From ca8d2a38edaa2dd33c678c9ced41cdc7400b48dd Mon Sep 17 00:00:00 2001
From: Evan Reichard <evan@reichard.io>
Date: Tue, 28 Apr 2026 21:48:51 -0400
Subject: [PATCH] build(llama-swap): update to 208

---
 .agents/skills/update-package-hashes/SKILL.md | 53 ++++++++++++++++++-
 packages/llama-swap/default.nix               | 12 ++---
 2 files changed, 58 insertions(+), 7 deletions(-)

diff --git a/.agents/skills/update-package-hashes/SKILL.md b/.agents/skills/update-package-hashes/SKILL.md
index 4a324ff..da190e8 100644
--- a/.agents/skills/update-package-hashes/SKILL.md
+++ b/.agents/skills/update-package-hashes/SKILL.md
@@ -39,10 +39,61 @@ nix build .#<name>.cargoDeps --no-link 2>&1 | tee /tmp/hash.log   # for cargoHas
 grep -E '^[[:space:]]*got:' /tmp/hash.log | tail -1 | awk '{print $2}'
 ```
 
-Setting the hash to `sha256-AAAA...` (44 A's) or leaving the old one in place both work — the build will fail at the FOD with `got: sha256-...` which is the correct value.
+Setting the hash to `lib.fakeHash` (preferred when `lib` is in scope), `sha256-AAAA...` (44 A's), or leaving the old one in place all work — the build will fail at the FOD with `got: sha256-...` which is the correct value.
 
 **Note:** `.src`, `.goModules`, etc. are sub-attributes of the derivation. They download but do not compile. `nix build .#<name>` (without the `.src` suffix) compiles — never do that.
 
+### Example — Package With `src`, `npmDepsHash`, and `vendorHash`
+
+Use the same pattern for packages that combine a custom `src` fetcher, Go dependencies, and a nested npm UI derivation. `llama-swap` is a concrete example because it uses `leaveDotGit` + `postFetch`, `vendorHash`, and a UI package exposed under `passthru.ui`.
+
+1. Set stale hashes to `lib.fakeHash` where possible:
+
+   ```nix
+   src.hash = lib.fakeHash;
+   vendorHash = lib.fakeHash;
+   passthru.npmDepsHash = lib.fakeHash;
+   ```
+
+2. Resolve the custom `src` hash first; downstream FODs depend on it:
+
+   ```bash
+   nix build .#llama-swap.src --no-link 2>&1 | tee /tmp/llama-swap-src.log
+   grep -E '^[[:space:]]*got:' /tmp/llama-swap-src.log | tail -1 | awk '{print $2}'
+   ```
+
+   Put the `got:` value into `src.hash` before resolving dependency hashes.
+
+3. Resolve the UI npm dependency hash from the nested UI derivation:
+
+   ```bash
+   nix build .#llama-swap.passthru.ui.npmDeps --no-link 2>&1 | tee /tmp/llama-swap-npm.log
+   grep -E '^[[:space:]]*got:' /tmp/llama-swap-npm.log | tail -1 | awk '{print $2}'
+   ```
+
+   Put the `got:` value into `passthru.npmDepsHash`.
+
+4. Resolve the Go `vendorHash`:
+
+   ```bash
+   nix build .#llama-swap.goModules --no-link 2>&1 | tee /tmp/llama-swap-go.log
+   grep -E '^[[:space:]]*got:' /tmp/llama-swap-go.log | tail -1 | awk '{print $2}'
+   ```
+
+   Put the `got:` value into `vendorHash`.
+
+   For other packages, adapt the flake attribute path to where the FOD is exposed (for example, `.#<name>.npmDeps`, `.#<name>.passthru.ui.npmDeps`, or `.#<name>.goModules`).
+
+5. Re-run the FOD sub-attribute builds to confirm they realise successfully:
+
+   ```bash
+   nix build .#llama-swap.src --no-link
+   nix build .#llama-swap.passthru.ui.npmDeps --no-link
+   nix build .#llama-swap.goModules --no-link
+   ```
+
+   If a dependency FOD fails before a hash mismatch (for example, `go.mod requires go >= ...`), fix the package inputs minimally (for example, switch to the matching `buildGo126Module`) and re-run the same FOD sub-attribute. Do not build `.#llama-swap`.
+
 ## Lookup Latest Version
 
 When the user asks to update a package but doesn't specify a version:
diff --git a/packages/llama-swap/default.nix b/packages/llama-swap/default.nix
index 4e6115f..c919afa 100644
--- a/packages/llama-swap/default.nix
+++ b/packages/llama-swap/default.nix
@@ -1,6 +1,6 @@
 { lib
 , stdenv
-, buildGoModule
+, buildGo126Module
 , fetchFromGitHub
 , versionCheckHook
 , callPackage
@@ -11,15 +11,15 @@
 let
   canExecute = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
 in
-buildGoModule (finalAttrs: {
+buildGo126Module (finalAttrs: {
   pname = "llama-swap";
-  version = "197";
+  version = "208";
 
   src = fetchFromGitHub {
     owner = "mostlygeek";
     repo = "llama-swap";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-EXgyYmpbN/zzr6KeSpvFEB+FS7gDIZFinNMv70v5boY=";
+    hash = "sha256-E+BqqQcCLlW/DWvjwC66ClV6yuQ5x7cAMkLPJkS3x5M=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;
@@ -32,10 +32,10 @@ buildGoModule (finalAttrs: {
     '';
   };
 
-  vendorHash = "sha256-XiDYlw/byu8CWvg4KSPC7m8PGCZXtp08Y1velx4BR8U=";
+  vendorHash = "sha256-tOOZgugiVcICYg9HyeTolyAg+YZWtxSJTvAuwfMazHQ=";
 
   passthru.ui = callPackage ./ui.nix { llama-swap = finalAttrs.finalPackage; };
-  passthru.npmDepsHash = "sha256-Fs7+JKE8YBp2Xj8bVBlwmT+UwuD642VeUHiPx+fv94c=";
+  passthru.npmDepsHash = "sha256-6D4F58sSBkr7FKKO34gDhnZ9uN/SfsyYn1xJjYsMeq4=";
 
   nativeBuildInputs = [
     versionCheckHook