refactor: resolve nushell secrets path dynamically via config.home.username

Replace hardcoded 'm3tam3re-secrets' with '${config.home.username}-secrets'
so the agenix secret file resolves automatically for any user
(m3tam3re, sascha.koenig, bob, etc.).

agent-sources.lock.json

@@ -555,6 +555,17 @@
             },
             "path": "skills/excalidraw"
           },
+          "m3ta-brain": {
+            "entry": "skills/m3ta-brain/SKILL.md",
+            "licenseFiles": [],
+            "metadata": {
+              "description": "Shared Obsidian vault for human-agent collaboration. Use when: (1) Loading project context at session start (auto-recall), (2) Writing session summaries, decisions, project updates, or learning notes, (3) Searching for past decisions or project state, (4) Running nightly/weekly digest passes, (5) Creating or updating person profiles, (6) Any reference to 'the vault', 'shared brain', 'our context', 'what did we decide'. Triggers: m3ta-brain, shared brain, vault, session summary, decision note, project update, memory candidate, brain vault, auto-recall, digest, nightly pass.",
+              "name": "m3ta-brain",
+              "requires": [],
+              "tags": []
+            },
+            "path": "skills/m3ta-brain"
+          },
           "mem0-memory": {
             "entry": "skills/mem0-memory/SKILL.md",
             "licenseFiles": [],
@@ -643,6 +654,17 @@
             },
             "path": "skills/reflection"
           },
+          "shared-brain-vault": {
+            "entry": "skills/shared-brain-vault/SKILL.md",
+            "licenseFiles": [],
+            "metadata": {
+              "description": "Build and maintain a Git-synced Obsidian vault as shared working memory between user and AI agents. Use when: (1) Writing session summaries or project updates, (2) Recording decisions or learnings, (3) Adding people/profiles to the vault, (4) Populating or restructuring the vault, (5) Setting up multi-agent vault access, (6) Answering 'what did we decide' or 'where do we stand on X'. Triggers: 'shared brain', 'm3ta-brain', 'session summary', 'vault update', 'decision note', 'project status', 'what did we decide'.",
+              "name": "shared-brain-vault",
+              "requires": [],
+              "tags": []
+            },
+            "path": "skills/shared-brain-vault"
+          },
           "skill-creator": {
             "entry": "skills/skill-creator/SKILL.md",
             "licenseFiles": [],
@@ -679,9 +701,9 @@
         },
         "tools": {}
       },
-      "narHash": "sha256:640f5c15e9124526564a5438952c3231d9fa3cbab6a4e6b1cecdf4cd280c7847",
+      "narHash": "sha256:632df1722f82091772f12e9ec51bbf9e823a4a88bd1ce9d093d80901242861fe",
       "ref": null,
-      "rev": "920c00313ae242bd93275c30131b9ab1e52ee2fb",
+      "rev": "cd36a91440b971582fcf2d4eedf9a46fb755f6e1",
       "root": ".",
       "type": "git",
       "url": "https://code.m3ta.dev/m3tam3re/AGENTS",

flake.lock

@@ -46,11 +46,11 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1780133320,
+        "lastModified": 1782789853,
-        "narHash": "sha256-8AiN9tV9PBb5xblJiPlhumBbKj61qLjzqXXFtkj3vvY=",
+        "narHash": "sha256-LEmctqYRQRq0wB1MoS+IVr/0/uu/0nKahqNeJBGTjJ8=",
         "ref": "refs/heads/master",
-        "rev": "920c00313ae242bd93275c30131b9ab1e52ee2fb",
+        "rev": "cd36a91440b971582fcf2d4eedf9a46fb755f6e1",
-        "revCount": 88,
+        "revCount": 92,
         "type": "git",
         "url": "ssh://gitea@code.m3ta.dev/m3tam3re/AGENTS"
       },
@@ -164,11 +164,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781317940,
+        "lastModified": 1782780764,
-        "narHash": "sha256-uMVOhV6pVPgm2hn1WGEbIcJRWjnsyWKy8PHCUn0++iI=",
+        "narHash": "sha256-Q2wPFsuDo1y6neZ3ttxxOOItupg/4+mPkyAZbC0+wfw=",
         "owner": "AvengeMedia",
         "repo": "dms-plugin-registry",
-        "rev": "4ab59f3da3df33bf106045b856db8de875cc42c6",
+        "rev": "9fa716427ab5905845b2a10a01d67bee0b1e4c4b",
         "type": "github"
       },
       "original": {
@@ -231,11 +231,11 @@
         "uv2nix": "uv2nix_2"
       },
       "locked": {
-        "lastModified": 1781346807,
+        "lastModified": 1782794050,
-        "narHash": "sha256-ytT4ojx0qFW4b/oYeW+MkmaA3b/BZ9pqkPmpAg8j1gg=",
+        "narHash": "sha256-+qKEwIhTkml3DNSmIvGFJyssW9ZXTp78KGclFdcDvX8=",
         "owner": "NousResearch",
         "repo": "hermes-agent",
-        "rev": "2a5dc0ef3df433a36abed9ee544ea067d807c438",
+        "rev": "972b1620906a1b80772c2f67492ad50b3c83f048",
         "type": "github"
       },
       "original": {
@@ -272,11 +272,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781305496,
+        "lastModified": 1782749631,
-        "narHash": "sha256-g8Vv4Qfc7n+lgov97REu3X6BeJtvYY0hlSUZR1GrGQQ=",
+        "narHash": "sha256-slFTUgDy0KTPA4LBAmC/9SngDq8GCPdX+ZR0yQHHN1E=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "c87a39aa979acc4848016d2220c6238390d84779",
+        "rev": "5d72a29fc36ac21adae6ae35568fe5ee6700850f",
         "type": "github"
       },
       "original": {
@@ -296,27 +296,11 @@
         "openspec": "openspec"
       },
       "locked": {
-<<<<<<< HEAD
+        "lastModified": 1782541692,
-        "lastModified": 1781500279,
+        "narHash": "sha256-gCWM240hAkKQqZrq7I4+1g9cSo0JZ08l6XFHzyNxohk=",
-        "narHash": "sha256-810qVHwu6jVhu01FWj9dXuruK84Gw2smAlbu6FPBfeY=",
-||||||| cd80ded
-        "lastModified": 1779944037,
-        "narHash": "sha256-jO6zAJjgc9n3SeDJW1EbV6CEqOa9DK+2AhTgWc+ImHQ=",
-=======
-        "lastModified": 1781153970,
-        "narHash": "sha256-OtC89zreW6Api7wpF5u76Jvkn8uQJiM+0yFFn/r+rj8=",
->>>>>>> d1494476b864173592c6dc4a1f0645189cdca192
         "ref": "refs/heads/master",
-<<<<<<< HEAD
+        "rev": "d42a6f57f534965f9e39056ef3385c523c9671f6",
-        "rev": "050c273c65b36dc03c34a7547d80e88afff5ac48",
+        "revCount": 332,
-        "revCount": 327,
-||||||| cd80ded
-        "rev": "ae1fb97c21b311dc03a46e8d50867048e5568c88",
-        "revCount": 323,
-=======
-        "rev": "8fae0726a53ecabb04f4a0931a17a25de6a05fbf",
-        "revCount": 324,
->>>>>>> d1494476b864173592c6dc4a1f0645189cdca192
         "type": "git",
         "url": "ssh://gitea@code.m3ta.dev/m3tam3re/nixpkgs"
       },
@@ -377,11 +361,11 @@
     },
     "nixpkgs-master": {
       "locked": {
-        "lastModified": 1781153468,
+        "lastModified": 1782540244,
-        "narHash": "sha256-ZBRmjFtJn/XmHBV230OSabKQqxOoOJunJmBtSt1sLs0=",
+        "narHash": "sha256-3skOZJEfAUG7LSB/Ok2AQUiqeagYLSq+8wKjtS1hOyc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "cd265fd6b43f2ec1257c2e400f648895d2ad7ccd",
+        "rev": "a65184fc373636356fcaf460dc09655a919c66ea",
         "type": "github"
       },
       "original": {
@@ -409,11 +393,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1781074563,
+        "lastModified": 1782723713,
-        "narHash": "sha256-md8WlXOlfnIeHeOScMTTHFyf2d6iaTwPl2apR5EQ3P4=",
+        "narHash": "sha256-oPXCU/SSUokcGaJREHibG1CBX3+s/W7orDWQOZDsEeQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9ae611a455b90cf061d8f332b977e387bda8e1ca",
+        "rev": "b5aa0fbd538984f6e3d201be0005b4463d8b09f8",
         "type": "github"
       },
       "original": {
@@ -425,11 +409,11 @@
     },
     "nixpkgs_4": {
       "locked": {
-        "lastModified": 1781074563,
+        "lastModified": 1782723713,
-        "narHash": "sha256-md8WlXOlfnIeHeOScMTTHFyf2d6iaTwPl2apR5EQ3P4=",
+        "narHash": "sha256-oPXCU/SSUokcGaJREHibG1CBX3+s/W7orDWQOZDsEeQ=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "9ae611a455b90cf061d8f332b977e387bda8e1ca",
+        "rev": "b5aa0fbd538984f6e3d201be0005b4463d8b09f8",
         "type": "github"
       },
       "original": {
@@ -466,11 +450,11 @@
         "nixpkgs": "nixpkgs_4"
       },
       "locked": {
-        "lastModified": 1781346642,
+        "lastModified": 1782796354,
-        "narHash": "sha256-o92OOSMAB08HQgG7pW2BZVIO53Pkv4oAjLk4Iol3Iko=",
+        "narHash": "sha256-zHZEX+twYRO4n369Nrk21DBb519JZCGJLHBo/trhHO0=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "6e4e8d731fbb3831296607d5f88de727cf7bf6de",
+        "rev": "df4f4323fe161a8bab3aafa2d067ff9d7e223a67",
         "type": "github"
       },
       "original": {
@@ -487,11 +471,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1780479100,
+        "lastModified": 1782291243,
-        "narHash": "sha256-VZZ/ukjciXqiebwei2JizyOnxx0T3IeoowFWElKec4o=",
+        "narHash": "sha256-0pVn5pDqlKpqSgzf4eG9TFCjkjzOtnmGTpbILso7GwI=",
         "owner": "Fission-AI",
         "repo": "OpenSpec",
-        "rev": "1b06fddd59d8e592d5b5794a1970b22867e85b1f",
+        "rev": "737518b36fe4b6fdb09c83eeaf8d873a428c92e6",
         "type": "github"
       },
       "original": {

profiles/base/shell/nushell.nix

@@ -6,6 +6,8 @@
 }:
 with lib; let
   cfg = config.base.shell.nushell;
+  # User-specific secrets file from agenix, resolved at build time.
+  secretsFile = "/run/agenix/${config.home.username}-secrets";
 in {
   # Enabled by default — base modules are always-on.
   options.base.shell.nushell.enable = (mkEnableOption "enable nushell") // {default = true;};
@@ -42,15 +44,16 @@ in {
               | load-env
           }
 
-          # Load m3tam3re secrets from agenix. The secret file is Nushell code
+          # Load user-specific secrets from agenix. The secret file is Nushell code
           # containing a `load-env { ... }` block, not KEY=VALUE lines.
           # `source` resolves literal paths at parse time, so use `null` when absent.
-          const m3tam3re_secrets_file = if ("/run/agenix/m3tam3re-secrets" | path exists) {
+          # Path is resolved at Nix build time via config.home.username.
-            "/run/agenix/m3tam3re-secrets"
+          const user_secrets_file = if ("${secretsFile}" | path exists) {
+            "${secretsFile}"
           } else {
             null
           }
-          source $m3tam3re_secrets_file
+          source $user_secrets_file
       '';
 
       configFile.text = ''

profiles/contexts/desktop/apps/productivity.nix

@@ -12,7 +12,6 @@ in {
 
   config = mkIf cfg.enable {
     home.packages = with pkgs; [
-      openwork
       pomodoro-timer
     ];
   };

profiles/contexts/desktop/wm/hyprland.nix

@@ -19,7 +19,7 @@ in {
         source = [
           "~/.config/hypr/dms/colors.conf"
           "~/.config/hypr/dms/layout.conf"
-          "~/.config/hypr/monitors.conf"
+          "~/.config/hypr/dms/outputs.conf"
         ];
         exec-once = [
           "vibetyper"
@@ -40,7 +40,7 @@ in {
         ];
 
         input = {
-          kb_layout = "de,us";
+          kb_layout = "us";
           kb_variant = "";
           kb_model = "";
           kb_rules = "";
@@ -97,17 +97,47 @@ in {
         };
 
         device = [
+          # Alle normalen Keyboards explizit auf de setzen:
           {
-            name = "zsa-technology-labs-moonlander-mark-i";
+            name = "video-bus";
-            kb_layout = "us";
+            kb_layout = "de,us";
+            kb_options = "ctrl:nocaps";
+          }
+          {
+            name = "razer-razer-pro-click-v2-vertical-edition-keyboard";
+            kb_layout = "de,us";
+            kb_options = "ctrl:nocaps";
+          }
+          {
+            name = "razer-razer-pro-click-v2-vertical-edition-1";
+            kb_layout = "de,us";
+            kb_options = "ctrl:nocaps";
           }
           {
             name = "vibe-typer-virtual-keyboard";
             kb_layout = "de";
+            kb_options = "ctrl:nocaps";
           }
           {
             name = "keychron-keychron-k7";
             kb_layout = "us";
+            kb_options = "ctrl:nocaps";
+          }
+          # Moonlander Sub-Devices bleiben us (erben global)
+          {
+            name = "zsa-technology-labs-moonlander-mark-i-consumer-control";
+            kb_layout = "us";
+            kb_options = "ctrl:nocaps";
+          }
+          {
+            name = "zsa-technology-labs-moonlander-mark-i-keyboard";
+            kb_layout = "us";
+            kb_options = "ctrl:nocaps";
+          }
+          {
+            name = "zsa-technology-labs-moonlander-mark-i-system-control";
+            kb_layout = "us";
+            kb_options = "ctrl:nocaps";
           }
         ];
 
@@ -150,6 +180,10 @@ in {
           "match:initial_title .*streamlabs.com.*, no_shadow on"
           "match:initial_title .*streamlabs.com.*, no_blur on"
           "match:class ^vibe-typer$, match:title ^Recording Indicator$, no_blur on"
+          "match:class ^vibe-typer$, match:title ^Recording Indicator$, no_shadow on"
+          "match:class ^vibe-typer$, match:title ^Recording Indicator$, no_anim on"
+          "match:class ^vibe-typer$, match:title ^Recording Indicator$, border_size 0"
+          "match:class ^vibe-typer$, match:title ^Recording Indicator$, no_focus on"
           "border_color rgb(ffffff), match:xwayland 1"
         ];
 

profiles/sets/coding/agents/agents.nix

@@ -74,5 +74,6 @@
     # opencode-desktop
     openshell
     openspec
+    openwork
   ];
 }

profiles/sets/coding/agents/opencode.nix

@@ -4,25 +4,25 @@
 
     ohMyOpencodeSettings = {
       agents = {
-        sisyphus.model = "litellm/claude-opus-4-6";
+        sisyphus.model = "litellm/claude-opus-4-8";
         oracle.model = "litellm/claude-sonnet-4-6";
         librarian.model = "litellm/claude-sonnet-4-6";
         explore.model = "litellm/claude-haiku-4-5";
         multimodal-looker.model = "litellm/gpt-5.3-codex";
-        prometheus.model = "litellm/claude-opus-4-6";
+        prometheus.model = "litellm/claude-opus-4-8";
-        metis.model = "litellm/claude-opus-4-6";
+        metis.model = "litellm/claude-opus-4-8";
-        momus.model = "litellm/claude-opus-4-6";
+        momus.model = "litellm/claude-opus-4-8";
-        atlas.model = "litellm/claude-sonnet-4-6";
+        atlas.model = "litellm/claude-sonnet-4-8";
       };
       categories = {
-        visual-engineering.model = "zai-coding-plan/glm-5.1";
+        visual-engineering.model = "zai-coding-plan/glm-5.2";
-        ultrabrain.model = "litellm/claude-opus-4-6";
+        ultrabrain.model = "litellm/claude-opus-4-8";
         deep.model = "litellm/claude-sonnet-4-6";
-        artistry.model = "zai-coding-plan/glm-5.1";
+        artistry.model = "zai-coding-plan/glm-5.2";
         quick.model = "litellm/claude-haiku-4-5";
         unspecified-low.model = "litellm/claude-sonnet-4-6";
-        unspecified-high.model = "litellm/claude-opus-4-6";
+        unspecified-high.model = "litellm/claude-opus-4-8";
-        writing.model = "zai-coding-plan/glm-5.1";
+        writing.model = "zai-coding-plan/glm-5.2";
       };
     };
   };
@@ -227,12 +227,11 @@
               output = 64000;
             };
           };
-          "claude-opus-4-6" = {
+          "claude-opus-4-8" = {
-            name = "Claude Opus 4.6";
+            name = "Claude Opus 4.8";
             options = {
               thinking = {
-                type = "enabled";
+                type = "adaptive";
-                budget_tokens = 16000;
               };
             };
             limit = {

users/m3tam3re/identities/work.nix

@@ -44,29 +44,29 @@
   programs.ssh = {
     enable = true;
     enableDefaultConfig = false;
-    matchBlocks = {
+    settings = {
       "AZ-CLD-1" = {
-        hostname = "152.53.186.119";
+        HostName = "152.53.186.119";
-        user = "sascha.koenig";
+        User = "sascha.koenig";
-        port = 2022;
+        Port = 2022;
-        identityFile = "~/.ssh/sascha.koenig";
+        IdentityFile = "~/.ssh/sascha.koenig";
       };
       "AZ-PRM-1" = {
-        hostname = "192.168.152.76";
+        HostName = "192.168.152.76";
-        user = "sascha.koenig";
+        User = "sascha.koenig";
-        port = 2022;
+        Port = 2022;
-        identityFile = "~/.ssh/sascha.koenig";
+        IdentityFile = "~/.ssh/sascha.koenig";
       };
       "git.az-gruppe.com" = {
-        hostname = "git.az-gruppe.com";
+        HostName = "git.az-gruppe.com";
-        port = 2022;
+        Port = 2022;
-        user = "sascha.koenig";
+        User = "sascha.koenig";
-        identityFile = "~/.ssh/sascha.koenig";
+        IdentityFile = "~/.ssh/sascha.koenig";
       };
       "code.m3ta.dev" = {
-        hostname = "code.m3ta.dev";
+        HostName = "code.m3ta.dev";
-        user = "m3tam3re";
+        User = "m3tam3re";
-        identityFile = "~/.ssh/sascha.koenig";
+        IdentityFile = "~/.ssh/sascha.koenig";
       };
     };
   };