From 194fbd42813e981d761362cb83315744aae59edd Mon Sep 17 00:00:00 2001
From: LGUG2Z <LGUG2Z@fastmail.com>
Date: Thu, 5 Nov 2026 16:29:14 -0800
Subject: [PATCH] build(nix): a hygiene dev shell with the pinned tools of the
 first CI stage

devShells.hygiene is the toolchain with the nightly rustfmt, cargo-deny, shellcheck, actionlint, jq,
ripgrep and git, without the Windows SDK, the VM tooling and the rest of the full shell, so that the
first stage sets up in seconds and a local `nix develop .#hygiene` runs what CI runs.
---
 nix/common.nix | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/nix/common.nix b/nix/common.nix
index d2e2072c..4e4e1870 100644
--- a/nix/common.nix
+++ b/nix/common.nix
@@ -212,6 +212,22 @@ in
           name = "komorebi-native";
           cross = false;
         };
+        # What the first stage of CI runs (.github/workflows/ci.yaml: hygiene, fmt, deny) and nothing more:
+        # the versions the flake pins, without the Windows SDK, the VM tooling and the rest of the full shell,
+        # so that the checks of that stage take seconds to set up and a local `nix develop .#hygiene` runs
+        # the same tools as CI does.
+        hygiene = pkgs.mkShell {
+          name = "komorebi-hygiene";
+          packages = [
+            rustToolchainWithNightlyRustfmt
+            pkgs.actionlint
+            pkgs.cargo-deny
+            pkgs.git
+            pkgs.jq
+            pkgs.ripgrep
+            pkgs.shellcheck
+          ];
+        };
       };
 
       # the two checks of these modules are members of the set `fmt` (nix/checks.nix), which adds them