feat: agent-lib exlude agents

hosts/common/default.nix

@@ -21,7 +21,8 @@
     useGlobalPkgs = true;
     useUserPackages = true;
     extraSpecialArgs = {
-      inherit inputs outputs system;
+      inputs = inputs // {agents = null;};
+      inherit outputs system;
       videoDrivers = config.services.xserver.videoDrivers or [];
     };
   };

hosts/m3-hermes/services/hermes-agent.nix

@@ -1,5 +1,6 @@
 {
   config,
+  lib,
   pkgs,
   inputs,
   ...
@@ -7,25 +8,44 @@
   # Edge TTS: Seraphina — friendly, multilingual German female voice (free, no API key)
   edgeVoice = "de-DE-SeraphinaMultilingualNeural";
 
-  # Build skills using agents flake lib for hermes user
-  hermesSkills = inputs.agents.lib.mkSkills {
-    inherit pkgs;
-    customSkills = "${inputs.agents}/skills";
-    externalSkills = [
-      {
-        src = inputs.skills-basecamp;
-        skillsDir = "skills";
-      }
-      {
-        src = inputs.skills-anthropic;
-        skillsDir = "skills";
-      }
-      {
-        src = inputs.skills-kestra;
-        skillsDir = "skills";
-      }
-    ];
+  agentLock = builtins.fromJSON (builtins.readFile ../../../agent-sources.lock.json);
+
+  agentSkillSelections = {
+    m3ta-agents.exclude = [];
+    anthropic.exclude = ["pdf" "skill-creator" "xlsx"];
+    basecamp.exclude = [];
+    kestra.exclude = [];
+    mattpocock.exclude = ["grill-me" "caveman"];
+    superpowers.exclude = ["brainstorming" "systematic-debugging"];
+    vercel.exclude = [];
   };
+
+  sourceRoot = source:
+    builtins.fetchGit {
+      inherit (source) url rev;
+    };
+
+  selectedSkillNames = sourceName: let
+    source = agentLock.sources.${sourceName};
+    excluded = agentSkillSelections.${sourceName}.exclude;
+  in
+    lib.subtractLists excluded (builtins.attrNames source.items.skills);
+
+  copySkill = sourceName: skillName: let
+    source = agentLock.sources.${sourceName};
+    item = source.items.skills.${skillName};
+  in ''
+    cp -R ${sourceRoot source}/${source.root}/${item.path} $out/${skillName}
+  '';
+
+  copySourceSkills = sourceName:
+    lib.concatMapStringsSep "\n" (copySkill sourceName) (selectedSkillNames sourceName);
+
+  # Build skills from the agent-lib lockfile instead of the legacy AGENTS flake.
+  hermesSkills = pkgs.runCommand "hermes-agent-lib-skills" {} ''
+    mkdir -p $out
+    ${lib.concatMapStringsSep "\n" copySourceSkills (builtins.attrNames agentSkillSelections)}
+  '';
 in {
   virtualisation.docker.enable = true;
 

hosts/m3-kratos/agent-lib.nix

@@ -6,15 +6,30 @@
     targets.pi.enable = true;
     targets.opencode.enable = true;
 
-    # profiles.default.sources.mattpocock.skills.all = true;
     profiles.default = {
-      sources.mattpocock = {
-        skills = {
-          all = true;
-          # Provided by the existing shared skills set; duplicate Home Manager
-          # entries under .agents/skills cannot be installed safely.
-          exclude = ["grill-me" "caveman"];
+      sources = {
+        m3ta-agents = {
+          agents = {
+            all = true;
+          };
+          skills = {
+            all = true;
+            exclude = ["brainstorming" "pdf" "systematic-debugging" "xlsx"];
+          };
         };
+        anthropic.skills = {
+          all = true;
+          exclude = ["skill-creator"];
+        };
+        basecamp.skills.all = true;
+        kestra.skills.all = true;
+        mattpocock.skills = {
+          all = true;
+        };
+        superpowers.skills = {
+          all = true;
+        };
+        vercel.skills.all = true;
       };
     };
   };

hosts/m3-kratos/configuration.nix

@@ -11,6 +11,7 @@
   boot.supportedFilesystems = ["zfs"];
   boot.zfs.package = pkgs.zfs_unstable;
   boot.zfs.forceImportAll = false;
+  boot.zfs.forceImportRoot = false;
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
   boot.initrd.kernelModules = ["amdgpu"];