:shitty-extensions";
-          version = "1.0.9";
-          hash = "sha256-g26MZ5x4HUcDai4SXPaOEhqgGGqzAI68znnsCbKJv7E=";
-          extensions = [ "!extensions/resistance.ts" ];
-        }
-      ];
-      extensions = [
-        ./questionnaire.ts
-      ];
-      defaultProvider = "anthropic";
-      defaultModel = "claude-opus-4-6";
-      defaultThinkingLevel = "medium";
-      permissionLevel = "low";
-      permissionMode = "ask";
-      permissionConfig.overrides.minimal = [
-        "nix build *"
-        "nix eval *"
-        "nix fmt *"
-      ];
-    };
-
-    pluginOverrides = ''
-      # Fix keybinding conflicts in extension source
-      ${pkgs.gnused}/bin/sed -i 's/"ctrl+u"/"ctrl+shift+u"/' $out/lib/node_modules/shitty-extensions/extensions/ultrathink.ts
-      ${pkgs.gnused}/bin/sed -i 's/"ctrl+r"/"ctrl+shift+r"/' $out/lib/node_modules/shitty-extensions/extensions/speedreading.ts
-
-      # Remove a-nach-b skill
-      rm -rf $out/lib/node_modules/shitty-extensions/skills/a-nach-b
-    '';
-  };
-in
-piWrapper.wrapper

packages/pi/module.nix

@@ -1,150 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-let
-  pkgs = config.pkgs;
-
-  # Extract npm packages with hashes from settings.packages
-  npmPackages = lib.filter (p: builtins.isAttrs p && p ? hash) (config.settings.packages or [ ]);
-
-  # Fetch an npm tarball and unpack it into lib/node_modules/<name>
-  fetchPlugin =
-    pkg:
-    let
-      source = pkg.source or pkg;
-      name = lib.removePrefix "npm:" source;
-      tarball = pkgs.fetchurl {
-        url = "https://registry.npmjs.org/${name}/-/${name}-${pkg.version}.tgz";
-        hash = pkg.hash;
-      };
-      deps = map fetchPlugin (pkg.deps or [ ]);
-    in
-    pkgs.runCommand "pi-plugin-${name}"
-      {
-        nativeBuildInputs = [
-          pkgs.gnutar
-          pkgs.gzip
-        ];
-      }
-      ''
-        mkdir -p $out/lib/node_modules/${name}
-        tar xzf ${tarball} --strip-components=1 -C $out/lib/node_modules/${name}
-        ${lib.concatMapStringsSep "\n" (
-          dep:
-          "mkdir -p $out/lib/node_modules/${name}/node_modules"
-          + "\ncp -a ${dep}/lib/node_modules/* $out/lib/node_modules/${name}/node_modules/"
-          + "\ncp -a ${dep}/lib/node_modules/* $out/lib/node_modules/"
-        ) deps}
-      '';
-
-  fetchedPlugins = map fetchPlugin npmPackages;
-
-  # Strip hash and null-valued attrs from package entries before writing settings.json
-  cleanPackage =
-    p:
-    if builtins.isAttrs p then
-      lib.filterAttrs (k: v: k != "hash" && k != "version" && k != "deps" && v != null) p
-    else
-      p;
-
-  cleanSettings = config.settings // {
-    packages = map cleanPackage (config.settings.packages or [ ]);
-  };
-
-  settingsFile = pkgs.writeText "pi-settings.json" (builtins.toJSON cleanSettings);
-in
-{
-  _class = "wrapper";
-
-  options = {
-    settings = lib.mkOption {
-      type = lib.types.submodule {
-        freeformType = (pkgs.formats.json { }).type;
-        options.packages = lib.mkOption {
-          type = lib.types.listOf (
-            lib.types.either lib.types.str (
-              lib.types.submodule {
-                freeformType = (pkgs.formats.json { }).type;
-                options.hash = lib.mkOption {
-                  type = lib.types.str;
-                  description = "Fixed-output hash for fetching this npm package.";
-                };
-                options.source = lib.mkOption {
-                  type = lib.types.str;
-                  description = "Package source (e.g. npm:package-name).";
-                };
-                options.version = lib.mkOption {
-                  type = lib.types.str;
-                  description = "Exact version to pin (e.g. 1.0.3). Ensures reproducible fetching.";
-                };
-                options.deps = lib.mkOption {
-                  type = lib.types.listOf (lib.types.attrsOf lib.types.anything);
-                  default = [ ];
-                  description = "Transitive npm dependencies as {source, version, hash} attrsets.";
-                };
-                options.extensions = lib.mkOption {
-                  type = lib.types.nullOr (lib.types.listOf lib.types.str);
-                  default = null;
-                  description = ''
-                    Extension filter patterns following pi's native syntax.
-                    When null (default), all extensions from the package are loaded.
-                    An empty list explicitly disables all extensions.
-                    Patterns use prefixes to control inclusion:
-                    - `"!pattern"` — exclude matching extensions
-                    - `"+pattern"` — force-include (overrides excludes)
-                    - `"-pattern"` — force-exclude (overrides includes)
-                    - `"path"` — plain path to include
-                  '';
-                  example = [
-                    "!./extensions/resistance.ts"
-                  ];
-                };
-              }
-            )
-          );
-          default = [ ];
-          description = "Pi packages list. Object entries may include a `hash` for Nix fetching.";
-        };
-      };
-      default = { };
-      description = "Pi settings.json content.";
-    };
-
-    pluginOverrides = lib.mkOption {
-      type = lib.types.str;
-      default = "";
-      description = ''
-        Shell commands to run after assembling the plugin prefix.
-        The variable `$out` points to the mutable copy.
-      '';
-    };
-
-    pluginPrefix = lib.mkOption {
-      type = lib.types.package;
-      description = "The final npm prefix with all plugins merged and overrides applied.";
-      default = pkgs.runCommand "pi-plugins" { } ''
-        mkdir -p $out
-        ${lib.concatMapStringsSep "\n" (p: "cp -a --no-preserve=mode ${p}/* $out/") fetchedPlugins}
-        ${lib.optionalString (config.pluginOverrides != "") config.pluginOverrides}
-      '';
-    };
-  };
-
-  config.package = lib.mkDefault pkgs.pi-llm;
-
-  config.extraPackages = [ pkgs.nodejs ];
-
-  config.env.npm_config_prefix = "${config.pluginPrefix}";
-  config.env.PI_SETTINGS_FILE = "${settingsFile}";
-
-  config.meta.maintainers = [
-    {
-      name = "lassulus";
-      github = "lassulus";
-      githubId = 621375;
-    }
-  ];
-  config.meta.platforms = lib.platforms.all;
-}

packages/pi/patch-permission-sound.py

@@ -1,35 +0,0 @@
-#!/usr/bin/env python3
-"""Patch pi-hooks permission extension to play peon sounds via pw-play on Linux."""
-import re
-import sys
-
-ts_file = sys.argv[1]
-pw_play = sys.argv[2]
-
-src = open(ts_file).read()
-
-# Use a lambda for replacement to avoid re.sub interpreting backslash sequences
-replacement = r"""function playPermissionSound(): void {
-  const isMac = process.platform === "darwin";
-  if (isMac) {
-    exec('afplay /System/Library/Sounds/Funk.aiff 2>/dev/null', (err) => {
-      if (err) process.stdout.write("\x07");
-    });
-  } else {
-    const n = Math.floor(Math.random() * 4) + 1;
-    exec(`""" + pw_play + r""" "$HOME/src/sounds/games/Warcraft III/Units/Orc/Peon/PeonWhat${n}.wav"`, () => {});
-  }
-}"""
-
-result = re.sub(
-    r'function playPermissionSound\(\): void \{.*?\n\}',
-    lambda m: replacement,
-    src,
-    flags=re.DOTALL,
-)
-
-if result == src:
-    print("ERROR: playPermissionSound function not found in", ts_file, file=sys.stderr)
-    sys.exit(1)
-
-open(ts_file, 'w').write(result)

packages/pi/questionnaire.ts

@@ -1,463 +0,0 @@
-/**
- * Questionnaire Tool - Ask the user multiple choice questions
- *
- * Registers a "questionnaire" tool the LLM can call to ask single or multiple
- * questions with an interactive TUI. Based on mic92's pi-agent-extensions.
- */
-
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
-import {
-  Editor,
-  type EditorTheme,
-  Key,
-  matchesKey,
-  Text,
-  truncateToWidth,
-} from "@mariozechner/pi-tui";
-import { Type } from "@sinclair/typebox";
-
-interface QuestionOption {
-  value: string;
-  label: string;
-  description?: string;
-}
-
-type RenderOption = QuestionOption & { isOther?: boolean };
-
-interface Question {
-  id: string;
-  label: string;
-  prompt: string;
-  options: QuestionOption[];
-  allowOther: boolean;
-}
-
-interface Answer {
-  id: string;
-  value: string;
-  label: string;
-  wasCustom: boolean;
-  index?: number;
-}
-
-interface QuestionnaireResult {
-  questions: Question[];
-  answers: Answer[];
-  cancelled: boolean;
-}
-
-const QuestionOptionSchema = Type.Object({
-  value: Type.String({ description: "The value returned when selected" }),
-  label: Type.String({ description: "Display label for the option" }),
-  description: Type.Optional(
-    Type.String({ description: "Optional description shown below label" }),
-  ),
-});
-
-const QuestionSchema = Type.Object({
-  id: Type.String({ description: "Unique identifier for this question" }),
-  label: Type.Optional(
-    Type.String({
-      description:
-        "Short contextual label for tab bar, e.g. 'Scope', 'Priority' (defaults to Q1, Q2)",
-    }),
-  ),
-  prompt: Type.String({ description: "The full question text to display" }),
-  options: Type.Array(QuestionOptionSchema, {
-    description: "Available options to choose from",
-  }),
-  allowOther: Type.Optional(
-    Type.Boolean({
-      description: "Allow 'Type something' option (default: true)",
-    }),
-  ),
-});
-
-const QuestionnaireParams = Type.Object({
-  questions: Type.Array(QuestionSchema, {
-    description: "Questions to ask the user",
-  }),
-});
-
-function errorResult(
-  message: string,
-  questions: Question[] = [],
-): {
-  content: { type: "text"; text: string }[];
-  details: QuestionnaireResult;
-} {
-  return {
-    content: [{ type: "text", text: message }],
-    details: { questions, answers: [], cancelled: true },
-  };
-}
-
-export default function questionnaire(pi: ExtensionAPI) {
-  pi.registerTool({
-    name: "questionnaire",
-    label: "Questionnaire",
-    description:
-      "Ask the user one or more multiple choice questions. Use for clarifying requirements, getting preferences, confirming decisions, or quizzing. For single questions, shows a simple option list. For multiple questions, shows a tab-based interface.",
-    parameters: QuestionnaireParams,
-
-    async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
-      if (!ctx.hasUI) {
-        return errorResult(
-          "Error: UI not available (running in non-interactive mode)",
-        );
-      }
-      if (params.questions.length === 0) {
-        return errorResult("Error: No questions provided");
-      }
-
-      const questions: Question[] = params.questions.map((q, i) => ({
-        ...q,
-        label: q.label || `Q${i + 1}`,
-        allowOther: q.allowOther !== false,
-      }));
-
-      const isMulti = questions.length > 1;
-      const totalTabs = questions.length + 1;
-
-      const result = await ctx.ui.custom<QuestionnaireResult>(
-        (tui, theme, _kb, done) => {
-          let currentTab = 0;
-          let optionIndex = 0;
-          let inputMode = false;
-          let inputQuestionId: string | null = null;
-          let cachedLines: string[] | undefined;
-          const answers = new Map<string, Answer>();
-
-          const editorTheme: EditorTheme = {
-            borderColor: (s) => theme.fg("accent", s),
-            selectList: {
-              selectedPrefix: (t) => theme.fg("accent", t),
-              selectedText: (t) => theme.fg("accent", t),
-              description: (t) => theme.fg("muted", t),
-              scrollInfo: (t) => theme.fg("dim", t),
-              noMatch: (t) => theme.fg("warning", t),
-            },
-          };
-          const editor = new Editor(tui, editorTheme);
-
-          function refresh() {
-            cachedLines = undefined;
-            tui.requestRender();
-          }
-
-          function submit(cancelled: boolean) {
-            done({
-              questions,
-              answers: Array.from(answers.values()),
-              cancelled,
-            });
-          }
-
-          function currentQuestion(): Question | undefined {
-            return questions[currentTab];
-          }
-
-          function currentOptions(): RenderOption[] {
-            const q = currentQuestion();
-            if (!q) return [];
-            const opts: RenderOption[] = [...q.options];
-            if (q.allowOther) {
-              opts.push({
-                value: "__other__",
-                label: "Type something.",
-                isOther: true,
-              });
-            }
-            return opts;
-          }
-
-          function allAnswered(): boolean {
-            return questions.every((q) => answers.has(q.id));
-          }
-
-          function advanceAfterAnswer() {
-            if (!isMulti) {
-              submit(false);
-              return;
-            }
-            if (currentTab < questions.length - 1) {
-              currentTab++;
-            } else {
-              currentTab = questions.length;
-            }
-            optionIndex = 0;
-            refresh();
-          }
-
-          function saveAnswer(
-            questionId: string,
-            value: string,
-            label: string,
-            wasCustom: boolean,
-            index?: number,
-          ) {
-            answers.set(questionId, {
-              id: questionId,
-              value,
-              label,
-              wasCustom,
-              index,
-            });
-          }
-
-          editor.onSubmit = (value) => {
-            if (!inputQuestionId) return;
-            const trimmed = value.trim() || "(no response)";
-            saveAnswer(inputQuestionId, trimmed, trimmed, true);
-            inputMode = false;
-            inputQuestionId = null;
-            editor.setText("");
-            advanceAfterAnswer();
-          };
-
-          function handleInput(data: string) {
-            if (inputMode) {
-              if (matchesKey(data, Key.escape)) {
-                inputMode = false;
-                inputQuestionId = null;
-                editor.setText("");
-                refresh();
-                return;
-              }
-              editor.handleInput(data);
-              refresh();
-              return;
-            }
-
-            const q = currentQuestion();
-            const opts = currentOptions();
-
-            if (isMulti) {
-              if (matchesKey(data, Key.tab) || matchesKey(data, Key.right)) {
-                currentTab = (currentTab + 1) % totalTabs;
-                optionIndex = 0;
-                refresh();
-                return;
-              }
-              if (
-                matchesKey(data, Key.shift("tab")) ||
-                matchesKey(data, Key.left)
-              ) {
-                currentTab = (currentTab - 1 + totalTabs) % totalTabs;
-                optionIndex = 0;
-                refresh();
-                return;
-              }
-            }
-
-            if (currentTab === questions.length) {
-              if (matchesKey(data, Key.enter) && allAnswered()) {
-                submit(false);
-              } else if (matchesKey(data, Key.escape)) {
-                submit(true);
-              }
-              return;
-            }
-
-            if (matchesKey(data, Key.up)) {
-              optionIndex = Math.max(0, optionIndex - 1);
-              refresh();
-              return;
-            }
-            if (matchesKey(data, Key.down)) {
-              optionIndex = Math.min(opts.length - 1, optionIndex + 1);
-              refresh();
-              return;
-            }
-
-            if (matchesKey(data, Key.enter) && q) {
-              const opt = opts[optionIndex];
-              if (opt.isOther) {
-                inputMode = true;
-                inputQuestionId = q.id;
-                editor.setText("");
-                refresh();
-                return;
-              }
-              saveAnswer(q.id, opt.value, opt.label, false, optionIndex + 1);
-              advanceAfterAnswer();
-              return;
-            }
-
-            if (matchesKey(data, Key.escape)) {
-              submit(true);
-            }
-          }
-
-          function render(width: number): string[] {
-            if (cachedLines) return cachedLines;
-
-            const lines: string[] = [];
-            const q = currentQuestion();
-            const opts = currentOptions();
-
-            const add = (s: string) => lines.push(truncateToWidth(s, width));
-
-            add(theme.fg("accent", "─".repeat(width)));
-
-            if (isMulti) {
-              const tabs: string[] = ["← "];
-              for (let i = 0; i < questions.length; i++) {
-                const isActive = i === currentTab;
-                const isAnswered = answers.has(questions[i].id);
-                const lbl = questions[i].label;
-                const box = isAnswered ? "■" : "□";
-                const color = isAnswered ? "success" : "muted";
-                const text = ` ${box} ${lbl} `;
-                const styled = isActive
-                  ? theme.bg("selectedBg", theme.fg("text", text))
-                  : theme.fg(color, text);
-                tabs.push(`${styled} `);
-              }
-              const canSubmit = allAnswered();
-              const isSubmitTab = currentTab === questions.length;
-              const submitText = " ✓ Submit ";
-              const submitStyled = isSubmitTab
-                ? theme.bg("selectedBg", theme.fg("text", submitText))
-                : theme.fg(canSubmit ? "success" : "dim", submitText);
-              tabs.push(`${submitStyled} →`);
-              add(` ${tabs.join("")}`);
-              lines.push("");
-            }
-
-            function renderOptions() {
-              for (let i = 0; i < opts.length; i++) {
-                const opt = opts[i];
-                const selected = i === optionIndex;
-                const isOther = opt.isOther === true;
-                const prefix = selected ? theme.fg("accent", "> ") : "  ";
-                const color = selected ? "accent" : "text";
-                if (isOther && inputMode) {
-                  add(prefix + theme.fg("accent", `${i + 1}. ${opt.label} ✎`));
-                } else {
-                  add(prefix + theme.fg(color, `${i + 1}. ${opt.label}`));
-                }
-                if (opt.description) {
-                  add(`     ${theme.fg("muted", opt.description)}`);
-                }
-              }
-            }
-
-            if (inputMode && q) {
-              add(theme.fg("text", ` ${q.prompt}`));
-              lines.push("");
-              renderOptions();
-              lines.push("");
-              add(theme.fg("muted", " Your answer:"));
-              for (const line of editor.render(width - 2)) {
-                add(` ${line}`);
-              }
-              lines.push("");
-              add(theme.fg("dim", " Enter to submit • Esc to cancel"));
-            } else if (currentTab === questions.length) {
-              add(theme.fg("accent", theme.bold(" Ready to submit")));
-              lines.push("");
-              for (const question of questions) {
-                const answer = answers.get(question.id);
-                if (answer) {
-                  const prefix = answer.wasCustom ? "(wrote) " : "";
-                  add(
-                    `${theme.fg("muted", ` ${question.label}: `)}${theme.fg(
-                      "text",
-                      prefix + answer.label,
-                    )}`,
-                  );
-                }
-              }
-              lines.push("");
-              if (allAnswered()) {
-                add(theme.fg("success", " Press Enter to submit"));
-              } else {
-                const missing = questions
-                  .filter((q) => !answers.has(q.id))
-                  .map((q) => q.label)
-                  .join(", ");
-                add(theme.fg("warning", ` Unanswered: ${missing}`));
-              }
-            } else if (q) {
-              add(theme.fg("text", ` ${q.prompt}`));
-              lines.push("");
-              renderOptions();
-            }
-
-            lines.push("");
-            if (!inputMode) {
-              const help = isMulti
-                ? " Tab/←→ navigate • ↑↓ select • Enter confirm • Esc cancel"
-                : " ↑↓ navigate • Enter select • Esc cancel";
-              add(theme.fg("dim", help));
-            }
-            add(theme.fg("accent", "─".repeat(width)));
-
-            cachedLines = lines;
-            return lines;
-          }
-
-          return {
-            render,
-            invalidate: () => {
-              cachedLines = undefined;
-            },
-            handleInput,
-          };
-        },
-      );
-
-      if (result.cancelled) {
-        return {
-          content: [{ type: "text", text: "User cancelled the questionnaire" }],
-          details: result,
-        };
-      }
-
-      const answerLines = result.answers.map((a) => {
-        const qLabel = questions.find((q) => q.id === a.id)?.label || a.id;
-        if (a.wasCustom) {
-          return `${qLabel}: user wrote: ${a.label}`;
-        }
-        return `${qLabel}: user selected: ${a.index}. ${a.label}`;
-      });
-
-      return {
-        content: [{ type: "text", text: answerLines.join("\n") }],
-        details: result,
-      };
-    },
-
-    renderCall(args, theme) {
-      const qs = (args.questions as Question[]) || [];
-      const count = qs.length;
-      const labels = qs.map((q) => q.label || q.id).join(", ");
-      let text = theme.fg("toolTitle", theme.bold("questionnaire "));
-      text += theme.fg("muted", `${count} question${count !== 1 ? "s" : ""}`);
-      if (labels) {
-        text += theme.fg("dim", ` (${truncateToWidth(labels, 40)})`);
-      }
-      return new Text(text, 0, 0);
-    },
-
-    renderResult(result, _options, theme) {
-      const details = result.details as QuestionnaireResult | undefined;
-      if (!details) {
-        const text = result.content[0];
-        return new Text(text?.type === "text" ? text.text : "", 0, 0);
-      }
-      if (details.cancelled) {
-        return new Text(theme.fg("warning", "Cancelled"), 0, 0);
-      }
-      const lines = details.answers.map((a) => {
-        if (a.wasCustom) {
-          return `${theme.fg("success", "✓ ")}${theme.fg("accent", a.id)}: ${theme.fg("muted", "(wrote) ")}${a.label}`;
-        }
-        const display = a.index ? `${a.index}. ${a.label}` : a.label;
-        return `${theme.fg("success", "✓ ")}${theme.fg("accent", a.id)}: ${display}`;
-      });
-      return new Text(lines.join("\n"), 0, 0);
-    },
-  });
-}

packages/pi/settings-env.patch

@@ -1,20 +0,0 @@
---- /tmp/settings-manager.js.orig	2026-02-18 23:29:05.967146474 +0100
-+++ /tmp/settings-manager.js	2026-02-18 23:29:12.452952321 +0100
-@@ -97,7 +97,16 @@
-     /** Create a SettingsManager that loads from files */
-     static create(cwd = process.cwd(), agentDir = getAgentDir()) {
-         const storage = new FileSettingsStorage(cwd, agentDir);
--        return SettingsManager.fromStorage(storage);
-+        const manager = SettingsManager.fromStorage(storage);
-+        const baseFile = process.env.PI_SETTINGS_FILE;
-+        if (baseFile) {
-+            try {
-+                const baseSettings = JSON.parse(readFileSync(baseFile, "utf-8"));
-+                manager.globalSettings = deepMergeSettings(manager.globalSettings, baseSettings);
-+                manager.settings = deepMergeSettings(manager.globalSettings, manager.projectSettings);
-+            } catch (e) {}
-+        }
-+        return manager;
-     }
-     /** Create a SettingsManager from an arbitrary storage backend */
-     static fromStorage(storage) {

packages/picoclaw.nix

@@ -1,34 +0,0 @@
-{ lib, buildGoModule, fetchFromGitHub }:
-
-buildGoModule (finalAttrs: {
-  pname = "picoclaw";
-  version = "0.1.1";
-
-  src = fetchFromGitHub {
-    owner = "sipeed";
-    repo = "picoclaw";
-    rev = "v${finalAttrs.version}";
-    hash = "sha256-nx/D8ir4/l0pTnMNORby2FNtU+ouKT0DUjP2vpJLmPk=";
-  };
-  postPatch = ''
-    substituteInPlace go.mod --replace "go 1.25.7" "go 1.25.5"
-  '';
-  proxyVendor = true;
-
-  # Set to lib.fakeHash or empty initially, then update with the actual hash Nix reports.
-  vendorHash = "sha256-XKwYmbMyf4yg/E4Yv0uMS9v0oAuMZJwvoaAPCL/1AAY=";
-
-  subPackages = [ "cmd/picoclaw" ];
-
-  ldflags = [
-    "-s" "-w"
-    "-X main.version=${finalAttrs.version}"
-  ];
-
-  meta = with lib; {
-    description = "Ultra-efficient AI Assistant in Go for $10 hardware";
-    homepage = "https://github.com/sipeed/picoclaw";
-    license = licenses.mit; # Verify license in the repo
-    maintainers = [];
-  };
-})

packages/prospekte.nix

@@ -1,77 +0,0 @@
-# Browse and view German supermarket flyers (Lidl, Aldi, REWE, Kaufland, Netto)
-{
-  writers,
-  curl,
-  jq,
-  fzf,
-  zathura,
-  coreutils,
-  htmlq,
-  gnugrep,
-  gnused,
-  lib,
-}:
-writers.writeDashBin "prospekte" ''
-  export PATH=${lib.makeBinPath [ curl jq fzf zathura coreutils htmlq gnugrep gnused ]}:$PATH
-
-  lidl() {
-    echo LIDL
-    curl -sSL 'https://endpoints.lidl-flyer.com/v3/region-overview/lidl/de-DE/0.json' \
-      | jq -r '
-        .categories
-        | map(select(.name == "Filial-Angebote") | .subcategories | map(.flyers))
-        | flatten
-        | flatten
-        | .[]
-        | .pdfUrl
-      '
-  }
-
-  aldi_nord() {
-    echo ALDI nord
-    echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-aktuell/GetPDF.ashx'
-    echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-vorschau/GetPDF.ashx'
-  }
-
-  rewe_berlin() {
-    store_id=662366923
-    publisher_id=1062
-
-    echo REWE
-    curl -sSL "https://www.bonialserviceswidget.de/de/stores/$store_id/brochures?storeId=$store_id&publisherId=$publisher_id" | while read -r brochure_id; do
-      curl -sSL "https://www.bonialserviceswidget.de/de/v5/brochureDetails/$brochure_id?publisherId=$publisher_id" | jq -r .pdfUrl
-    done
-  }
-
-  kaufland() {
-    region_code=8920
-    echo KAUFLAND
-    curl -sSL https://filiale.kaufland.de/prospekte.html | htmlq --attribute href '.flyer a' | grep -Eo 'DE_de_KDZ[^/]*' | sed "s/_3000_/_''${region_code}_/" | while read -r flyer_id; do
-      curl -sSL "https://endpoints.leaflets.kaufland.com/v3/$flyer_id/flyer.json?regionCode=$region_code" | jq -r .flyer.pdfUrl
-    done
-  }
-
-  netto_schwarz() {
-    echo 'NETTO (schwarz)'
-    curl -sSL 'https://squid-api.tjek.com/v2/catalogs?dealer_ids=90f2VL&order_by=created' \
-      | jq -r '.[] | .id' \
-      | while read -r flyer_id; do
-        curl -sSL "https://squid-api.tjek.com/v2/catalogs/$flyer_id/download" \
-          | jq -r .pdf_url
-      done
-  }
-
-  dir="$(mktemp -d)"
-  trap 'rm -rf "$dir"' EXIT
-
-  prospekt_url="$( (
-    lidl
-    aldi_nord
-    rewe_berlin
-    kaufland
-    netto_schwarz
-  ) | fzf)"
-
-  curl -sSL "$prospekt_url" -o "$dir/prospekt.pdf"
-  zathura "$dir/prospekt.pdf"
-''

packages/radio-news/default.nix

@@ -6,9 +6,6 @@
   jq,
   yq,
 }:
-let
-  model = "gemini-2.5-flash-lite";
-in
 writers.writeBashBin "radio-news" ''
   set -efu
   PATH=$PATH:${
@@ -60,5 +57,5 @@ writers.writeBashBin "radio-news" ''
   EOF
   )
 
-  echo "$REQUEST" | curl "https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=$GEMINI_API_KEY" -s -H "Content-Type: application/json" -d @-
+  echo "$REQUEST" | curl "https://generativelanguage.googleapis.com/v1beta/models/gemini-1.5-flash-8b:generateContent?key=$GEMINI_API_KEY" -s -H "Content-Type: application/json" -d @-
 ''

packages/readme.nix

@@ -1,13 +0,0 @@
-# Render a GitHub repo's README.md as a man page
-{
-  lib,
-  writers,
-  curl,
-  pandoc,
-  man,
-}:
-writers.writeDashBin "readme" ''
-  ${lib.getExe curl} -sSL "https://raw.githubusercontent.com/$*/master/README.md" \
-    | ${lib.getExe pandoc} -f gfm -t man -s \
-    | ${lib.getExe man} -l -
-''

packages/vimv.nix

@@ -0,0 +1,27 @@
+{
+  lib,
+  stdenv,
+  bash,
+  fetchFromGitHub,
+}:
+stdenv.mkDerivation {
+  name = "vimv";
+  src = fetchFromGitHub {
+    owner = "thameera";
+    repo = "vimv";
+    rev = "4152496c1946f68a13c648fb7e583ef23dac4eb8";
+    sha256 = "1fsrfx2gs6bqx7wk7pgcji2i2x4alqpsi66aif4kqvnpqfhcfzjd";
+  };
+  phases = [ "installPhase" ];
+  installPhase = ''
+    mkdir -p $out/bin
+    sed 's:#!/bin/bash:#!${bash}/bin/bash:' $src/vimv > $out/bin/vimv
+    chmod 755 $out/bin/vimv
+  '';
+  meta = with lib; {
+    homepage = "https://github.com/thameera/vimv";
+    description = "Batch-rename files using Vim";
+    license = licenses.mit;
+    platforms = platforms.all;
+  };
+}

secrets.txt

@@ -1,5 +1,4 @@
 secrets/alertmanager-token-reporters.age
-secrets/anthropic-api-key.age
 secrets/brevo-key.age
 secrets/cifs-credentials-zodiac.age
 secrets/copecart-ipn.age
@@ -55,7 +54,6 @@ secrets/matrix-token-lakai.age
 secrets/matrix-token-lakai-env.age
 secrets/maxmind-license-key.age
 secrets/mega-password.age
-secrets/meteora-auth.age
 secrets/miniflux-api-token.age
 secrets/miniflux-credentials.age
 secrets/nextcloud-password-admin.age
@@ -63,12 +61,6 @@ secrets/nextcloud-password-database.age
 secrets/nextcloud-password-fysi.age
 secrets/nextcloud-password-kieran.age
 secrets/onlyoffice-jwt-key.age
-secrets/openclaw-gateway-token.age
-secrets/openclaw-telegram-token.age
-secrets/opencrow-gemini-key.age
-secrets/opencrow-matrix-token.age
-secrets/opencrow-openrouter-key.age
-secrets/opencrow-soul.age
 secrets/openweathermap-api-key.age
 secrets/restic.age
 secrets/secrets.nix

systems/ful/configuration.nix

@@ -16,8 +16,6 @@
     ./gemini.nix
     ./wallabag.nix
     ./nethack.nix
-    ./opencrow.nix
-    ./meteora.nix
   ];
 
   niveum.passport = {

systems/ful/meteora.nix

@@ -1,18 +0,0 @@
-{ config, pkgs, ... }: {
-  age.secrets.meteora-auth = {
-    file = ../../secrets/meteora-auth.age;
-    owner = "nginx";
-  };
-
-  services.nginx = {
-    enable = true;
-    virtualHosts."meteora.xn--kiern-0qa.de" = {
-      forceSSL = true;
-      enableACME = true;
-      root = "${pkgs.meteora-website}";
-      locations."/" = {
-        basicAuthFile = config.age.secrets.meteora-auth.path;
-      };
-    };
-  };
-}

systems/ful/opencrow.nix

@@ -1,83 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  age.secrets = {
-    opencrow-matrix-token = {
-      file = ../../secrets/opencrow-matrix-token.age;
-    };
-    opencrow-soul = {
-      file = ../../secrets/opencrow-soul.age;
-    };
-    opencrow-gemini-key = {
-      file = ../../secrets/opencrow-gemini-key.age;
-    };
-    opencrow-openrouter-key = {
-      file = ../../secrets/opencrow-openrouter-key.age;
-    };
-  };
-
-  environment.systemPackages = [
-    pkgs.pi
-  ];
-
-  services.opencrow = {
-    enable = true;
-
-    package = pkgs.opencrow;
-
-    extraPackages = [
-      pkgs.pi
-      pkgs.nix
-    ];
-
-    environmentFiles = [
-      config.age.secrets.opencrow-matrix-token.path
-      config.age.secrets.opencrow-openrouter-key.path
-      config.age.secrets.opencrow-gemini-key.path
-    ];
-
-    extraBindMounts."/run/opencrow/SOUL.md" = {
-      hostPath = config.age.secrets.opencrow-soul.path;
-      isReadOnly = true;
-    };
-
-    environment = {
-      NIX_REMOTE = "daemon";
-
-      PI_PERMISSION_LEVEL = "high";
-      OPENCROW_MATRIX_HOMESERVER = "https://matrix.org";
-      OPENCROW_MATRIX_USER_ID = "@fable_ai:matrix.org";
-      OPENCROW_SOUL_FILE = "/run/opencrow/SOUL.md";
-      OPENCROW_HEARTBEAT_INTERVAL = "2h";
-
-      # end of the month
-      OPENCROW_PI_PROVIDER = "openrouter";
-      OPENCROW_PI_MODEL = "stepfun/step-3.5-flash:free";
-      # OPENCROW_PI_PROVIDER = "google";
-      # OPENCROW_PI_MODEL = "gemini-2.0-flash";
-
-      # beginning of the month
-      # OPENCROW_PI_PROVIDER = "github-copilot";
-      # OPENCROW_PI_MODEL = "claude-opus-4.6";
-    };
-  };
-
-  containers.opencrow.config = {
-    nix.settings.experimental-features = [
-      "flakes"
-      "nix-command"
-    ];
-  };
-
-  nix.settings.experimental-features = [
-    "flakes"
-    "nix-command"
-  ];
-
-  services.restic.backups.niveum.paths = [
-    "/var/lib/opencrow"
-  ];
-}

systems/ful/panoptikon.nix

@@ -5,23 +5,42 @@
   ...
 }:
 let
-  irc-xxx = pkgs.panoptikonReporters.kpaste-irc {
+  irc-xxx = pkgs.lib.panoptikon.kpaste-irc {
     target = lib.escapeShellArg "#xxx";
     retiolumLink = true;
   };
 
-  matrix-kmein = pkgs.panoptikonReporters.matrix {
+  matrix =
-    homeserver = "matrix.4d2.org";
+    {
-    roomId = lib.escapeShellArg "!zlwCuPiCNMSxDviFzA:4d2.org";
+      server ? "matrix.4d2.org",
-    tokenPath = config.age.secrets.matrix-token-lakai.path;
+      target,
-  };
+    }:
+    pkgs.writers.writeDash "matrix-reporter" ''
+      export RAW_MESSAGE="$(cat)"
+      export MESSAGE=$(printf '<b>%s</b><br><pre>%s</pre>' "$PANOPTIKON_WATCHER" "$RAW_MESSAGE")
+      export MATRIX_TOKEN="$(cat ${config.age.secrets.matrix-token-lakai.path})"
+      export JSON_PAYLOAD=$(${pkgs.jq}/bin/jq -n --arg msgtype "m.text" --arg body "$RAW_MESSAGE" --arg formattedBody "$MESSAGE" '{msgtype: $msgtype, body: $body, format: "org.matrix.custom.html", formatted_body: $formattedBody}')
+      ${pkgs.curl}/bin/curl -X POST "https://${server}/_matrix/client/r0/rooms/${target}/send/m.room.message" \
+        -d "$JSON_PAYLOAD" \
+        -H "Authorization: Bearer $MATRIX_TOKEN" \
+        -H "Content-Type: application/json"
+    '';
 
-  telegram-kmein = pkgs.panoptikonReporters.telegram {
+  matrix-kmein = matrix { target = "!zlwCuPiCNMSxDviFzA:4d2.org"; };
-    tokenPath = config.age.secrets.telegram-token-kmein.path;
-    chatId = "-1001796440545";
-  };
 
-  irc-kmein = pkgs.panoptikonReporters.kpaste-irc {
+  telegram-kmein =
+    let
+      chatId = "-1001796440545";
+    in
+    pkgs.writers.writeDash "telegram-fulltext" ''
+      export TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")"
+      ${pkgs.curl}/bin/curl -X POST "https://api.telegram.org/bot''${TOKEN}/sendMessage" \
+        -d chat_id=${chatId} \
+        -d text="$(cat)" \
+        | ${pkgs.jq}/bin/jq -e .ok
+    '';
+
+  irc-kmein = pkgs.lib.panoptikon.kpaste-irc {
     messagePrefix = "$PANOPTIKON_WATCHER: ";
     target = "kmein";
     nick = "panoptikon-kmein";
@@ -29,12 +48,7 @@ let
   };
 in
 {
-  age.secrets.telegram-token-kmein = {
+  age.secrets.telegram-token-kmein.file = ../../secrets/telegram-token-kmein.age;
-    file = ../../secrets/telegram-token-kmein.age;
-    owner = "panoptikon";
-    group = "panoptikon";
-    mode = "400";
-  };
   age.secrets.matrix-token-lakai = {
     file = ../../secrets/matrix-token-lakai.age;
     owner = "panoptikon";
@@ -46,7 +60,7 @@ in
     enable = true;
     watchers = {
       "github-meta" = {
-        script = pkgs.panoptikonWatchers.json {
+        script = pkgs.lib.panoptikon.urlJSON {
           jqScript = ''
             {
               ssh_key_fingerprints: .ssh_key_fingerprints,
@@ -56,71 +70,83 @@ in
         } "https://api.github.com/meta";
         reporters = [ irc-xxx ];
       };
+      lammla = {
+        script = pkgs.lib.panoptikon.url "http://lammla.info/index.php?reihe=30";
+        reporters = [ matrix-kmein ];
+      };
+      kratylos = {
+        script = pkgs.lib.panoptikon.url "https://kratylos.reichert-online.org/current_issue/KRATYLOS";
+        reporters = [ matrix-kmein ];
+      };
       kobudo-tesshinkan = {
-        script = pkgs.panoptikonWatchers.html "https://kobudo-tesshinkan.eu/index.php/de/termine-berichte/lehrgaenge/";
+        script = pkgs.lib.panoptikon.url "https://kobudo-tesshinkan.eu/index.php/de/termine-berichte/lehrgaenge/";
         reporters = [
           telegram-kmein
           matrix-kmein
         ];
       };
+      zeno-free = {
+        script = pkgs.lib.panoptikon.urlSelector ".zenoCOMain" "http://www.zeno.org/Lesesaal/M/E-Books";
+        reporters = [ matrix-kmein ];
+      };
       carolinawelslau = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#main" "https://carolinawelslau.de/";
+        script = pkgs.lib.panoptikon.urlSelector "#main" "https://carolinawelslau.de/";
         reporters = [ matrix-kmein ];
       };
       humboldt-preis = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#content-core" "https://www.hu-berlin.de/de/ueberblick/menschen/ehrungen/humboldtpreis";
+        script = pkgs.lib.panoptikon.urlSelector "#content-core" "https://www.hu-berlin.de/de/ueberblick/menschen/ehrungen/humboldtpreis";
         reporters = [ matrix-kmein ];
       };
       lisalittmann = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://lisalittmann.de/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://lisalittmann.de/";
         reporters = [ matrix-kmein ];
       };
       lisalittmann-archive = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://lisalittmann.de/archive/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://lisalittmann.de/archive/";
         reporters = [ matrix-kmein ];
       };
       lisalittmann-projects = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://lisalittmann.de/projects/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://lisalittmann.de/projects/";
         reporters = [ matrix-kmein ];
       };
       tatort = {
-        script = pkgs.panoptikonWatchers.htmlSelector ".linklist" "https://www.daserste.de/unterhaltung/krimi/tatort/sendung/index.html";
+        script = pkgs.lib.panoptikon.urlSelector ".linklist" "https://www.daserste.de/unterhaltung/krimi/tatort/sendung/index.html";
         reporters = [ matrix-kmein ];
       };
       warpgrid-idiomarium = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://warpgrid.de/idiomarium/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://warpgrid.de/idiomarium/";
         reporters = [ matrix-kmein ];
       };
       warpgrid-futurism = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://warpgrid.de/futurism/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://warpgrid.de/futurism/";
         reporters = [ matrix-kmein ];
       };
       warpgrid-imagiary = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://warpgrid.de/imagiary/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://warpgrid.de/imagiary/";
         reporters = [ matrix-kmein ];
       };
       warpgrid-alchemy = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#site-content" "https://warpgrid.de/alchemy/";
+        script = pkgs.lib.panoptikon.urlSelector "#site-content" "https://warpgrid.de/alchemy/";
         reporters = [ matrix-kmein ];
       };
       indogermanische-forschungen = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#latestIssue" "https://www.degruyter.com/journal/key/INDO/html";
+        script = pkgs.lib.panoptikon.urlSelector "#latestIssue" "https://www.degruyter.com/journal/key/INDO/html";
         reporters = [ matrix-kmein ];
       };
       ig-neuigkeiten = {
-        script = pkgs.panoptikonWatchers.htmlSelector "[itemprop=articleBody]" "https://www.indogermanistik.org/aktuelles/neuigkeiten.html";
+        script = pkgs.lib.panoptikon.urlSelector "[itemprop=articleBody]" "https://www.indogermanistik.org/aktuelles/neuigkeiten.html";
         reporters = [ matrix-kmein ];
       };
       ig-tagungen = {
-        script = pkgs.panoptikonWatchers.htmlSelector "[itemprop=articleBody]" "https://www.indogermanistik.org/tagungen/tagungen-der-ig.html";
+        script = pkgs.lib.panoptikon.urlSelector "[itemprop=articleBody]" "https://www.indogermanistik.org/tagungen/tagungen-der-ig.html";
         reporters = [ matrix-kmein ];
       };
       fu-distant = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#current_events" "https://www.geschkult.fu-berlin.de/en/e/ma-distant/Termine/index.html";
+        script = pkgs.lib.panoptikon.urlSelector "#current_events" "https://www.geschkult.fu-berlin.de/en/e/ma-distant/Termine/index.html";
         reporters = [ matrix-kmein ];
       };
       fu-aegyptologie = {
-        script = pkgs.panoptikonWatchers.htmlSelector "#current_events" "https://www.geschkult.fu-berlin.de/e/aegyptologie/termine/index.html";
+        script = pkgs.lib.panoptikon.urlSelector "#current_events" "https://www.geschkult.fu-berlin.de/e/aegyptologie/termine/index.html";
         reporters = [ matrix-kmein ];
       };
     };

systems/kibbeh/configuration.nix

@@ -8,14 +8,17 @@
   imports = [
     ./hardware-configuration.nix
     ../../configs/spacetime.nix
+    ../../configs/admin-essentials.nix
     ../../configs/keyboard
     ../../configs/sound.nix
     ../../configs/printing.nix
+    ../../configs/nix.nix
     ../../configs/fonts.nix
     ../../configs/mycelium.nix
     ../../configs/retiolum.nix
     ../../configs/sshd.nix
     ../../configs/sudo.nix
+    ../../configs/zsh.nix
   ];
 
   age.secrets = {

systems/makanek/configuration.nix

@@ -9,7 +9,7 @@
     ./gitea.nix
     ./hardware-configuration.nix
     ./hedgedoc.nix
-    # ./menstruation.nix
+    ./menstruation.nix
     ./moinbot.nix
     ./monitoring
     # ./names.nix

systems/makanek/hardware-configuration.nix

@@ -34,6 +34,7 @@
   };
 
   swapDevices = [ ];
+  zramSwap.enable = true;
 
   nix.settings.max-jobs = lib.mkDefault 2;
 }

systems/makanek/nextcloud.nix

@@ -55,7 +55,7 @@ in
 
   services.nextcloud = {
     enable = true;
-    package = pkgs.nextcloud32;
+    package = pkgs.nextcloud31;
 
     https = true;
 

systems/makanek/weechat.nix

@@ -187,19 +187,16 @@ in
       after = [ "network.target" ];
       wantedBy = [ "multi-user.target" ];
       restartIfChanged = true;
-      path = [ pkgs.alacritty.terminfo pkgs.screen ];
+      path = [ pkgs.alacritty.terminfo ];
-      environment = {
+      environment.WEECHAT_HOME = weechatHome;
-        WEECHAT_HOME = weechatHome;
-      };
       # preStart = "${pkgs.coreutils}/bin/rm $WEECHAT_HOME/*.conf";
-      script = "${pkgs.screen}/bin/screen -S weechat -d -m ${weechat}/bin/weechat";
+      script = "${tmux} -2 new-session -d -s IM ${weechat}/bin/weechat";
-      preStop = "${pkgs.screen}/bin/screen -S weechat -X quit";
+      preStop = "${tmux} kill-session -t IM";
       serviceConfig = {
         User = "weechat";
         Group = "weechat";
         RemainAfterExit = true;
         Type = "oneshot";
-        RuntimeDirectory = "weechat-tmux";
       };
     };
 
@@ -213,7 +210,7 @@ in
     group = "weechat";
     home = "/var/lib/weechat";
     isSystemUser = true;
-    packages = [ pkgs.screen ];
+    packages = [ pkgs.tmux ];
   };
 
   age.secrets.weechat-sec = {

systems/manakish/hardware-configuration.nix

@@ -44,7 +44,7 @@
   };
 
   swapDevices = [ ];
-  zramSwap.enable = false;
+  zramSwap.enable = true;
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
 }

systems/tabula/configuration.nix

@@ -10,6 +10,8 @@
     ../../configs/spacetime.nix
     ../../configs/retiolum.nix
     ../../configs/sshd.nix
+    ../../configs/nix.nix
+    ../../configs/admin-essentials.nix
   ];
 
   age.secrets = {

systems/tahina/configuration.nix

@@ -10,6 +10,8 @@
     ../../configs/spacetime.nix
     ../../configs/sshd.nix
     ../../configs/retiolum.nix
+    ../../configs/nix.nix
+    ../../configs/admin-essentials.nix
   ];
 
   age.secrets = {

systems/zaatar/configuration.nix

@@ -11,6 +11,7 @@
     ./hardware-configuration.nix
     ./home-assistant.nix
     ../../configs/printing.nix
+    ../../configs/tmux.nix
     ../../configs/wpa_supplicant.nix
   ];
 
@@ -77,8 +78,6 @@
       pkgs.python3 # for sshuttle
     ];
 
-  users.users.root.extraGroups = [ "lp" "scanner" ];
-
   networking = {
     hostName = "zaatar";
     wireless.interfaces = [ "wlp2s0" ];