From cd80ded6c026d28df62cd7624a4e5ed41f6da248 Mon Sep 17 00:00:00 2001
From: m3ta-chiron <m3ta-chiron@agentmail.to>
Date: Wed, 10 Jun 2026 08:18:01 +0200
Subject: [PATCH] fix(nushell): guard optional agenix secrets source

---
 profiles/base/shell/nushell.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/profiles/base/shell/nushell.nix b/profiles/base/shell/nushell.nix
index 469fab1..61e2ebc 100644
--- a/profiles/base/shell/nushell.nix
+++ b/profiles/base/shell/nushell.nix
@@ -44,9 +44,13 @@ in {
 
           # Load m3tam3re secrets from agenix. The secret file is Nushell code
           # containing a `load-env { ... }` block, not KEY=VALUE lines.
-          if ("/run/agenix/m3tam3re-secrets" | path exists) {
-            source /run/agenix/m3tam3re-secrets
+          # `source` resolves literal paths at parse time, so use `null` when absent.
+          const m3tam3re_secrets_file = if ("/run/agenix/m3tam3re-secrets" | path exists) {
+            "/run/agenix/m3tam3re-secrets"
+          } else {
+            null
           }
+          source $m3tam3re_secrets_file
       '';
 
       configFile.text = ''