fix(theme): keep the catppuccin starship port build across gc (#468)

Assisted-by: DeepSeek Harness (deepseek-flash)

WORKAROUNDS.md

@@ -49,6 +49,7 @@ A setting that works around a bug or a hardware quirk.
 | WA-030 | mihomo unit sets `SKIP_SYSTEM_IPV6_CHECK=1` — `modules/nixos/desktop/networking/mihomo/default.nix`                                                                 | mihomo checks at startup whether another NIC already holds an IPv6 address and, finding none, skips the TUN's v6 half -- but `strict-route` still installs its v6 blackhole (`ip -6 rule add priority 9000 unreachable`). On a cold boot that rule lands before networkd's Router Solicitation is answered, so the host can never send RS/NS, never gets a GUA, and mihomo never re-checks: self-locking until the core restarts. The env var forces the TUN v6 address up, which installs mihomo's normal v6 rules whose `lookup main suppress_prefixlength 0` keeps on-link neighbor discovery and the RA default route off the TUN | Drop once mihomo either re-runs the IPv6 check or skips the v6 strict-route blackhole when the v6 TUN is disabled                                                                                                                                       | 2026-10-10 | on a mihomo bump                                                                                    | active |
 | WA-031 | `iommu=pt` kernel parameter — `hosts/idols-aquamarine/hardware-amd-gpu.nix`                                                                                         | ROCm's system requirements warn that multi-GPU systems may need IOMMU passthrough to prevent application hangs, and this host has two Radeon AI PRO R9700 cards. Added before the first inference run; not yet observed on gfx1201.                                                                                                                                                                                                                                                                                                                                                                                                   | Drop once a ROCm release states that the default IOMMU mode is safe for multi-GPU gfx1201, or when the host runs a single GPU                                                                                                                           | 2026-10-13 | on a ROCm bump, or on the first hang report                                                         | active |
 | WA-032 | `amdgpu.runpm=0` kernel parameter — `hosts/idols-aquamarine/hardware-amd-gpu.nix`                                                                                   | this board's DSDT advertises ATPX power control (`\_SB.PC00.GFX0.ATPX`) but never defines the `PEG0.PEGP._OFF`/`_ON` symbols its body calls, so the first idle resume of the headless R9700 leaves it in `runtime_status = error` (`resume of IP block <smu> failed -62`) until reboot, and amdgpu discards the ACPI error. Root cause, kernel-source trail and the measured field comparison: `hosts/idols-aquamarine/ROCM.md`.                                                                                                                                                                                                      | Drop once a BIOS update defines those ACPI methods (upstream releases 1023/1066 exist for this board; a flash changes PCR7, so re-enroll TPM2), or a kernel release stops trusting ATPX when its power methods are missing                              | 2026-10-14 | on a BIOS update or kernel bump                                                                     | active |
+| WA-036 | catppuccin eval-time ports kept in the home closure (`home.extraDependencies`) — `home/base/core/theme.nix`                                                         | catppuccin/nix reads some ports at eval time (`lib.importTOML "${sources.starship}/<flavor>.toml"`) and inlines the result, so the built port, catppuccin's build/install hooks and the fetched port source stay unreachable: every gc deletes them, and the deploy after it rebuilds them (build logs: 2026-10-16). `home.extraDependencies` records the port in the generation, which is a gc root. Also read at eval time upstream: `bottom`, `element` (option `element-desktop`), `firefox`, `rio`, `palette` (options `skim`, `tty`), `spotify-player`.                                                                         | Drop once catppuccin/nix stops reading port files at eval time, or those ports come from a binary cache                                                                                                                                                 | 2026-10-16 | on a catppuccin bump                                                                                | active |
 
 If WA-008 freezes recur, the fallback is to restore the parameters commented out in
 `hosts/idols-ai/hardware-configuration.nix` —

home/base/core/theme.nix

@@ -1,4 +1,9 @@
-{ catppuccin, ... }:
+{
+  config,
+  lib,
+  catppuccin,
+  ...
+}:
 {
   # https://github.com/catppuccin/nix
   imports = [
@@ -19,4 +24,8 @@
     # one of "blue", "flamingo", "green", "lavender", "maroon", "mauve", "peach", "pink", "red", "rosewater", "sapphire", "sky", "teal", "yellow"
     accent = "pink";
   };
+
+  # catppuccin/nix inlines the starship port at eval time, so nothing references
+  # the build and gc drops it; this keeps it in the home closure. See WA-036.
+  home.extraDependencies = lib.optional config.catppuccin.starship.enable config.catppuccin.sources.starship;
 }