starred/nix-config-ryan4yin
1
0 Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:36 +01:00
Code Issues Packages Projects Releases 10 Wiki Activity

refactor(agents): pin global skills and trim always-loaded context (#427)

Browse Source 
* feat(agents): pin global skills as flake inputs
* refactor(agents): trim always-loaded agent context
This commit is contained in:
ryan4yin | 二花 authored and GitHub committed 2026-10-10 12:16:56 +08:00
1 parent 0d7c4d7cc1
commit 9d69832ff7
14 files changed
+426 -194
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.agents/skills/nix-config-debug/SKILL.md
+33 -21
View File
@@ -8,9 +8,10 @@ description: >-
# Debugging this repository
Follow the global `systematic-debugging` skill for the process (root cause before any fix). This
skill is only the map: which layer failed, and where to look. Rolling back, isolating a bad input
bump, and the commands that destroy rollback points are in the `nix-config-update` skill.
Follow the global `diagnosing-bugs` skill for the process (a reproducible signal and root cause
before any fix). This skill is only the map: which layer failed, and where to look. Rolling back,
isolating a bad input bump, and the commands that destroy rollback points are in the
`nix-config-update` skill.
## Core rules
@@ -18,27 +19,38 @@ bump, and the commands that destroy rollback points are in the `nix-config-updat
investigation. Rolling back the machine you are on needs `sudo`, so the user does it.
2. **Name the layer before touching code.** Eval, build, activation, and runtime failures have
different causes; a green `just test` says nothing about activation.
3. **Never get to green by weakening a check**: no disabled test, dropped assertion, or `mkForce`
over the failing value.
4. **Preserve existing user changes.** Do not discard or stash them without authorization. If a
clean baseline is needed, record the current diff and ask before isolating it.
## 1. Localize by layer
| Layer | Symptom | Look with |
| ------------- | ---------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| eval | `just test` fails, an eval error | `just eval-host <host>` (already passes `--show-trace`) |
| build | build error, hash mismatch, "marked as broken" | `just build-host <host>`, then `nix log <drv>` |
| activation | the deploy fails after building | the deploy output; `journalctl -u home-manager-$USER -b` for Home Manager |
| runtime | a unit is failed or restarting | `just list-failed`, `systemctl status <unit>`, `journalctl -u <unit> -b` |
| proxy/DNS | proxied sites time out, or DNS still resolves after mihomo stops | `dig +short <site>` must return a fake-ip (`198.18.x.x`); a real IP means the resolver bypasses `dns-hijack`; on `ai` the `resolvectl dns`/`revert` hook in `hosts/idols-ai/default.nix` ties link DNS to mihomo's lifecycle and other mihomo hosts have no such hook, so read `resolvectl status` before concluding; a statically set link DNS would outlive a dead mihomo. Config and gotchas: [mihomo README](../../../modules/nixos/desktop/networking/mihomo/README.md); regenerate with `just mihomo-gen`, then restart `mihomo.service` |
| boot | errors at boot, wrong kernel | `journalctl -b -p err`; `just history` for what is booted |
| session | desktop or app misbehaves | `journalctl --user -b -p err`; the `nix-config-desktop` skill |
| remote host | anything on a Colmena host | `ssh root@<host> journalctl -b -p err`, same commands over SSH |
| MicroVM guest | guest down or unreachable | on the VM host: `systemctl status microvm@<guest>` and `microvm-tap-interfaces@<guest>`; then `br0` |
| secrets | missing or unreadable `/run/agenix/<name>` | the `nix-config-secrets` skill |
| shell | nushell exits 1 with `File not found` | whether `~/.secrets/` exists on the host; the `nix-config-secrets` skill |
| CI | a GitHub Action keeps failing | `gh run list --workflow <wf>`, `gh run view <run> --log-failed` |
Each layer: symptom, then where to look.
- **eval** (`just test` fails, an eval error): `just eval-host <host>` (already passes
`--show-trace`)
- **build** (build error, hash mismatch, "marked as broken"): `just build-host <host>`, then
`nix log <drv>`
- **activation** (the deploy fails after building): the deploy output;
`journalctl -u home-manager-$USER -b` for Home Manager
- **runtime** (a unit is failed or restarting): `just list-failed`, `systemctl status <unit>`,
`journalctl -u <unit> -b`
- **proxy/DNS** (proxied sites time out, or DNS still resolves after mihomo stops):
`dig +short <site>` must return a fake-ip (`198.18.x.x`); a real IP means the resolver bypasses
`dns-hijack`; on `ai` the `resolvectl dns`/`revert` hook in `hosts/idols-ai/default.nix` ties link
DNS to mihomo's lifecycle and other mihomo hosts have no such hook, so read `resolvectl status`
before concluding; a statically set link DNS would outlive a dead mihomo. Config and gotchas:
[mihomo README](../../../modules/nixos/desktop/networking/mihomo/README.md); regenerate with
`just mihomo-gen`, then restart `mihomo.service`
- **boot** (errors at boot, wrong kernel): `journalctl -b -p err`; `just history` for what is booted
- **session** (desktop or app misbehaves): `journalctl --user -b -p err`; the `nix-config-desktop`
skill
- **remote host** (anything on a Colmena host): `ssh root@<host> journalctl -b -p err`, same
commands over SSH
- **MicroVM guest** (guest down or unreachable): on the VM host: `systemctl status microvm@<guest>`
and `microvm-tap-interfaces@<guest>`; then `br0`
- **secrets** (missing or unreadable `/run/agenix/<name>`): the `nix-config-secrets` skill
- **shell** (nushell exits 1 with `File not found`): whether `~/.secrets/` exists on the host; the
`nix-config-secrets` skill
- **CI** (a GitHub Action keeps failing): `gh run list --workflow <wf>`,
`gh run view <run> --log-failed`
## 2. Read the evaluated value
.agents/skills/nix-config-desktop/SKILL.md
+21 -14
View File
@@ -36,20 +36,27 @@ back with git, and needs no rebuild. Only the store layer needs one.
## 1. Pick the layer
| Change | Where it lives | Applies |
| --------------------------------------------- | ----------------------------------------------------------------------------------------------------------- | ------------------------ |
| Niri compositor (binds, layout, window rules) | `home/linux/gui/niri/conf/*.kdl` | live |
| Niri per-host outputs | `hosts/<dir>/niri-hardware.kdl` | live |
| Noctalia shared baseline | `home/linux/gui/base/noctalia/config/config.toml` | live |
| Noctalia per-host override | `home/hosts/linux/<dir>/noctalia.toml` (`host-<host>.toml`) | store: needs `just niri` |
| Noctalia value saved by the Settings UI | `~/.local/state/noctalia/settings.toml` (not in the repo) | live, wins over the rest |
| Mozc dictionary | `home/linux/gui/base/fcitx5/mozc-config1.db` | live |
| fcitx5 profile and addons | `home/linux/gui/base/fcitx5/` | store: needs `just niri` |
| vinput (voice input) | `home/linux/gui/base/vinput/` (tag-pinned: the `fcitx5-vinput` row in WORKAROUNDS.md §Pins) | store: needs `just niri` |
| Interface a net-speed widget reads | `home/hosts/linux/<dir>/noctalia.toml` (`[widget.net_rx]`/`[widget.net_tx]` `interface`) | store: needs `just niri` |
| `$HOME` state that must survive | `hosts/<dir>/preservation.nix` (tmpfs root; `12kingdoms-shoukei` imports `hosts/idols-ai/preservation.nix`) | store: needs `just niri` |
| Theme (catppuccin), fonts | `home/base/core/theme.nix`, `modules/nixos/desktop/fonts.nix` | store: needs `just niri` |
| Session, portal, and systemd wiring | `modules/nixos/desktop/**`, `home/linux/gui/base/xdg/` | store: needs `just niri` |
Live (out-of-store, applies on save):
- Niri compositor (binds, layout, window rules): `home/linux/gui/niri/conf/*.kdl`
- Niri per-host outputs: `hosts/<dir>/niri-hardware.kdl`
- Noctalia shared baseline: `home/linux/gui/base/noctalia/config/config.toml`
- Mozc dictionary: `home/linux/gui/base/fcitx5/mozc-config1.db`
- Noctalia value saved by the Settings UI: `~/.local/state/noctalia/settings.toml` (not in the repo;
wins over the rest)
Store (needs the user to run `just niri`):
- Noctalia per-host override: `home/hosts/linux/<dir>/noctalia.toml` (`host-<host>.toml`)
- fcitx5 profile and addons: `home/linux/gui/base/fcitx5/`
- vinput (voice input): `home/linux/gui/base/vinput/` (tag-pinned: the `fcitx5-vinput` row in
WORKAROUNDS.md §Pins)
- Interface a net-speed widget reads: `home/hosts/linux/<dir>/noctalia.toml`
(`[widget.net_rx]`/`[widget.net_tx]` `interface`)
- `$HOME` state that must survive: `hosts/<dir>/preservation.nix` (tmpfs root; `12kingdoms-shoukei`
imports `hosts/idols-ai/preservation.nix`)
- Theme (catppuccin), fonts: `home/base/core/theme.nix`, `modules/nixos/desktop/fonts.nix`
- Session, portal, and systemd wiring: `modules/nixos/desktop/**`, `home/linux/gui/base/xdg/`
Noctalia's merge order and `[include]` are in
[home/linux/gui/base/README.md](../../../home/linux/gui/base/README.md). A per-host difference goes