From 99b0208a2acd93b0a64013b4d439d363d568521a Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Tue, 3 Nov 2026 23:46:34 +0800
Subject: [PATCH] fix(aquamarine): persist raft state

Preserve ~/.raft across reboots so Raft Computer keeps its enrollment, machine identity, agent state and app data. ~/.local/bin and ~/.config/gh were already persisted.

Assisted-by: DeepSeek Harness (deepseek-flash)
---
 hosts/idols-aquamarine/preservation.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hosts/idols-aquamarine/preservation.nix b/hosts/idols-aquamarine/preservation.nix
index d870b9df..7ccaff97 100644
--- a/hosts/idols-aquamarine/preservation.nix
+++ b/hosts/idols-aquamarine/preservation.nix
@@ -103,6 +103,13 @@ in
         ".config/opencode"
         ".local/share/opencode"
         ".local/state/opencode"
+        # Raft Computer state: server enrollment keys, agent state, traces,
+        # app storage and the installer's runtime cache. The installer itself
+        # is ~/.local/bin/raft-computer, covered by the .local/bin entry below.
+        {
+          directory = ".raft";
+          mode = "0700";
+        }
         # ctx7 docs lookup login
         {
           directory = ".config/context7";
@@ -138,6 +145,9 @@ in
           directory = ".config/gcloud";
           mode = "0700";
         }
+        # GitHub CLI config, including the plaintext OAuth token in
+        # hosts.yml (0600) by explicit choice for this non-primary account.
+        # Only aqua is authorized; kana/ruby remain logged out.
         {
           directory = ".config/gh";
           mode = "0700";