chore(llm): update llama-cpp, llama-swap and switch to qwen3.5-27b-thinking

- Bump llama-cpp from version 8157 to 8196
- Bump llama-swap from version 192 to 197
- Switch default assistant model from qwen3-coder-next-80b to qwen3.5-27b-thinking
- Remove glm-4-32b-instruct model configuration
- Update qwen3.5-27b-thinking config:
  - Use bartowski quantization (IQ4_XS) instead of unsloth
  - Increase context window from 131k to 196k
  - Add cache type settings (q8_0) and CUDA device
- Add 1password-cli to home-manager programs
- Fix typo: 'dispay' -> 'display' in llm-config.lua

.sops.yaml

@@ -8,6 +8,7 @@ keys:
   - &user_lin-va-thinkpad age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5
   - &user_mac-va-mbp-personal age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c
   - &user_mac-va-mbp-work age1jf7yuycuajc5m8vupgrndjvw8knekr2v9979j68xc5ykvcxag4lss454au
+  - &user_lin-va-terminal age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62
 
   # System SSH Derived
   - &system_lin-va-desktop age1mxjrvjxkn69kfn2np3wpd73g44fuhsgykw7l5ss9rx30em5jfp2scnrq32
@@ -28,6 +29,7 @@ creation_rules:
       - age:
           - *admin_reichard
           - *user_lin-va-mbp-personal
+          - *user_lin-va-terminal
           - *user_lin-va-thinkpad
           - *user_mac-va-mbp-personal
           - *user_mac-va-mbp-work

homes/aarch64-darwin/evanreichard@mac-va-mbp-work/default.nix

@@ -22,6 +22,10 @@ in
       };
 
       terminal = {
+        bash = {
+          enable = true;
+          customFastFetchLogo = ./prophet.txt;
+        };
         aws = enabled;
         btop = enabled;
         claude-code = enabled;
@@ -45,5 +49,7 @@ in
   home.packages = with pkgs; [
     colima
     docker
+    keycastr
+    _1password-cli
   ];
 }

homes/aarch64-darwin/evanreichard@mac-va-mbp-work/prophet.txt

@@ -0,0 +1,19 @@
+                :+++++++=.        
+                 =++++++++:       
+                  -++++++++:      
+                   -++++++++-     
+                    :++++++++-    
+          .-=======. :++++++++=   
+         :********+   .++++++++=  
+        -********=     .=+++++++=.
+       -********-        =++++++++
+      =********-          =++++++:
+     =********:            -++++. 
+    +********.              -+=.  
+  .+*******+.                     
+ .+*******+. :%#%%%%%%%%%%#%-     
+:********=    +%%%%%%%%%%%%*      
+********=      =%%%%%%%%%%+       
+.+*****-        -%%%%%%%%=        
+  +***-           ......          
+   =*:                            

homes/x86_64-linux/evanreichard@lin-va-terminal/default.nix

@@ -19,16 +19,20 @@ in
       ssh-agent = enabled;
     };
 
+    security = {
+      sops = enabled;
+    };
+
     programs = {
       terminal = {
         bash = enabled;
         btop = enabled;
-        claude-code = enabled;
         direnv = enabled;
         git = enabled;
         k9s = enabled;
         nvim = enabled;
         opencode = enabled;
+        pi = enabled;
         tmux = enabled;
       };
     };

modules/home/programs/terminal/bash/config/fastfetch.jsonc

@@ -1,93 +0,0 @@
-{
-  "modules": [
-    {
-      "type": "separator",
-      "string": "",
-      "length": 35,
-    },
-    {
-      "type": "title",
-      "format": "Hardware Information",
-    },
-    {
-      "type": "cpu",
-      "key": " ",
-    },
-    {
-      "type": "memory",
-      "key": " ",
-    },
-    {
-      "type": "display",
-      "key": "󰍹 ",
-    },
-    {
-      "type": "separator",
-    },
-    {
-      "type": "title",
-      "format": "Software Information",
-    },
-    {
-      "type": "os",
-      "key": " ",
-    },
-    {
-      "type": "kernel",
-      "key": " ",
-    },
-    {
-      "type": "terminal",
-      "key": " ",
-    },
-    {
-      "type": "packages",
-      "key": "󰏖 ",
-    },
-    {
-      "type": "terminalfont",
-      "key": " ",
-    },
-    {
-      "type": "separator",
-    },
-    {
-      "type": "title",
-      "format": "Network Information",
-    },
-    {
-      "type": "publicip",
-      "key": " ",
-    },
-    {
-      "type": "localip",
-      "key": " ",
-    },
-    {
-      "type": "separator",
-    },
-    {
-      "type": "custom",
-      "format": "   {#white}   {#red}   {#green}   {#yellow}   {#blue}   {#magenta}   {#cyan}   {#white}\n",
-    },
-  ],
-  "display": {
-    "separator": "  ",
-    "key": {
-      "width": 7,
-    },
-    "color": {
-      "keys": "yellow",
-      "title": "blue",
-    },
-  },
-  "settings": {
-    "kernelFormat": "minimal",
-    "memoryUnit": "gib",
-    "temperatureUnit": "celsius",
-    "publicIpTimeout": 2000,
-    "publicIpHost": "http://ident.me",
-    "diskUnit": "gib",
-    "showDisks": ["/"],
-  },
-}

modules/home/programs/terminal/bash/config/fastfetch.nix

@@ -0,0 +1,99 @@
+{ cfg }:
+builtins.toJSON (
+  {
+    modules = [
+      {
+        type = "separator";
+        string = "";
+        length = 35;
+      }
+      {
+        type = "title";
+        format = "Hardware Information";
+      }
+      {
+        type = "cpu";
+        key = " ";
+      }
+      {
+        type = "memory";
+        key = " ";
+      }
+      {
+        type = "display";
+        key = "󰍹 ";
+      }
+      { type = "separator"; }
+      {
+        type = "title";
+        format = "Software Information";
+      }
+      {
+        type = "os";
+        key = " ";
+      }
+      {
+        type = "kernel";
+        key = " ";
+      }
+      {
+        type = "terminal";
+        key = " ";
+      }
+      {
+        type = "packages";
+        key = "󰏖 ";
+      }
+      {
+        type = "terminalfont";
+        key = " ";
+      }
+      { type = "separator"; }
+      {
+        type = "title";
+        format = "Network Information";
+      }
+      {
+        type = "publicip";
+        key = " ";
+      }
+      {
+        type = "localip";
+        key = " ";
+      }
+      { type = "separator"; }
+      {
+        type = "custom";
+        format = "   {#white}   {#red}   {#green}   {#yellow}   {#blue}   {#magenta}   {#cyan}   {#white}\n";
+      }
+    ];
+    display = {
+      separator = "  ";
+      key.width = 7;
+      color = {
+        keys = "yellow";
+        title = "blue";
+      };
+    };
+    settings = {
+      kernelFormat = "minimal";
+      memoryUnit = "gib";
+      temperatureUnit = "celsius";
+      publicIpTimeout = 2000;
+      publicIpHost = "http://ident.me";
+      diskUnit = "gib";
+      showDisks = [ "/" ];
+    };
+  }
+    // (
+    if cfg.customFastFetchLogo != null then
+      {
+        logo = {
+          source = cfg.customFastFetchLogo;
+          type = "file";
+        };
+      }
+    else
+      { }
+  )
+)

modules/home/programs/terminal/bash/default.nix

@@ -5,13 +5,16 @@
 , ...
 }:
 let
-  inherit (lib) mkIf optionalAttrs;
+  inherit (lib.${namespace}) mkOpt;
+  inherit (lib) mkEnableOption mkIf optionalAttrs;
   inherit (pkgs.stdenv) isLinux isDarwin;
+
   cfg = config.${namespace}.programs.terminal.bash;
 in
 {
-  options.${namespace}.programs.terminal.bash = {
-    enable = lib.mkEnableOption "bash";
+  options.${namespace}.programs.terminal.bash = with lib.types; {
+    enable = mkEnableOption "bash";
+    customFastFetchLogo = mkOpt (nullOr path) null "custom fast fetch logo path";
   };
 
   config = mkIf cfg.enable {
@@ -76,7 +79,7 @@ in
       nerd-fonts.meslo-lg
     ];
 
-    home.file.".config/fastfetch/config.jsonc".text = builtins.readFile ./config/fastfetch.jsonc;
+    home.file.".config/fastfetch/config.jsonc".text = import ./config/fastfetch.nix { inherit cfg; };
     home.file.".sqliterc".text = builtins.readFile ./config/.sqliterc;
   };
 }

modules/home/programs/terminal/claude-code/default.nix

@@ -16,6 +16,7 @@ in
   config = mkIf cfg.enable {
     programs.claude-code = {
       enable = true;
+      package = pkgs.reichard.claude-code;
       mcpServers = {
         gopls = {
           type = "stdio";
@@ -27,7 +28,7 @@ in
 
     programs.bash = lib.mkIf config.programs.bash.enable {
       shellAliases = {
-        claude = "default_claude_custom";
+        claude-custom = "default_claude_custom";
       };
 
       initExtra =
@@ -68,13 +69,21 @@ in
             local prev=''${COMP_WORDS[COMP_CWORD-1]}
 
             if [[ "$prev" == "-m" || "$prev" == "--model" ]]; then
-              local models=( $(${pkgs.curl}/bin/curl -s -H "Authorization: Bearer ${authToken}" "${baseUrl}/v1/models" | ${pkgs.jq}/bin/jq -r '.data[].id' 2>/dev/null) )
+              local models=( $(${pkgs.curl}/bin/curl -s -H "Authorization: Bearer ${authToken}" "${baseUrl}/v1/models" | ${pkgs.jq}/bin/jq -r '
+                .data[] |
+                select(
+                  (try (.meta.llamaswap.type[] | contains("coding")) catch false) or
+                  (.name | startswith("synthetic:"))
+                ) |
+                .id
+              ' 2>/dev/null) )
+
               COMPREPLY=( $(compgen -W "''${models[*]}" -- "$cur") )
             fi
           }
 
           # Register Completion
-          complete -F _complete_claude_custom claude
+          complete -F _complete_claude_custom claude-custom
         '';
     };
   };

modules/home/programs/terminal/git/default.nix

@@ -36,6 +36,7 @@ in
           prune = true;
           pruneTags = true;
           all = true;
+          forceUpdateTags = true;
         };
         help = {
           autocorrect = true;

modules/home/programs/terminal/nvim/config/lua/llm-config.lua

@@ -1,8 +1,7 @@
 local llm_endpoint = "https://llm-api.va.reichard.io"
-local llm_assistant_model = "qwen3-coder-next-80b-instruct"
+local llm_assistant_model = "qwen3.5-27b-thinking"
 local llm_infill_model = llm_assistant_model
-
-local current_fim = "copilot" -- change this to switch default
+local current_fim = "copilot"
 
 -- Copilot Configuration
 vim.g.copilot_no_tab_map = true
@@ -58,17 +57,13 @@ codecompanion.setup({
 				})
 			end,
 		},
-		acp = {
-			opts = { show_defaults = false },
-			opencode = "opencode",
-		}
 	},
 	strategies = {
-		chat = { adapter = "opencode" },
+		chat = { adapter = "llamaswap" },
 		inline = { adapter = "llamaswap" },
 		cmd = { adapter = "llamaswap" },
 	},
-	chat = { dispay = "telescope" },
+	chat = { display = "telescope" },
 	memory = { opts = { chat = { enabled = true } } },
 })
 

modules/nixos/services/llama-swap/config.nix

@@ -54,27 +54,6 @@ in
       };
     };
 
-    # https://huggingface.co/unsloth/GLM-4-32B-0414-GGUF/tree/main
-    "glm-4-32b-instruct" = {
-      name = "GLM 4 (32B) - Instruct";
-      macros.ctx = "32768";
-      cmd = ''
-        ${llama-cpp}/bin/llama-server \
-          --port ''${PORT} \
-          -m /mnt/ssd/Models/GLM/GLM-4-32B-0414-Q4_K_M.gguf \
-          -c ''${ctx} \
-          --temp 0.6 \
-          --top-k 40 \
-          --top-p 0.95 \
-          --min-p 0.0 \
-          -fit off \
-          -dev CUDA0
-      '';
-      metadata = {
-        type = [ "text-generation" ];
-      };
-    };
-
     # https://huggingface.co/mradermacher/gpt-oss-20b-heretic-v2-i1-GGUF/tree/main
     "gpt-oss-20b-thinking" = {
       name = "GPT OSS (20B) - Thinking";
@@ -165,6 +144,58 @@ in
       };
     };
 
+    # https://huggingface.co/AesSedai/Qwen3.5-35B-A3B-GGUF/tree/main
+    "qwen3.5-35b-thinking" = {
+      name = "Qwen3.5 (35B) - Thinking";
+      macros.ctx = "262144";
+      cmd = ''
+        ${llama-cpp}/bin/llama-server \
+          --port ''${PORT} \
+          -m /mnt/ssd/Models/Qwen3.5/Qwen3.5-35B-A3B-IQ4_XS-00001-of-00002.gguf \
+          -c ''${ctx} \
+          --temp 0.6 \
+          --top-p 0.95 \
+          --top-k 20 \
+          --min-p 0.00 \
+          -dev CUDA0 \
+          -fit off
+      '';
+      # --chat-template-kwargs "{\"enable_thinking\": false}"
+      metadata = {
+        type = [
+          "text-generation"
+          "coding"
+        ];
+      };
+    };
+
+    # https://huggingface.co/bartowski/Qwen_Qwen3.5-27B-GGUF/tree/main
+    "qwen3.5-27b-thinking" = {
+      name = "Qwen3.5 (27B) - Thinking";
+      macros.ctx = "196608";
+      cmd = ''
+        ${llama-cpp}/bin/llama-server \
+          --port ''${PORT} \
+          -m /mnt/ssd/Models/Qwen3.5/Qwen_Qwen3.5-27B-IQ4_XS.gguf \
+          -c ''${ctx} \
+          --temp 0.6 \
+          --top-p 0.95 \
+          --top-k 20 \
+          --min-p 0.00 \
+          -ctk q8_0 \
+          -ctv q8_0 \
+          -dev CUDA0 \
+          -fit off
+      '';
+      # --chat-template-kwargs "{\"enable_thinking\": false}"
+      metadata = {
+        type = [
+          "text-generation"
+          "coding"
+        ];
+      };
+    };
+
     # https://huggingface.co/unsloth/Qwen3-30B-A3B-Instruct-2507-GGUF/tree/main
     "qwen3-30b-2507-instruct" = {
       name = "Qwen3 2507 (30B) - Instruct";
@@ -287,24 +318,6 @@ in
       };
     };
 
-    # https://huggingface.co/unsloth/Qwen2.5-Coder-7B-Instruct-128K-GGUF/tree/main
-    "qwen2.5-coder-7b-instruct" = {
-      name = "Qwen2.5 Coder (7B) - Instruct";
-      macros.ctx = "131072";
-      cmd = ''
-        ${llama-cpp}/bin/llama-server \
-          -m /mnt/ssd/Models/Qwen2.5/Qwen2.5-Coder-7B-Instruct-Q8_0.gguf \
-          --fim-qwen-7b-default \
-          -c ''${ctx} \
-          --port ''${PORT} \
-          -fit off \
-          -dev CUDA1
-      '';
-      metadata = {
-        type = [ "text-generation" ];
-      };
-    };
-
     # https://huggingface.co/unsloth/Qwen3-4B-Instruct-2507-GGUF/tree/main
     "qwen3-4b-2507-instruct" = {
       name = "Qwen3 2507 (4B) - Instruct";
@@ -418,26 +431,13 @@ in
     synthetic = {
       proxy = "https://api.synthetic.new/openai/";
       models = [
-        "hf:deepseek-ai/DeepSeek-R1-0528"
-        "hf:deepseek-ai/DeepSeek-V3"
-        "hf:deepseek-ai/DeepSeek-V3-0324"
-        "hf:deepseek-ai/DeepSeek-V3.1"
-        "hf:deepseek-ai/DeepSeek-V3.1-Terminus"
-        "hf:deepseek-ai/DeepSeek-V3.2"
-        "hf:meta-llama/Llama-3.3-70B-Instruct"
-        "hf:meta-llama/Llama-4-Maverick-17B-128E-Instruct-FP8"
-        "hf:MiniMaxAI/MiniMax-M2"
         "hf:MiniMaxAI/MiniMax-M2.1"
+        "hf:MiniMaxAI/MiniMax-M2.5"
         "hf:moonshotai/Kimi-K2.5"
         "hf:moonshotai/Kimi-K2-Instruct-0905"
         "hf:moonshotai/Kimi-K2-Thinking"
         "hf:openai/gpt-oss-120b"
-        "hf:Qwen/Qwen3-235B-A22B-Instruct-2507"
-        "hf:Qwen/Qwen3-235B-A22B-Thinking-2507"
-        "hf:Qwen/Qwen3-Coder-480B-A35B-Instruct"
-        "hf:Qwen/Qwen3-VL-235B-A22B-Instruct"
-        "hf:zai-org/GLM-4.5"
-        "hf:zai-org/GLM-4.6"
+        "hf:Qwen/Qwen3.5-397B-A17B"
         "hf:zai-org/GLM-4.7"
       ];
     };

modules/nixos/services/openssh/default.nix

@@ -67,6 +67,7 @@ in
           "hmac-sha2-512-etm@openssh.com"
           "hmac-sha2-256-etm@openssh.com"
           "umac-128-etm@openssh.com"
+          "hmac-sha2-512"
         ];
       };
 

packages/claude-code/README.md

@@ -0,0 +1,25 @@
+# claude-code
+
+Nix package for [@anthropic-ai/claude-code](https://www.npmjs.com/package/@anthropic-ai/claude-code).
+
+## Updating
+
+1. Fetch the tarball and generate a `package-lock.json`:
+
+```bash
+mkdir /tmp/claude-update && cd /tmp/claude-update
+npm pack @anthropic-ai/claude-code@<version>
+tar -xf anthropic-ai-claude-code-<version>.tgz
+cd package
+npm install --package-lock-only --ignore-scripts
+```
+
+2. Copy the lockfile into the package directory:
+
+```bash
+cp package-lock.json /path/to/nixpkgs/pkgs/by-name/cl/claude-code/package-lock.json
+```
+
+3. Update the `version` and `hash` fields in `package.nix`. Set `hash` to `lib.fakeHash` temporarily, then build to get the correct hash:
+
+4. Do the same for `npmDepsHash`:

packages/claude-code/default.nix

@@ -0,0 +1,61 @@
+{ lib
+, buildNpmPackage
+, fetchzip
+, writableTmpDirAsHomeHook
+, versionCheckHook
+,
+}:
+buildNpmPackage (finalAttrs: {
+  pname = "claude-code";
+  version = "2.1.59";
+
+  src = fetchzip {
+    url = "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-${finalAttrs.version}.tgz";
+    hash = "sha256-Dam9aJ0qBdqU40ACfzGQHuytW6ur0fMLm8D5fIKd1TE=";
+  };
+
+  npmDepsHash = "sha256-K+8xoBc3apvxQ9hCpYywqgBcfLxMWSxacgJcMH8mK7E=";
+
+  strictDeps = true;
+
+  postPatch = ''
+    cp ${./package-lock.json} package-lock.json
+  '';
+
+  dontNpmBuild = true;
+
+  env.AUTHORIZED = "1";
+
+  # `claude-code` tries to auto-update by default, this disables that functionality.
+  # https://docs.anthropic.com/en/docs/agents-and-tools/claude-code/overview#environment-variables
+  # The DEV=true env var causes claude to crash with `TypeError: window.WebSocket is not a constructor`
+  postInstall = ''
+    wrapProgram $out/bin/claude \
+      --set DISABLE_AUTOUPDATER 1 \
+      --unset DEV
+  '';
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [
+    writableTmpDirAsHomeHook
+    versionCheckHook
+  ];
+  versionCheckKeepEnvironment = [ "HOME" ];
+  versionCheckProgramArg = "--version";
+
+  passthru.updateScript = ./update.sh;
+
+  meta = {
+    description = "Agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster";
+    homepage = "https://github.com/anthropics/claude-code";
+    downloadPage = "https://www.npmjs.com/package/@anthropic-ai/claude-code";
+    license = lib.licenses.unfree;
+    maintainers = with lib.maintainers; [
+      malo
+      markus1189
+      omarjatoi
+      xiaoxiangmoe
+    ];
+    mainProgram = "claude";
+  };
+})

packages/claude-code/package-lock.json

@@ -0,0 +1,334 @@
+{
+  "name": "@anthropic-ai/claude-code",
+  "version": "2.1.59",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@anthropic-ai/claude-code",
+      "version": "2.1.59",
+      "license": "SEE LICENSE IN README.md",
+      "bin": {
+        "claude": "cli.js"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "^0.34.2",
+        "@img/sharp-darwin-x64": "^0.34.2",
+        "@img/sharp-linux-arm": "^0.34.2",
+        "@img/sharp-linux-arm64": "^0.34.2",
+        "@img/sharp-linux-x64": "^0.34.2",
+        "@img/sharp-linuxmusl-arm64": "^0.34.2",
+        "@img/sharp-linuxmusl-x64": "^0.34.2",
+        "@img/sharp-win32-arm64": "^0.34.2",
+        "@img/sharp-win32-x64": "^0.34.2"
+      }
+    },
+    "node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.34.5.tgz",
+      "integrity": "sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-darwin-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.34.5.tgz",
+      "integrity": "sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.2.4.tgz",
+      "integrity": "sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.2.4.tgz",
+      "integrity": "sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.2.4.tgz",
+      "integrity": "sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.2.4.tgz",
+      "integrity": "sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.2.4.tgz",
+      "integrity": "sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.2.4.tgz",
+      "integrity": "sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.2.4.tgz",
+      "integrity": "sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.34.5.tgz",
+      "integrity": "sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.34.5.tgz",
+      "integrity": "sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.34.5.tgz",
+      "integrity": "sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.34.5.tgz",
+      "integrity": "sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.34.5.tgz",
+      "integrity": "sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-win32-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.34.5.tgz",
+      "integrity": "sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.34.5.tgz",
+      "integrity": "sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    }
+  }
+}

packages/claude-code/update.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env nix-shell
+#!nix-shell --pure --keep NIX_PATH -i bash --packages nodejs nix-update git cacert
+
+set -euo pipefail
+
+version=$(npm view @anthropic-ai/claude-code version)
+
+# Update version and hashes
+AUTHORIZED=1 NIXPKGS_ALLOW_UNFREE=1 nix-update claude-code --version="$version" --generate-lockfile
+nix-update vscode-extensions.anthropic.claude-code --use-update-script --version "$version"

packages/llama-cpp/default.nix

@@ -7,12 +7,12 @@
   vulkanSupport = true;
 }).overrideAttrs
   (oldAttrs: rec {
-    version = "7951";
+    version = "8196";
     src = pkgs.fetchFromGitHub {
       owner = "ggml-org";
       repo = "llama.cpp";
       tag = "b${version}";
-      hash = "sha256-NRoZQhhQkiK+d4uRCo1mYCGrnjgeQX6kZ0VtSguSmV8=";
+      hash = "sha256-GZRHiyT8mvhV5RTczDRnCSh31UxRZ3F8tEBC1l8oFNQ=";
       leaveDotGit = true;
       postFetch = ''
         git -C "$out" rev-parse --short HEAD > $out/COMMIT
@@ -31,11 +31,4 @@
       export NIX_ENFORCE_NO_NATIVE=0
       ${oldAttrs.preConfigure or ""}
     '';
-
-    # Apply Patches
-    patchFlags = [ "-p1" ];
-    patches = (oldAttrs.patches or [ ]) ++ [
-      ./oneof-not-unrecognized-schema.patch
-      ./additionalprops-unrecognized-schema.patch
-    ];
   })

packages/llama-swap/default.nix

@@ -13,13 +13,13 @@ let
 in
 buildGoModule (finalAttrs: {
   pname = "llama-swap";
-  version = "189";
+  version = "197";
 
   src = fetchFromGitHub {
     owner = "mostlygeek";
     repo = "llama-swap";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-FCAXC7k0IJ+U6TTKRHkKkygbDeaQMAzA3vIax+yegTk=";
+    hash = "sha256-EXgyYmpbN/zzr6KeSpvFEB+FS7gDIZFinNMv70v5boY=";
     # populate values that require us to use git. By doing this in postFetch we
     # can delete .git afterwards and maintain better reproducibility of the src.
     leaveDotGit = true;

packages/opencode/default.nix

@@ -18,12 +18,12 @@ let
 in
 stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "opencode";
-  version = "1.1.51";
+  version = "1.1.53";
   src = fetchFromGitHub {
     owner = "anomalyco";
     repo = "opencode";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-i9KR5n6bT0p7xLErlgaq2TAj/B7ZbLd9a+4Czg8q/cI=";
+    hash = "sha256-VddWpvtoDJlbbesJL6VlP99/NJqkHbN8Rdv1XccNRZM=";
   };
 
   node_modules = stdenvNoCC.mkDerivation {
@@ -74,9 +74,9 @@ stdenvNoCC.mkDerivation (finalAttrs: {
 
     outputHash =
       if stdenvNoCC.hostPlatform.isDarwin then
-        "sha256-DChoXNWJFlyyAqeiR06BQMLITwVQXy0wvQs58l0d1Xc="
+        "sha256-m0vAVv8zS8RgU6YpEVbf6l6vilkU+CP/PtAD6U5g/F8="
       else
-        "sha256-tPDRjMcfGWC7TJaQHa3mt7PsZ6Gr5l4lMUOSXoozqoU=";
+        "sha256-S69x2yRym+h0hbc6wHFOeTxYi9nbBgEJGaZKhUbmdxI=";
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
   };
@@ -93,6 +93,13 @@ stdenvNoCC.mkDerivation (finalAttrs: {
     ./root_fix.patch # https://github.com/anomalyco/opencode/pull/7691
   ];
 
+  postPatch = ''
+    # NOTE: Relax Bun version check to be a warning instead of an error
+    substituteInPlace packages/script/src/index.ts \
+      --replace-fail 'throw new Error(`This script requires bun@''${expectedBunVersionRange}' \
+                     'console.warn(`Warning: This script requires bun@''${expectedBunVersionRange}'
+  '';
+
   configurePhase = ''
     runHook preConfigure
 

packages/pi-coding-agent/default.nix

@@ -14,16 +14,16 @@
 
 buildNpmPackage rec {
   pname = "pi-coding-agent";
-  version = "0.52.0";
+  version = "0.54.0";
 
   src = fetchFromGitHub {
     owner = "badlogic";
     repo = "pi-mono";
     rev = "v${version}";
-    hash = "sha256-pGclunj+DTLkOe4b7NqQt7kgbNR6+mnw4/I1tHWdArM=";
+    hash = "sha256-j8h8KKt/1m47Y6/KA8g213gooq0n2fAqBVkKhHsBCGw=";
   };
 
-  npmDepsHash = "sha256-w1P3M6ZeqKty+BnxJwMwEhPVuzRpTgN/r708I3Y8Y5s=";
+  npmDepsHash = "sha256-L2kP2VpRNg+YeZjvXyn+Soly2wlff4jpZ5qa3T43quE=";
 
   nativeBuildInputs = [ pkg-config ];
 

systems/aarch64-darwin/mac-va-mbp-work/default.nix

@@ -3,7 +3,7 @@
 {
   system.stateVersion = 6;
 
-  # System Config
+  # Determinate Config
   determinateNix = {
     enable = true;
     nixosVmBasedLinuxBuilder = {
@@ -12,5 +12,29 @@
     };
   };
 
+  system.primaryUser = "evanreichard";
+  system.defaults = {
+    trackpad = {
+      TrackpadThreeFingerDrag = true;
+    };
+    dock = {
+      autohide = true;
+    };
+    menuExtraClock = {
+      Show24Hour = true;
+      ShowSeconds = true;
+    };
+    NSGlobalDomain = {
+      KeyRepeat = 2;
+      NSWindowShouldDragOnGesture = true;
+      AppleICUForce24HourTime = true;
+    };
+    WindowManager = {
+      HideDesktop = true;
+    };
+  };
+
+  security.pam.services.sudo_local.touchIdAuth = true;
+
   reichard = { };
 }

systems/x86_64-linux/lin-va-terminal/default.nix

@@ -44,5 +44,9 @@ in
     virtualisation = {
       podman = enabled;
     };
+
+    security = {
+      sops = enabled;
+    };
   };
 }