feat: add opencode-desktop package with Wayland support

Diff: https://github.com/n8n-io/n8n/compare/n8n@2.4.4...n8n@2.4.5

Changelog: https://github.com/n8n-io/n8n/releases/tag/n8n@n8n@2.4.5

.beads/.gitignore

@@ -32,6 +32,11 @@ beads.left.meta.json
 beads.right.jsonl
 beads.right.meta.json
 
+# Sync state (local-only, per-machine)
+# These files are machine-specific and should not be shared across clones
+.sync.lock
+sync_base.jsonl
+
 # NOTE: Do NOT add negation patterns (e.g., !issues.jsonl) here.
 # They would override fork protection in .git/info/exclude, allowing
 # contributors to accidentally commit upstream issue databases.

.beads/issues.jsonl

@@ -5,14 +5,16 @@
 {"id":"nixpkgs-61l","title":"Update documentation to reflect latest changes","status":"closed","priority":3,"issue_type":"task","created_at":"2026-01-10T18:48:19.599467206+01:00","created_by":"m3tam3re","updated_at":"2026-01-10T19:12:26.294895563+01:00","closed_at":"2026-01-10T19:12:26.294895563+01:00","close_reason":"Documentation updated: Added stt-ptt language support docs, rofi-project-opener module docs, and updated zellij-ps docs"}
 {"id":"nixpkgs-69z","title":"n8n overlay -\u003e pkgs","description":"Create a full package definition in pkgs/n8n/default.nix that mirrors nixpkgs-unstable's n8n package but with version 2.4.1 and updated hashes from overlays/mods/n8n.nix. Register the new package in pkgs/default.nix. The overlay overrides: src (n8n-io/n8n@2.4.1) and pnpmDeps hash. Reference nixpkgs-unstable for the base package structure, then apply the version/hash modifications.","status":"closed","priority":2,"issue_type":"chore","owner":"p@m3ta.dev","created_at":"2026-01-13T19:42:35.643928163+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T20:25:53.712987689+01:00","closed_at":"2026-01-13T20:25:53.712987689+01:00","close_reason":"Packages created successfully: pkgs/n8n/default.nix, pkgs/beads/default.nix, pkgs/opencode/default.nix. All packages build successfully."}
 {"id":"nixpkgs-7ez","title":"Add authentication command for basecamp-mcp-server","description":"Add a command for the basecamp-mcp-server that will guide the user through the authentication flow and create a sample environment file with the necessary values. This involves researching the original basecamp-mcp-server repository for authentication details and implementing a user-friendly authentication workflow.","status":"tombstone","priority":0,"issue_type":"feature","created_at":"2026-01-12T18:20:55.665717166+01:00","created_by":"m3tam3re","updated_at":"2026-01-13T19:46:32.112562429+01:00","dependencies":[{"issue_id":"nixpkgs-7ez","depends_on_id":"nixpkgs-3w3","type":"blocks","created_at":"2026-01-12T18:48:31.806330931+01:00","created_by":"m3tam3re"}],"deleted_at":"2026-01-13T19:46:32.112562429+01:00","deleted_by":"daemon","delete_reason":"delete","original_type":"feature"}
-{"id":"nixpkgs-8jw","title":"fix: self-hosted nixos runner missing node in PATH for Gitea Actions","description":"The nix-update workflow fails on self-hosted nixos runner because node is not available in PATH. Error: Cannot find: node in PATH. Root cause: actions/checkout@v4 requires Node.js to execute post-checkout steps. The self-hosted nixos runner does not have node installed or not in PATH. Possible solutions: 1) Add Node.js to the nixos runner environment, 2) Use container-based runner instead of bare nixos, 3) Use a different checkout action that does not require node, 4) Configure PATH to include node installation. Impact: Automated package updates are completely blocked.","status":"open","priority":1,"issue_type":"bug","owner":"p@m3ta.dev","created_at":"2026-01-14T20:50:59.153145341+01:00","created_by":"m3tm3re","updated_at":"2026-01-14T20:51:34.044954071+01:00"}
+{"id":"nixpkgs-8jw","title":"fix: self-hosted nixos runner missing node in PATH for Gitea Actions","description":"The nix-update workflow fails on self-hosted nixos runner because node is not available in PATH. Error: Cannot find: node in PATH. Root cause: actions/checkout@v4 requires Node.js to execute post-checkout steps. The self-hosted nixos runner does not have node installed or not in PATH. Possible solutions: 1) Add Node.js to the nixos runner environment, 2) Use container-based runner instead of bare nixos, 3) Use a different checkout action that does not require node, 4) Configure PATH to include node installation. Impact: Automated package updates are completely blocked.","status":"closed","priority":1,"issue_type":"bug","owner":"p@m3ta.dev","created_at":"2026-01-14T20:50:59.153145341+01:00","created_by":"m3tm3re","updated_at":"2026-01-18T18:36:50.926416564+01:00","closed_at":"2026-01-17T09:49:26.658187402+01:00"}
+{"id":"nixpkgs-8ng","title":"fix: Add nix-update arguments for opencode subpackage","description":"The Gitea workflow does not work correctly on the opencode package because opencode uses a subpackage. To fix this, nix-update needs to be run with additional arguments to adjust the output hash of the subpackage.\n\n**Solution:**\nRun nix-update with the following arguments:\n$ nix-instantiate --eval --json --strict /nix/store/ybiynv89drnshjdlb089r3i687c5k878-nix-update-1.14.0/lib/python3.13/site-packages/nix_update/eval.nix --argstr importPath /home/m3tam3re/p/NIX/nixpkgs --argstr attribute '[\"opencode\"]' --arg isFlake true --arg sanitizePositions true\nfetch https://github.com/anomalyco/opencode/releases.atom\nNot updating version, already 1.1.25\nUpdating subpackage node_modules\n$ nix-instantiate --eval --json --strict /nix/store/ybiynv89drnshjdlb089r3i687c5k878-nix-update-1.14.0/lib/python3.13/site-packages/nix_update/eval.nix --argstr importPath /home/m3tam3re/p/NIX/nixpkgs --argstr attribute '[\"opencode\", \"node_modules\"]' --arg isFlake true --arg sanitizePositions true\n$ nix-build --expr 'let src = (let flake = builtins.getFlake \"/home/m3tam3re/p/NIX/nixpkgs\"; in flake.packages.${builtins.currentSystem}.\"opencode\".\"node_modules\" or flake.\"opencode\".\"node_modules\").src; in (src.overrideAttrs or (f: src // f src)) (_: { outputHash = \"\"; outputHashAlgo = \"sha256\"; })' --extra-experimental-features 'flakes nix-command'\n$ nix-build --expr 'let src = (let flake = builtins.getFlake \"/home/m3tam3re/p/NIX/nixpkgs\"; in flake.packages.${builtins.currentSystem}.\"opencode\".\"node_modules\" or flake.\"opencode\".\"node_modules\"); in (src.overrideAttrs or (f: src // f src)) (_: { outputHash = \"\"; outputHashAlgo = \"sha256\"; })' --extra-experimental-features 'flakes nix-command'\nPackage maintainers:\n  - Thierry Delafontaine (@delafthi)\n$ git -C /home/m3tam3re/p/NIX/nixpkgs diff -- /home/m3tam3re/p/NIX/nixpkgs/pkgs/opencode\n\nThe workflow file needs to be updated to pass these arguments when updating the opencode package.","status":"closed","priority":2,"issue_type":"bug","owner":"p@m3ta.dev","created_at":"2026-01-17T09:47:55.750805329+01:00","created_by":"m3tm3re","updated_at":"2026-01-18T10:38:06.536530593+01:00","closed_at":"2026-01-18T10:38:06.536530593+01:00","close_reason":"Closed"}
 {"id":"nixpkgs-98j","title":"beads overlay -\u003e pkgs","description":"Create a full package definition in pkgs/beads/default.nix that mirrors nixpkgs-unstable's beads package but with version 0.47.1 and updated hashes from overlays/mods/beads.nix. Register the new package in pkgs/default.nix. The overlay overrides: src (steveyegge/beads@v0.47.1), vendorHash, and disables tests (doCheck = false). Reference nixpkgs-unstable for the base package structure, then apply the version/hash modifications.","status":"closed","priority":2,"issue_type":"chore","owner":"p@m3ta.dev","created_at":"2026-01-13T19:43:35.645275221+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T20:25:53.715613545+01:00","closed_at":"2026-01-13T20:25:53.715613545+01:00","close_reason":"Packages created successfully: pkgs/n8n/default.nix, pkgs/beads/default.nix, pkgs/opencode/default.nix. All packages build successfully."}
 {"id":"nixpkgs-bqc","title":"opencode overlay -\u003e pkgs","description":"Create a full package definition in pkgs/opencode/default.nix that mirrors nixpkgs-unstable's opencode package but with version 1.1.18 and updated hashes from overlays/mods/opencode.nix. Register the new package in pkgs/default.nix. The overlay overrides: src (anomalyco/opencode@v1.1.18) and node_modules hash. Reference nixpkgs-unstable for the base package structure, then apply the version/hash modifications.","status":"closed","priority":2,"issue_type":"chore","owner":"p@m3ta.dev","created_at":"2026-01-13T19:43:36.450930004+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T20:25:53.717928297+01:00","closed_at":"2026-01-13T20:25:53.717928297+01:00","close_reason":"Packages created successfully: pkgs/n8n/default.nix, pkgs/beads/default.nix, pkgs/opencode/default.nix. All packages build successfully."}
 {"id":"nixpkgs-e2u","title":"Change projectDirs from list to attrset with path and args","description":"Change projectDirs option type from 'types.listOf types.str' to an attrset like:\n\nprojectDirs = {\n  nixpkgs = { path = \"~/p/NIX/nixpkgs\"; args = \"--agent Planner-Sisyphus\"; };\n  myproject = { path = \"~/dev/myproject\"; };  # args optional\n};\n\nMust maintain backward compatibility consideration.","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-05T12:45:48.6992807+01:00","created_by":"m3tam3re","updated_at":"2026-01-05T12:48:12.178120719+01:00","closed_at":"2026-01-05T12:48:12.178120719+01:00","close_reason":"Changed projectDirs from listOf str to attrsOf submodule with path+args","dependencies":[{"issue_id":"nixpkgs-e2u","depends_on_id":"nixpkgs-w3u","type":"parent-child","created_at":"2026-01-05T12:46:00.515400521+01:00","created_by":"m3tam3re"}]}
 {"id":"nixpkgs-fka","title":"Ensure docs are staged and committed","status":"closed","priority":3,"issue_type":"task","created_at":"2026-01-10T18:48:18.05472995+01:00","created_by":"m3tam3re","updated_at":"2026-01-10T19:12:26.306880401+01:00","closed_at":"2026-01-10T19:12:26.306880401+01:00","close_reason":"Documentation staged and ready for commit"}
 {"id":"nixpkgs-hrh","title":"projectDirs on rofi-project-switcher should be exported to users home-manager environment","status":"closed","priority":2,"issue_type":"feature","created_at":"2026-01-05T11:46:43.640224459+01:00","created_by":"m3tam3re","updated_at":"2026-01-05T12:49:43.584087541+01:00","closed_at":"2026-01-05T12:49:43.584087541+01:00","close_reason":"Feature complete: config exported as ROFI_PROJECT_OPENER_CONFIG env var","dependencies":[{"issue_id":"nixpkgs-hrh","depends_on_id":"nixpkgs-w3u","type":"blocks","created_at":"2026-01-05T12:46:05.867959608+01:00","created_by":"m3tam3re"}]}
 {"id":"nixpkgs-p79","title":"feat: Add auto-language detection support to stt-ptt package","description":"## Current State\n- **Package**: `/home/m3tam3re/p/NIX/nixpkgs/pkgs/stt-ptt/default.nix`\n- **Module**: `/home/m3tam3re/p/NIX/nixpkgs/modules/home-manager/cli/stt-ptt.nix`\n- **Current whisper-cli call** (line 55): `\"$WHISPER\" -m \"$STT_MODEL\" -f \"$AUDIO\" -np -nt 2\u003e/dev/null`\n- **Missing**: Language configuration option and auto-detection\n\n## Required Changes\n\n### 1. Update Package (`pkgs/stt-ptt/default.nix`)\nAdd support for language configuration:\n- Add `STT_LANGUAGE` environment variable (default: \"auto\" for auto-detection)\n- Modify whisper-cli call to use `-l \"$STT_LANGUAGE\"` flag\n- Support the special value \"auto\" for automatic language detection\n- Update help text to document the new environment variable\n\n### 2. Update Home Manager Module (`modules/home-manager/cli/stt-ptt.nix`)\nAdd new `language` option:\n- Add `language` option with type `types.enum [\"auto\" \"en\" \"es\" \"fr\" \"de\" \"it\" \"pt\" \"ru\" \"zh\" \"ja\" \"ko\" ...]`\n- Default should be \"auto\" (auto-detect)\n- Set `STT_LANGUAGE` environment variable in `home.sessionVariables`\n- Add documentation describing available languages and auto-detection behavior\n- Consider using `types.nullOr(types.str)` with \"auto\" as default for more flexibility\n\n### 3. Technical Details\nFrom whisper.cpp CLI documentation:\n- `-l LANG, --language LANG [en] spoken language ('auto' for auto-detect)`\n- Auto-detection analyzes audio to determine spoken language automatically\n- Specifying a language can improve accuracy if you know the language\n- Language codes follow ISO 639-1 standard (2-letter codes)\n\n## Implementation Plan\n\n### Package Changes:\n```nix\n# Add to environment variables section:\nSTT_LANGUAGE=\"${STT_LANGUAGE:-auto}\"\n\n# Modify whisper call:\n\"$WHISPER\" -m \"$STT_MODEL\" -f \"$AUDIO\" -l \"$STT_LANGUAGE\" -np -nt 2\u003e/dev/null\n\n# Update help text:\necho \"  STT_LANGUAGE       - Language code or 'auto' for auto-detection (default: auto)\"\n```\n\n### Module Changes:\n```nix\nlanguage = mkOption {\n  type = types.enum [\"auto\" \"en\" \"es\" \"fr\" \"de\" \"it\" \"pt\" \"ru\" \"zh\" \"ja\" \"ko\"];\n  default = \"auto\";\n  description = ''\n    Language for speech recognition. Use \"auto\" for automatic language detection,\n    or specify a language code (e.g., \"en\", \"es\", \"fr\") for better accuracy.\n    Auto-detection analyzes the audio to determine the spoken language.\n  '';\n};\n\nhome.sessionVariables = {\n  STT_LANGUAGE = cfg.language;\n  # ... existing variables\n};\n```\n\n## Benefits\n- **Multilingual support**: Users can speak in any language\n- **Convenience**: Auto-detection eliminates need to specify language\n- **Accuracy**: Explicit language selection improves transcription accuracy\n- **Backward compatible**: Default behavior (auto) matches current functionality\n\n## Testing Considerations\n1. Test auto-detection with multiple languages\n2. Test explicit language selection\n3. Test fallback behavior when auto-detection fails\n4. Test with different Whisper models\n\n## Related\n- whisper.cpp supports 100+ languages\n- Language codes follow ISO 639-1 standard\n- Auto-detection adds slight processing overhead","status":"closed","priority":2,"issue_type":"feature","created_at":"2026-01-10T08:40:51.478869019+01:00","created_by":"m3tam3re","updated_at":"2026-01-10T09:35:49.421572334+01:00","closed_at":"2026-01-10T09:35:49.421572334+01:00","close_reason":"Implemented auto-language detection support: Added STT_LANGUAGE environment variable to package, modified whisper-cli call to use -l flag, updated help text, and added language option to HM module with enum support for 23 common languages plus 'auto'."}
-{"id":"nixpkgs-r3u","title":"Add a Gitea action for nix-update to automatically update packages","description":"Create a Gitea action that runs nix-update to automatically update packages in this repository. My Gitea instance runs on NixOS (hostname: m3-atlas). Check the Gitea configuration in /home/m3tam3re/p/NIX/nixos-config for reference on how to set up actions. The action should target the packages directory and create PRs with updates when nix-update finds newer versions.","status":"open","priority":2,"issue_type":"task","owner":"p@m3ta.dev","created_at":"2026-01-13T19:50:22.953433727+01:00","created_by":"m3tm3re","updated_at":"2026-01-13T19:52:40.071361668+01:00","dependencies":[{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-69z","type":"discovered-from","created_at":"2026-01-13T19:52:40.98774707+01:00","created_by":"m3tm3re"},{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-98j","type":"discovered-from","created_at":"2026-01-13T19:52:41.501620297+01:00","created_by":"m3tm3re"},{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-bqc","type":"discovered-from","created_at":"2026-01-13T19:52:42.010721971+01:00","created_by":"m3tm3re"}]}
+{"id":"nixpkgs-r3u","title":"Add a Gitea action for nix-update to automatically update packages","description":"Create a Gitea action that runs nix-update to automatically update packages in this repository. My Gitea instance runs on NixOS (hostname: m3-atlas). Check the Gitea configuration in /home/m3tam3re/p/NIX/nixos-config for reference on how to set up actions. The action should target the packages directory and create PRs with updates when nix-update finds newer versions.","status":"closed","priority":2,"issue_type":"task","owner":"p@m3ta.dev","created_at":"2026-01-13T19:50:22.953433727+01:00","created_by":"m3tm3re","updated_at":"2026-01-18T18:36:50.936219311+01:00","closed_at":"2026-01-17T09:49:05.573319795+01:00","dependencies":[{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-69z","type":"discovered-from","created_at":"2026-01-13T19:52:40.98774707+01:00","created_by":"m3tm3re"},{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-98j","type":"discovered-from","created_at":"2026-01-13T19:52:41.501620297+01:00","created_by":"m3tm3re"},{"issue_id":"nixpkgs-r3u","depends_on_id":"nixpkgs-bqc","type":"discovered-from","created_at":"2026-01-13T19:52:42.010721971+01:00","created_by":"m3tm3re"}]}
 {"id":"nixpkgs-sys","title":"Update config file format to include args per project","description":"Update the config file at ~/.config/rofi-project-opener/config to support per-project args. Change from PROJECT_DIRS to a format that encodes both path and args, e.g. JSON or structured text.","status":"closed","priority":1,"issue_type":"task","created_at":"2026-01-05T12:45:51.793810575+01:00","created_by":"m3tam3re","updated_at":"2026-01-05T12:48:21.75755315+01:00","closed_at":"2026-01-05T12:48:21.75755315+01:00","close_reason":"Config file now writes JSON (projects.json) with per-project path and args","dependencies":[{"issue_id":"nixpkgs-sys","depends_on_id":"nixpkgs-w3u","type":"parent-child","created_at":"2026-01-05T12:46:01.400263722+01:00","created_by":"m3tam3re"},{"issue_id":"nixpkgs-sys","depends_on_id":"nixpkgs-e2u","type":"blocks","created_at":"2026-01-05T12:46:04.055948778+01:00","created_by":"m3tam3re"}]}
+{"id":"nixpkgs-tsh","title":"Prevent verification of ignored packages in nix-update workflow","status":"closed","priority":2,"issue_type":"task","owner":"p@m3ta.dev","created_at":"2026-01-18T10:36:45.393068138+01:00","created_by":"m3tm3re","updated_at":"2026-01-18T10:37:31.686158451+01:00","closed_at":"2026-01-18T10:37:31.686158451+01:00","close_reason":"Fixed by changing return 0 to return 1 for ignored packages"}
 {"id":"nixpkgs-w3u","title":"projectDirs should support args, for example --agent \u003cagentname\u003e","description":"This means project directories need to be an attribute set and we also need to change the launch command to \"opencode \u003cdirectory name\u003e \u003carguments\u003e\".\n","status":"closed","priority":2,"issue_type":"feature","created_at":"2026-01-05T11:56:13.844735432+01:00","created_by":"m3tam3re","updated_at":"2026-01-05T12:49:42.34144046+01:00","closed_at":"2026-01-05T12:49:42.34144046+01:00","close_reason":"Feature complete: projectDirs now supports args per directory"}
 {"id":"nixpkgs-xi7","title":"There is a bug in the basecamp-mcp server","description":"OSError: [Errno 30] Read-only file system when trying to write log file.\n\nTraceback:\nFile: /nix/store/708ksr7z3484bj8faysd7djwpa8xvw12-basecamp-mcp-server-0.0.1-unstable/lib/basecamp-mcp-server/basecamp_fastmcp.py, line 35\nError: logging.FileHandler(LOG_FILE_PATH) - attempting to write to read-only Nix store location: /nix/store/708ksr7z3484bj8faysd7djwpa8xvw12-basecamp-mcp-server-0.0.1-unstable/lib/basecamp-mcp-server/basecamp_fastmcp.log\n\nThe package needs to use a writable directory (e.g., XDG_DATA_HOME or /tmp) for log files instead of the Nix store.","status":"closed","priority":2,"issue_type":"bug","created_at":"2026-01-12T18:16:37.597147907+01:00","created_by":"m3tam3re","updated_at":"2026-01-12T19:12:57.91076765+01:00","closed_at":"2026-01-12T19:12:57.91076765+01:00","close_reason":"Closed"}

.gitea/workflows/nix-update.yml

@@ -2,201 +2,422 @@ name: Update Nix Packages with nix-update
 
 on:
   schedule:
-    - cron: '0 2 * * *'
-  workflow_dispatch:  # Allow manual triggering
+    - cron: "0 2,14 * * *" # Every 12 hours at 2 AM and 2 PM
+  workflow_dispatch:
     inputs:
       package:
-        description: 'Specific package to update (optional)'
+        description: "Specific package to update (optional)"
         required: false
         type: string
 
+concurrency:
+  group: nix-update-${{ github.ref }}
+  cancel-in-progress: true
+
 env:
-  GIT_AUTHOR_NAME: 'nix-update bot'
-  GIT_AUTHOR_EMAIL: 'bot@m3ta.dev'
-  GIT_COMMITTER_NAME: 'nix-update bot'
-  GIT_COMMITTER_EMAIL: 'bot@m3ta.dev'
+  GIT_AUTHOR_NAME: "nix-update bot"
+  GIT_AUTHOR_EMAIL: "bot@m3ta.dev"
+  GIT_COMMITTER_NAME: "nix-update bot"
+  GIT_COMMITTER_EMAIL: "bot@m3ta.dev"
+  REPO_DIR: "/tmp/nixpkgs"
+
+  # Nix configuration
+  NIX_PATH: "nixpkgs=channel:nixos-unstable"
+  NIX_CONFIG: "experimental-features = nix-command flakes"
+
+  # Non-interactive mode
+  DEBIAN_FRONTEND: "noninteractive"
+  GIT_TERMINAL_PROMPT: "0"
 
 jobs:
   nix-update:
     runs-on: nixos
+    timeout-minutes: 180
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.NIX_UPDATE_TOKEN }}
-
-      - name: Check for available packages to update
-        id: check-packages
+      - name: Setup Environment and Authenticate
         run: |
-          echo "Found packages in pkgs/ directory:"
-          ls -1 pkgs/ | grep -v default.nix | grep -v AGENTS.md || echo "No package directories found"
+          if [ -d "$REPO_DIR" ]; then rm -rf "$REPO_DIR"; fi
+
+          git config --global credential.helper store
+          echo "https://m3tam3re:${{ secrets.NIX_UPDATE_TOKEN }}@code.m3ta.dev" > ~/.git-credentials
+          chmod 600 ~/.git-credentials
+
+          git config --global user.name "$GIT_AUTHOR_NAME"
+          git config --global user.email "$GIT_AUTHOR_EMAIL"
+          git config --global init.defaultBranch master
+
+      - name: Checkout Repository
+        run: |
+          git clone --no-single-branch \
+            "https://m3tam3re@code.m3ta.dev/m3tam3re/nixpkgs.git" \
+            "$REPO_DIR"
+
+      - name: Update opencode Flake Input
+        id: update-opencode
+        run: |
+          cd "$REPO_DIR"
+
+          echo "::group::Checking for opencode updates"
+
+          # Get latest release from GitHub API (strip v prefix for comparison)
+          LATEST_RELEASE=$(curl -s "https://api.github.com/repos/anomalyco/opencode/releases/latest" | jq -r '.tag_name' | sed 's/^v//')
+
+          # Extract current version from flake.nix
+          CURRENT_VERSION=$(grep -oP 'opencode\.url = "github:anomalyco/opencode/v\K[^"]+' flake.nix)
+
+          echo "Current opencode version: $CURRENT_VERSION"
+          echo "Latest opencode version: $LATEST_RELEASE"
+
+          # Check if update is needed
+          if [ "$LATEST_RELEASE" != "$CURRENT_VERSION" ]; then
+            echo "🔄 Updating opencode from $CURRENT_VERSION to $LATEST_RELEASE"
+
+            # Update flake.nix with new version
+            sed -i 's|opencode\.url = "github:anomalyco/opencode/v.*"|opencode.url = "github:anomalyco/opencode/v'"$LATEST_RELEASE"'"|' flake.nix
+
+            # Update flake lock to fetch new revision
+            nix flake update opencode
+
+            # Format with alejandra
+            nix fmt flake.nix
+
+            # Verify the update
+            echo "::endgroup::"
+            echo "::group::Verifying opencode update"
+
+            # Run flake check
+            if ! nix flake check; then
+              echo "❌ Flake check failed after opencode update"
+              git checkout flake.nix flake.lock
+              exit 1
+            fi
+
+            # Build opencode package
+            if ! nix build .#opencode 2>&1 | tee /tmp/opencode-build.log; then
+              echo "❌ Build failed for opencode"
+              git checkout flake.nix flake.lock
+              exit 1
+            fi
+
+            echo "✅ Flake check passed"
+            echo "✅ Build successful for opencode"
+            echo "::endgroup::"
+
+            # Commit the change
+            echo "::group::Committing opencode update"
+            git add flake.nix flake.lock
+            git commit -m "chore: update opencode flake input to $LATEST_RELEASE"
+
+            echo "opencode_update=true" >> $GITHUB_OUTPUT
+            echo "opencode_version=${LATEST_RELEASE}" >> $GITHUB_OUTPUT
+            echo "::endgroup::"
+
+            echo "✅ Updated opencode to $LATEST_RELEASE"
+          else
+            echo "✓ opencode is already up to date"
+            echo "opencode_update=false" >> $GITHUB_OUTPUT
+            echo "opencode_version=${CURRENT_VERSION}" >> $GITHUB_OUTPUT
+            echo "::endgroup::"
+          fi
+
+      - name: Check Prerequisites
+        id: check
+        run: |
+          cd "$REPO_DIR"
+          if [ ! -d "pkgs" ]; then
+             echo "❌ Error: 'pkgs' directory not found."
+             exit 1
+          fi
 
-          # Check if flake.nix exists
           if [ -f "flake.nix" ]; then
-            echo "✓ Found flake.nix"
             echo "has_flake=true" >> $GITHUB_OUTPUT
           else
-            echo "✗ No flake.nix found"
             echo "has_flake=false" >> $GITHUB_OUTPUT
           fi
 
-      - name: Setup git config
-        run: |
-          git config --global user.name "${{ env.GIT_AUTHOR_NAME }}"
-          git config --global user.email "${{ env.GIT_AUTHOR_EMAIL }}"
-          git config --global init.defaultBranch master
-
-      - name: Update packages
+      - name: Update Packages
         id: update
         run: |
+          cd "$REPO_DIR"
           set -e
 
-          # Create timestamp for branch naming
-          TIMESTAMP=$(date +%Y%m%d-%H%M%S)
-          BRANCH_NAME="nix-update-${TIMESTAMP}"
+          git checkout master
 
-          # Create and checkout new branch
-          git checkout -b "${BRANCH_NAME}"
-
-          # Track if any packages were updated
           UPDATES_FOUND=false
           UPDATED_PACKAGES=""
 
-          # Check if specific package was requested
+          check_commit() {
+             [ "$1" != "$(git rev-parse HEAD)" ] && echo "true" || echo "false"
+          }
+
+          has_update_script() {
+             local pkg=$1
+             # Check if package has passthru.updateScript attribute
+             nix eval .#${pkg}.passthru.updateScript --json >/dev/null 2>&1
+          }
+
+          run_update() {
+              local pkg=$1
+              local before_hash=$(git rev-parse HEAD)
+
+              echo "::group::Updating $pkg"
+
+              local args=("--flake" "--commit" "--use-github-releases")
+
+              args+=("$pkg")
+
+             if nix-update "${args[@]}" 2>&1 | tee /tmp/update-${pkg}.log; then
+                if [ "$(check_commit "$before_hash")" = "true" ]; then
+                   echo "✅ Updated $pkg"
+                   echo "::endgroup::"
+                   return 0
+                fi
+             fi
+             echo "::endgroup::"
+
+             if ! grep -q "already up to date\|No new version found" /tmp/update-${pkg}.log; then
+                echo "⚠️ Update failed for $pkg"
+             fi
+             return 1
+          }
+
           if [ -n "${{ inputs.package }}" ]; then
-            echo "Updating specific package: ${{ inputs.package }}"
-            if [ -d "pkgs/${{ inputs.package }}" ]; then
-              if nix-update --flake --commit "${{ inputs.package }}" 2>&1 | tee /tmp/update.log; then
-                UPDATES_FOUND=true
-                UPDATED_PACKAGES="${{ inputs.package }}"
-                echo "✓ Updated ${{ inputs.package }}"
-              else
-                echo "ℹ️ Package ${{ inputs.package }} update failed or not needed"
-                cat /tmp/update.log
-              fi
+            pkg="${{ inputs.package }}"
+            if [ -d "pkgs/$pkg" ]; then
+               if run_update "$pkg"; then
+                  UPDATES_FOUND=true
+                  UPDATED_PACKAGES="$pkg"
+               fi
             else
-              echo "✗ Package directory pkgs/${{ inputs.package }} not found"
+               echo "❌ Package 'pkgs/$pkg' not found"
             fi
           else
-            echo "Checking all packages for updates..."
+            # Dynamically discover packages with updateScript attribute
+            echo "🔍 Discovering packages with passthru.updateScript..."
 
-            # Get list of package directories (exclude default.nix and AGENTS.md)
-            PACKAGES=$(find pkgs -mindepth 1 -maxdepth 1 -type d -not -name default.nix -not -name AGENTS.md -exec basename {} \; 2>/dev/null | sort)
+            # Get all packages and filter those with updateScript
+            ALL_PACKAGES=$(find pkgs -mindepth 1 -maxdepth 1 -type d -exec basename {} \; 2>/dev/null | sort)
+            UPDATABLE_PACKAGES=""
 
-            if [ -z "$PACKAGES" ]; then
-              echo "No packages found to update"
-              echo "has_updates=false" >> $GITHUB_OUTPUT
+            if [ -z "$ALL_PACKAGES" ]; then
+              echo "No packages found in pkgs/"
               exit 0
             fi
 
-            # Update each package
-            for pkg in $PACKAGES; do
-              echo ""
-              echo "━━━ Checking $pkg ━━━"
-              if nix-update --flake --commit "$pkg" 2>&1 | tee /tmp/update-${pkg}.log; then
-                UPDATES_FOUND=true
-                UPDATED_PACKAGES="${UPDATED_PACKAGES}, $pkg"
-                echo "✓ Updated $pkg"
+            for pkg in $ALL_PACKAGES; do
+              if has_update_script "$pkg"; then
+                echo "  ✓ $pkg (has updateScript)"
+                UPDATABLE_PACKAGES="$UPDATABLE_PACKAGES $pkg"
               else
-                # Check if it was actually an update or just "already up to date"
-                if grep -q "already up to date\|No new version found" /tmp/update-${pkg}.log; then
-                  echo "ℹ️ $pkg already up to date"
-                else
-                  echo "⚠️ Update check for $pkg failed:"
-                  cat /tmp/update-${pkg}.log
-                fi
+                echo "  ⊘ $pkg (no updateScript - skipping)"
               fi
             done
+
+            if [ -z "$UPDATABLE_PACKAGES" ]; then
+              echo "ℹ️ No packages with updateScript found."
+              exit 0
+            fi
+
+            echo ""
+            echo "📦 Found $(echo $UPDATABLE_PACKAGES | wc -w) updatable packages"
+            echo ""
+
+            # Parallel updates with 4 concurrent jobs
+            MAX_JOBS=4
+            JOB_COUNT=0
+            SUCCESS_LIST=()
+
+            for pkg in $UPDATABLE_PACKAGES; do
+              (run_update "$pkg" && echo "$pkg" >> /tmp/success.txt || true) &
+
+              JOB_COUNT=$((JOB_COUNT + 1))
+
+              # Wait if we hit max concurrent jobs
+              if [ $JOB_COUNT -ge $MAX_JOBS ]; then
+                wait
+                JOB_COUNT=0
+              fi
+            done
+
+            # Wait for remaining jobs
+            wait
+
+            # Parse results
+            if [ -f /tmp/success.txt ]; then
+              SUCCESS_LIST=$(cat /tmp/success.txt | tr '\n' ' ')
+              UPDATED_PACKAGES=$(echo "$SUCCESS_LIST" | sed 's/ /, /g' | sed 's/, $//')
+              UPDATES_FOUND=true
+            fi
+
+            rm -f /tmp/success.txt
           fi
 
-          # Remove trailing comma from package list
-          UPDATED_PACKAGES=$(echo "$UPDATED_PACKAGES" | sed 's/^, //')
+          COMMIT_COUNT=$(git rev-list --count origin/master..HEAD)
 
-          # Check if there are any changes
-          if [ "$UPDATES_FOUND" = "true" ]; then
-            echo ""
-            echo "━━━ Summary ━━━"
-            echo "✓ Package updates found: $UPDATED_PACKAGES"
+          if [ "$COMMIT_COUNT" -gt 0 ]; then
+            echo "✅ $COMMIT_COUNT updates committed locally."
             echo "has_updates=true" >> $GITHUB_OUTPUT
             echo "updated_packages=${UPDATED_PACKAGES}" >> $GITHUB_OUTPUT
-            echo "branch_name=${BRANCH_NAME}" >> $GITHUB_OUTPUT
-
-            # Check if there are actual git changes
-            if git diff-index --quiet HEAD --; then
-              echo "⚠️ No actual git changes detected despite nix-update success"
-              echo "has_updates=false" >> $GITHUB_OUTPUT
-            else
-              echo "✓ Git changes detected"
-              git status
-            fi
           else
-            echo ""
-            echo "━━━ Summary ━━━"
-            echo "ℹ️ No package updates found"
+            echo "ℹ️ No updates found."
             echo "has_updates=false" >> $GITHUB_OUTPUT
-            # Switch back to master if no updates
-            git checkout master
-            git branch -D "${BRANCH_NAME}" 2>/dev/null || true
           fi
 
-      - name: Verify packages build
-        if: steps.update.outputs.has_updates == 'true'
+      - name: Verify Builds
+        if: steps.update.outputs.has_updates == 'true' || steps.update-opencode.outputs.opencode_update == 'true'
         run: |
-          PACKAGES="${{ steps.update.outputs.updated_packages }}"
-          echo "Verifying builds for: $PACKAGES"
+          cd "$REPO_DIR"
 
-          # Parse comma-separated package list
-          IFS=', ' read -ra PKG_ARRAY <<< "$PACKAGES"
-          for pkg in "${PKG_ARRAY[@]}"; do
-            echo "━━━ Building $pkg ━━━"
-            if nix build .#$pkg; then
-              echo "✓ $pkg built successfully"
+          echo "::group::Running flake check"
+          if ! nix flake check; then
+            echo "❌ Flake check failed"
+            exit 1
+          fi
+          echo "✅ Flake check passed"
+          echo "::endgroup::"
+
+          IFS=', ' read -ra PKGS <<< "${{ steps.update.outputs.updated_packages }}"
+
+          FAILED_PACKAGES=()
+          SUCCESSFUL_PACKAGES=()
+
+          for pkg in "${PKGS[@]}"; do
+            echo "::group::Building $pkg"
+            if nix build .#$pkg 2>&1 | tee /tmp/build-${pkg}.log; then
+              echo "✅ Build successful for $pkg"
+              SUCCESSFUL_PACKAGES+=("$pkg")
             else
               echo "❌ Build failed for $pkg"
-              exit 1
+              FAILED_PACKAGES+=("$pkg")
             fi
+            echo "::endgroup::"
           done
 
-      - name: Push branch and create pull request
-        if: steps.update.outputs.has_updates == 'true'
+          if [ ${#FAILED_PACKAGES[@]} -gt 0 ]; then
+            echo ""
+            echo "❌ Failed packages: ${FAILED_PACKAGES[*]}"
+            echo "✅ Successful packages: ${SUCCESSFUL_PACKAGES[*]}"
+            echo ""
+
+            # Upload logs as artifacts for debugging
+            echo "## Build Failure Logs" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            for pkg in "${FAILED_PACKAGES[@]}"; do
+              echo "### $pkg" >> $GITHUB_STEP_SUMMARY
+              echo '```bash' >> $GITHUB_STEP_SUMMARY
+              cat /tmp/build-${pkg}.log >> $GITHUB_STEP_SUMMARY
+              echo '```' >> $GITHUB_STEP_SUMMARY
+            done
+
+            exit 1
+          fi
+
+          echo ""
+          echo "✅ All packages built successfully: ${SUCCESSFUL_PACKAGES[*]}"
+
+      - name: Push Changes
+        if: steps.update.outputs.has_updates == 'true' || steps.update-opencode.outputs.opencode_update == 'true'
         run: |
-          BRANCH="${{ steps.update.outputs.branch_name }}"
+          cd "$REPO_DIR"
           PACKAGES="${{ steps.update.outputs.updated_packages }}"
 
-          echo "Pushing branch ${BRANCH}..."
+          # Add opencode to packages list if it was updated
+          if [ "${{ steps.update-opencode.outputs.opencode_update }}" = "true" ]; then
+            if [ -n "$PACKAGES" ]; then
+              PACKAGES="$PACKAGES, opencode"
+            else
+              PACKAGES="opencode"
+            fi
+          fi
 
-          # Push the branch
-          git push origin "${BRANCH}" || (git fetch origin "${BRANCH}" 2>/dev/null && git push origin "${BRANCH}" --force)
+          echo "::group::Git Operations"
+          echo "Current commit: $(git rev-parse HEAD)"
+          echo "Pending commits: $(git rev-list --count origin/master..HEAD)"
 
-          echo "Creating pull request..."
+          echo ""
+          echo "Pulling latest changes (rebase)..."
+          if git pull --rebase origin master; then
+            echo "✅ Rebase successful"
+          else
+            echo "⚠️ Rebase failed, attempting force push..."
+            git reset --hard origin/master
+            git push --force-with-lease origin master
+            echo "✓ Force push completed"
+            exit 0
+          fi
 
-          # Create pull request using tea CLI
-          wget -q https://dl.gitea.com/tea/latest/tea-linux-amd64 -O /tmp/tea
-          chmod +x /tmp/tea
+          echo ""
+          echo "Pushing changes to master..."
+          git push origin master
 
-          # Get commit messages for PR description
-          COMMITS=$(git log origin/master..origin/"${BRANCH}" --pretty=format:"%h %s" | sed 's/^/- /')
+          echo ""
+          echo "✅ Successfully pushed updates for: $PACKAGES"
+          echo "::endgroup::"
 
-          # Create PR
-          /tmp/tea pr create \
-            --head "${BRANCH}" \
-            --base master \
-            --title "chore: update packages with nix-update" \
-            --body "Automated package updates using nix-update.\n\nUpdated packages:\n${PACKAGES}\n\nCommits:\n${COMMITS}" \
-            --assignees m3tam3re \
-            --labels automated-update || echo "Failed to create PR. Please create manually."
+      - name: Upload Build Logs
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-logs-${{ github.run_number }}
+          path: |
+            /tmp/update-*.log
+            /tmp/build-*.log
+            /tmp/opencode-build.log
+          retention-days: 7
 
-          echo "✓ Pull request created or branch pushed: ${BRANCH}"
+      - name: Cleanup
+        if: always()
+        run: |
+          # Remove git credentials securely
+          rm -f ~/.git-credentials
+          git config --global --unset credential.helper 2>/dev/null || true
+
+          # Remove temporary directory
+          rm -rf "$REPO_DIR"
+
+          # Remove all log files
+          rm -f /tmp/update-*.log /tmp/build-*.log /tmp/opencode-build.log /tmp/update-log.txt /tmp/success-packages.txt
+
+          # Clear sensitive environment variables
+          unset GIT_AUTHOR_EMAIL GIT_COMMITTER_EMAIL
 
       - name: Summary
         if: always()
         run: |
-          echo "━━━ Workflow Summary ━━━"
+          HAS_UPDATES="false"
+
           if [ "${{ steps.update.outputs.has_updates }}" = "true" ]; then
-            echo "✅ Successfully updated packages"
-            echo "Branch: ${{ steps.update.outputs.branch_name }}"
-            echo "Packages: ${{ steps.update.outputs.updated_packages }}"
-          else
-            echo "ℹ️ No package updates needed or found"
+            HAS_UPDATES="true"
+            echo "# ✅ Update Summary" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "## Updated Packages" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "\`${{ steps.update.outputs.updated_packages }}\`" >> $GITHUB_STEP_SUMMARY
+          fi
+
+          if [ "${{ steps.update-opencode.outputs.opencode_update }}" = "true" ]; then
+            HAS_UPDATES="true"
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "## Updated Flake Input" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "- **opencode**: \`v${{ steps.update-opencode.outputs.opencode_version }}\`" >> $GITHUB_STEP_SUMMARY
+          fi
+
+          if [ "$HAS_UPDATES" = "true" ]; then
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "## Status" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "- ✅ All updates validated with \`nix flake check\`" >> $GITHUB_STEP_SUMMARY
+            echo "- ✅ All builds successful" >> $GITHUB_STEP_SUMMARY
+            echo "- ✅ Changes pushed to master" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "## Workflow Performance" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "- Started: ${{ github.event.head_commit.timestamp }}" >> $GITHUB_STEP_SUMMARY
+            echo "- Completed: $(date -u +'%Y-%m-%d %H:%M:%S UTC')" >> $GITHUB_STEP_SUMMARY
+            echo "- Workflow Run: [#${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY
+          else
+            echo "# ℹ️ No Updates Required" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "No updates found this run. All packages and flake inputs are up to date." >> $GITHUB_STEP_SUMMARY
           fi

flake.lock

@@ -16,9 +16,45 @@
         "type": "github"
       }
     },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1768393167,
+        "narHash": "sha256-n2063BRjHde6DqAz2zavhOOiLUwA3qXt7jQYHyETjX8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "2f594d5af95d4fdac67fba60376ec11e482041cb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "opencode": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1769153255,
+        "narHash": "sha256-ardM8zEJWvTvsFMQZWivjGPB2uIqFw6QPAzrRjAHQKY=",
+        "owner": "anomalyco",
+        "repo": "opencode",
+        "rev": "c130dd425a32fe1c1cd3747ea6565b0e6bf50100",
+        "type": "github"
+      },
+      "original": {
+        "owner": "anomalyco",
+        "ref": "v1.1.34",
+        "repo": "opencode",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": "nixpkgs",
+        "opencode": "opencode"
       }
     }
   },

flake.nix

@@ -3,6 +3,7 @@
 
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    opencode.url = "github:anomalyco/opencode/v1.1.34";
 
     # Optional: Add stable channel if needed
     # nixpkgs-stable.url = "github:NixOS/nixpkgs/nixos-24.05";
@@ -36,18 +37,24 @@
       system: let
         pkgs = pkgsFor system;
       in
-        import ./pkgs {inherit pkgs;}
+        import ./pkgs {inherit pkgs inputs;}
     );
 
     # Overlays - can be imported in your system configuration
     overlays = {
       # Default overlay: adds all custom packages
       default = final: prev:
-        import ./pkgs {pkgs = final;};
+        import ./pkgs {
+          pkgs = final;
+          inputs = inputs;
+        };
 
       # Individual overlays for more granular control
       additions = final: prev:
-        import ./pkgs {pkgs = final;};
+        import ./pkgs {
+          pkgs = final;
+          inputs = inputs;
+        };
 
       modifications = final: prev:
         import ./overlays/mods {inherit prev;};

overlays/mods/default.nix

@@ -3,7 +3,6 @@
   # This overlay contains package overrides and modifications
 
   # n8n = import ./n8n.nix {inherit prev;};
-  # opencode = import ./opencode.nix {inherit prev;};
   # beads = import ./beads.nix {inherit prev;};
 
   # Add more modifications here as needed

overlays/mods/opencode.nix

@@ -1,16 +0,0 @@
-{prev}:
-prev.opencode.overrideAttrs (oldAttrs: rec {
-  version = "1.1.18";
-
-  src = prev.fetchFromGitHub {
-    owner = "anomalyco";
-    repo = "opencode";
-    tag = "v${version}";
-    hash = "sha256-3A4s0FpjZuGB0HGMQVBXfWq+0yHmeIvnEQTSX3amV4I=";
-  };
-
-  node_modules = oldAttrs.node_modules.overrideAttrs (old: {
-    inherit version src;
-    outputHash = "sha256-zSco4ORQQOqV3vMPuP+M/q/hBa+MJGnTKIlxgngMA3g=";
-  });
-})

pkgs/beads/default.nix

@@ -5,21 +5,22 @@
   fetchFromGitHub,
   gitMinimal,
   installShellFiles,
+  nix-update-script,
   versionCheckHook,
   writableTmpDirAsHomeHook,
 }:
 buildGoModule (finalAttrs: {
   pname = "beads";
-  version = "0.47.1";
+  version = "0.49.0";
 
   src = fetchFromGitHub {
     owner = "steveyegge";
     repo = "beads";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-DwIR/r1TJnpVd/CT1E2OTkAjU7k9/KHbcVwg5zziFVg=";
+    hash = "sha256-m0gVLeWfFeaWZpARuXgP00npmZcO7XCm7mXWA52bqTc=";
   };
 
-  vendorHash = "sha256-pY5m5ODRgqghyELRwwxOr+xlW41gtJWLXaW53GlLaFw=";
+  vendorHash = "sha256-YU+bRLVlWtHzJ1QPzcKJ70f+ynp8lMoIeFlm+29BNPE=";
 
   subPackages = ["cmd/bd"];
 
@@ -49,9 +50,10 @@ buildGoModule (finalAttrs: {
   versionCheckProgramArg = "version";
   doInstallCheck = true;
 
-  # Tests require git worktree operations that fail in Nix sandbox
   doCheck = false;
 
+  passthru.updateScript = nix-update-script {};
+
   meta = {
     description = "Lightweight memory system for AI coding agents with graph-based issue tracking";
     homepage = "https://github.com/steveyegge/beads";

pkgs/code2prompt/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   fetchFromGitHub,
+  nix-update-script,
   rustPlatform,
   pkg-config,
   perl,
@@ -27,6 +28,8 @@ rustPlatform.buildRustPackage rec {
 
   buildInputs = [openssl];
 
+  passthru.updateScript = nix-update-script {};
+
   meta = with lib; {
     description = "A CLI tool that converts your codebase into a single LLM prompt with a source tree, prompt templating, and token counting";
     homepage = "https://github.com/mufeedvh/code2prompt";

pkgs/default.nix

@@ -1,17 +1,20 @@
-{pkgs, ...}: {
+{ pkgs, inputs ? null, ... }: {
   # Custom packages registry
   # Each package is defined in its own directory under pkgs/
-  beads = pkgs.callPackage ./beads {};
-  code2prompt = pkgs.callPackage ./code2prompt {};
-  hyprpaper-random = pkgs.callPackage ./hyprpaper-random {};
-  launch-webapp = pkgs.callPackage ./launch-webapp {};
-  mem0 = pkgs.callPackage ./mem0 {};
-  msty-studio = pkgs.callPackage ./msty-studio {};
-  n8n = pkgs.callPackage ./n8n {};
-  opencode = pkgs.callPackage ./opencode {};
-  pomodoro-timer = pkgs.callPackage ./pomodoro-timer {};
-  rofi-project-opener = pkgs.callPackage ./rofi-project-opener {};
-  stt-ptt = pkgs.callPackage ./stt-ptt {};
-  tuxedo-backlight = pkgs.callPackage ./tuxedo-backlight {};
-  zellij-ps = pkgs.callPackage ./zellij-ps {};
+  beads = pkgs.callPackage ./beads { };
+  code2prompt = pkgs.callPackage ./code2prompt { };
+  hyprpaper-random = pkgs.callPackage ./hyprpaper-random { };
+  launch-webapp = pkgs.callPackage ./launch-webapp { };
+  mem0 = pkgs.callPackage ./mem0 { };
+  msty-studio = pkgs.callPackage ./msty-studio { };
+  n8n = pkgs.callPackage ./n8n { };
+  pomodoro-timer = pkgs.callPackage ./pomodoro-timer { };
+  rofi-project-opener = pkgs.callPackage ./rofi-project-opener { };
+  stt-ptt = pkgs.callPackage ./stt-ptt { };
+  tuxedo-backlight = pkgs.callPackage ./tuxedo-backlight { };
+  zellij-ps = pkgs.callPackage ./zellij-ps { };
+
+  # Imported from flake inputs
+  opencode = inputs.opencode.packages.${pkgs.system}.opencode;
+  opencode-desktop = pkgs.callPackage ./opencode-desktop { inherit inputs; };
 }

pkgs/mem0/default.nix

@@ -1,18 +1,19 @@
 {
   lib,
+  nix-update-script,
   python3,
   fetchFromGitHub,
 }:
 python3.pkgs.buildPythonPackage rec {
   pname = "mem0ai";
-  version = "1.0.0";
+  version = "1.0.2";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "mem0ai";
     repo = "mem0";
     rev = "v${version}";
-    hash = "sha256-DluzIhwL/GanqtRSMW7ax+OVc2kZjbwQ0lpPCQFnD58=";
+    hash = "sha256-wvIPmqYlpto+ggifdSOjveEmSneKeZcoltItusYSu4Q=";
   };
 
   # Relax Python dependency version constraints
@@ -80,6 +81,8 @@ python3.pkgs.buildPythonPackage rec {
     install -Dm755 ${./server.py} $out/bin/mem0-server
   '';
 
+  passthru.updateScript = nix-update-script {};
+
   meta = with lib; {
     description = "Long-term memory layer for AI agents with REST API support";
     longDescription = ''

pkgs/n8n/default.nix

@@ -18,20 +18,20 @@
 }:
 stdenv.mkDerivation (finalAttrs: {
   pname = "n8n";
-  version = "2.4.1";
+  version = "n8n@2.4.5";
 
   src = fetchFromGitHub {
     owner = "n8n-io";
     repo = "n8n";
-    tag = "n8n@${finalAttrs.version}";
-    hash = "sha256-EQP9ZI8kt30SUYE1+/UUpxQXpavzKqDu8qE24zsNifg=";
+    tag = finalAttrs.version;
+    hash = "sha256-ZUO1FwagxLiTbn1I11MshxT3bEppBM0HqaUQFxdJy/o=";
   };
 
   pnpmDeps = fetchPnpmDeps {
     inherit (finalAttrs) pname version src;
     pnpm = pnpm_10;
     fetcherVersion = 3;
-    hash = "sha256-Q30IuFEQD3896Hg0HCLd38YE2i8fJn74JY0o95LKJis=";
+    hash = "sha256-QtusZm9WaLMjfopsX4t2WiiU++j3V/PQHbelKubhMII=";
   };
 
   nativeBuildInputs =

pkgs/n8n/update.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env nix-shell
+#!nix-shell --pure -i bash -p bash curl jq nix-update cacert git
+set -euo pipefail
+
+new_version="$(curl -s "https://api.github.com/repos/n8n-io/n8n/releases/latest" | jq --raw-output '.tag_name | ltrimstr("n8n@")')"
+nix-update n8n --version "$new_version"

pkgs/opencode-desktop/default.nix

@@ -0,0 +1,23 @@
+{ lib, stdenv, symlinkJoin, makeWrapper, inputs ? null, }:
+let
+  opencode-desktop =
+    inputs.opencode.packages.${stdenv.hostPlatform.system}.desktop;
+in symlinkJoin {
+  name = "opencode-desktop";
+  paths = [ opencode-desktop ];
+
+  nativeBuildInputs = [ makeWrapper ];
+
+  postBuild = ''
+    wrapProgram $out/bin/opencode-desktop \
+      --run 'if [[ "$NIXOS_OZONE_WL" == "1" ]]; then export OC_ALLOW_WAYLAND=1; fi'
+  '';
+
+  meta = {
+    description = "OpenCode Desktop App with Wayland support";
+    homepage = "https://opencode.ai";
+    license = lib.licenses.mit;
+    platforms = lib.platforms.linux;
+    mainProgram = "opencode-desktop";
+  };
+}

pkgs/opencode/default.nix

@@ -1,222 +0,0 @@
-{
-  lib,
-  stdenvNoCC,
-  bun,
-  fetchFromGitHub,
-  fzf,
-  makeBinaryWrapper,
-  models-dev,
-  nix-update-script,
-  ripgrep,
-  testers,
-  installShellFiles,
-  writableTmpDirAsHomeHook,
-}: let
-  pname = "opencode";
-  version = "1.1.18";
-  src = fetchFromGitHub {
-    owner = "anomalyco";
-    repo = "opencode";
-    tag = "v${version}";
-    hash = "sha256-3A4s0FpjZuGB0HGMQVBXfWq+0yHmeIvnEQTSX3amV4I=";
-  };
-
-  node_modules = stdenvNoCC.mkDerivation {
-    pname = "${pname}-node_modules";
-    inherit version src;
-
-    impureEnvVars =
-      lib.fetchers.proxyImpureEnvVars
-      ++ ["GIT_PROXY_COMMAND" "SOCKS_SERVER"];
-
-    nativeBuildInputs = [bun writableTmpDirAsHomeHook];
-
-    dontConfigure = true;
-
-    buildPhase = ''
-      runHook preBuild
-
-      export BUN_INSTALL_CACHE_DIR=$(mktemp -d)
-
-      bun install \
-        --cpu="*" \
-        --filter=./packages/opencode \
-        --force \
-        --frozen-lockfile \
-        --ignore-scripts \
-        --no-progress \
-        --os="*" \
-        --production
-
-      bun run ./nix/scripts/canonicalize-node-modules.ts
-      bun run ./nix/scripts/normalize-bun-binaries.ts
-
-      runHook postBuild
-    '';
-
-    installPhase = ''
-      runHook preInstall
-
-      mkdir -p $out
-      find . -type d -name node_modules -exec cp -R --parents {} $out \;
-
-      runHook postInstall
-    '';
-
-    # NOTE: Required else we get errors that our fixed-output derivation references store paths
-    dontFixup = true;
-
-    outputHash = "sha256-zSco4ORQQOqV3vMPuP+M/q/hBa+MJGnTKIlxgngMA3g=";
-    outputHashAlgo = "sha256";
-    outputHashMode = "recursive";
-  };
-in
-  stdenvNoCC.mkDerivation (finalAttrs: {
-    inherit pname version src node_modules;
-
-    nativeBuildInputs = [
-      bun
-      installShellFiles
-      makeBinaryWrapper
-      models-dev
-      writableTmpDirAsHomeHook
-    ];
-
-    patches = [
-      # NOTE: Relax Bun version check to be a warning instead of an error
-      ./relax-bun-version-check.patch
-    ];
-
-    dontConfigure = true;
-
-    env.MODELS_DEV_API_JSON = "${models-dev}/dist/_api.json";
-    env.OPENCODE_VERSION = finalAttrs.version;
-    env.OPENCODE_CHANNEL = "stable";
-
-    buildPhase = ''
-      runHook preBuild
-
-      # Copy all node_modules including the .bun directory with actual packages
-      cp -r ${finalAttrs.node_modules}/node_modules .
-      cp -r ${finalAttrs.node_modules}/packages .
-
-      (
-        cd packages/opencode
-
-        # Fix symlinks to workspace packages
-        chmod -R u+w ./node_modules
-        mkdir -p ./node_modules/@opencode-ai
-        rm -f ./node_modules/@opencode-ai/{script,sdk,plugin}
-        ln -s $(pwd)/../../packages/script ./node_modules/@opencode-ai/script
-        ln -s $(pwd)/../../packages/sdk/js ./node_modules/@opencode-ai/sdk
-        ln -s $(pwd)/../../packages/plugin ./node_modules/@opencode-ai/plugin
-
-        # Use upstream bundle.ts for Nix-compatible bundling
-        cp ../../nix/bundle.ts ./bundle.ts
-        chmod +x ./bundle.ts
-        bun run ./bundle.ts
-      )
-
-      runHook postBuild
-    '';
-
-    installPhase = ''
-      runHook preInstall
-
-      cd packages/opencode
-      if [ ! -d dist ]; then
-        echo "ERROR: dist directory missing after bundle step"
-        exit 1
-      fi
-
-      mkdir -p $out/lib/opencode
-      cp -r dist $out/lib/opencode/
-      chmod -R u+w $out/lib/opencode/dist
-
-      # Select bundled worker assets deterministically (sorted find output)
-      worker_file=$(find "$out/lib/opencode/dist" -type f \( -path '*/tui/worker.*' -o -name 'worker.*' \) | sort | head -n1)
-      parser_worker_file=$(find "$out/lib/opencode/dist" -type f -name 'parser.worker.*' | sort | head -n1)
-      if [ -z "$worker_file" ]; then
-        echo "ERROR: bundled worker not found"
-        exit 1
-      fi
-
-      main_wasm=$(printf '%s\n' "$out"/lib/opencode/dist/tree-sitter-*.wasm | sort | head -n1)
-      wasm_list=$(find "$out/lib/opencode/dist" -maxdepth 1 -name 'tree-sitter-*.wasm' -print)
-      for patch_file in "$worker_file" "$parser_worker_file"; do
-        [ -z "$patch_file" ] && continue
-        [ ! -f "$patch_file" ] && continue
-        if [ -n "$wasm_list" ] && grep -q 'tree-sitter' "$patch_file"; then
-          # Rewrite wasm references to absolute store paths to avoid runtime resolve failures.
-          bun --bun ../../nix/scripts/patch-wasm.ts "$patch_file" "$main_wasm" $wasm_list
-        fi
-      done
-
-      mkdir -p $out/lib/opencode/node_modules
-      cp -r ../../node_modules/.bun $out/lib/opencode/node_modules/
-      mkdir -p $out/lib/opencode/node_modules/@opentui
-
-      # Generate and install JSON schema
-      mkdir -p $out/share/opencode
-      HOME=$TMPDIR bun --bun script/schema.ts $out/share/opencode/schema.json
-
-      mkdir -p $out/bin
-      makeWrapper ${lib.getExe bun} $out/bin/opencode \
-        --add-flags "run" \
-        --add-flags "$out/lib/opencode/dist/src/index.js" \
-        --prefix PATH : ${lib.makeBinPath [fzf ripgrep]} \
-        --argv0 opencode
-
-      runHook postInstall
-    '';
-
-    postInstall = ''
-      # Add symlinks for platform-specific native modules
-      pkgs=(
-        $out/lib/opencode/node_modules/.bun/@opentui+core-*
-        $out/lib/opencode/node_modules/.bun/@opentui+solid-*
-        $out/lib/opencode/node_modules/.bun/@opentui+core@*
-        $out/lib/opencode/node_modules/.bun/@opentui+solid@*
-      )
-      for pkg in "''${pkgs[@]}"; do
-        if [ -d "$pkg" ]; then
-          pkgName=$(basename "$pkg" | sed 's/@opentui+\([^@]*\)@.*/\1/')
-          ln -sf ../.bun/$(basename "$pkg")/node_modules/@opentui/$pkgName \
-            $out/lib/opencode/node_modules/@opentui/$pkgName
-        fi
-      done
-
-      ${lib.optionalString
-        ((stdenvNoCC.buildPlatform.canExecute stdenvNoCC.hostPlatform)
-          && (stdenvNoCC.hostPlatform.system != "x86_64-darwin")) ''
-          installShellCompletion --cmd opencode \
-            --bash <($out/bin/opencode completion)
-        ''}
-    '';
-
-    passthru = {
-      jsonschema = "${placeholder "out"}/share/opencode/schema.json";
-      tests.version = testers.testVersion {
-        package = finalAttrs.finalPackage;
-        command = "HOME=$(mktemp -d) opencode --version";
-        inherit (finalAttrs) version;
-      };
-      updateScript =
-        nix-update-script {extraArgs = ["--subpackage" "node_modules"];};
-    };
-
-    meta = {
-      description = "AI coding agent built for the terminal";
-      longDescription = ''
-        OpenCode is a terminal-based agent that can build anything.
-        It combines a TypeScript/JavaScript core with a Go-based TUI
-        to provide an interactive AI coding experience.
-      '';
-      homepage = "https://github.com/anomalyco/opencode";
-      license = lib.licenses.mit;
-      maintainers = with lib.maintainers; [delafthi];
-      sourceProvenance = with lib.sourceTypes; [fromSource];
-      platforms = ["aarch64-linux" "x86_64-linux" "aarch64-darwin" "x86_64-darwin"];
-      mainProgram = "opencode";
-    };
-  })

pkgs/opencode/relax-bun-version-check.patch

@@ -1,28 +0,0 @@
-From 0e07ea8225f5667e39c6aa59eea726266f0afab0 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
-Date: Thu, 13 Nov 2025 10:16:31 +0100
-Subject: [PATCH] Change Bun version check from error to warning
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Signed-off-by: Jörg Thalheim <joerg@thalheim.io>
----
- packages/script/src/index.ts | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/packages/script/src/index.ts b/packages/script/src/index.ts
-index 141d2b75..de06d0dc 100644
---- a/packages/script/src/index.ts
-+++ b/packages/script/src/index.ts
-@@ -10,7 +10,7 @@ if (!expectedBunVersion) {
- }
- 
- if (process.versions.bun !== expectedBunVersion) {
--  throw new Error(`This script requires bun@${expectedBunVersion}, but you are using bun@${process.versions.bun}`)
-+  console.warn(`Warning: This script expects bun@${expectedBunVersion}, but you are using bun@${process.versions.bun}`)
- }
- 
- const CHANNEL = process.env["OPENCODE_CHANNEL"] ?? (await $`git branch --show-current`.text().then((x) => x.trim()))
--- 
-2.51.0