diff --git a/.gitmodules b/.gitmodules index b7530d3..4419f38 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,9 +1,6 @@ [submodule "neovimBTW"] path = neovimBTW url = https://github.com/DuskyElf/neovimBTW -[submodule "opencodeBTW"] - path = opencodeBTW - url = https://github.com/DuskyElf/opencodeBTW [submodule "piBTW"] path = piBTW url = https://github.com/DuskyElf/piBTW diff --git a/AGENTS.md b/AGENTS.md index a642711..74dc577 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -26,10 +26,10 @@ PATH is `/run/current-system/sw/bin` and `~/.nix-profile/bin` only; /nix/store a ## Many commands are jail wrappers (trust boundary) -curl, wget, gh, worktrunk, opencode, pi go through flake.nix's `jail` (jail-nix, `xdg-app`): network + mount-cwd + own config dirs, nothing more. This is a deliberate trust boundary; never widen their access. Gotchas: +curl, wget, gh, worktrunk, pi go through flake.nix's `jail` (jail-nix, `xdg-app`): network + mount-cwd + own config dirs, nothing more. This is a deliberate trust boundary; never widen their access. Gotchas: - Jail curl can't WRITE with `-o` (exits 23, CURLE_WRITE_ERROR). Use a shell redirect (`curl ... > file`) so the shell opens the target outside the sandbox. - A daemon backgrounded while holding a flock inherits the fd and holds the lock forever; every later run reports "another run is in progress". Close it on spawn (`daemon ... 9>&- &`). Bitten by scripts/wallpaper.mjs via lib/lock.mjs. -- piBTW / opencodeBTW submodules hold agent state; dirty entries are noise, never commit. +- piBTW submodule holds agent state; dirty entries are noise, never commit. ## Load-bearing oddities, do not "clean up" diff --git a/cli/home.nix b/cli/home.nix index 0355c51..2a4b58d 100644 --- a/cli/home.nix +++ b/cli/home.nix @@ -5,7 +5,6 @@ ./git.nix ./tmux.nix ./nvim.nix - ./opencode.nix ./pi-coding-agent.nix ]; } diff --git a/cli/opencode.nix b/cli/opencode.nix deleted file mode 100644 index dcb618f..0000000 --- a/cli/opencode.nix +++ /dev/null @@ -1,28 +0,0 @@ -{ - config, - pkgs-unstable-small, - jail, - ... -}: -{ - home.packages = [ - (jail "opencode" pkgs-unstable-small.opencode ( - c: with c; [ - network - mount-cwd - (readwrite "/home/duskyelf/.config/opencode") - - # can run any binary with limited file system access - (readonly "/nix/store") - (readonly "/run/current-system/sw/bin") - (readonly "/home/duskyelf/.nix-profile/bin") - (set-env "PATH" "/run/current-system/sw/bin:/home/duskyelf/.nix-profile/bin") - - (set-env "EDITOR" "vim") - ] - )) - ]; - - xdg.configFile."opencode".source = - config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/dotfiles/opencodeBTW"; -} diff --git a/neovimBTW b/neovimBTW index e5a3b9c..7b579e4 160000 --- a/neovimBTW +++ b/neovimBTW @@ -1 +1 @@ -Subproject commit e5a3b9ceb873e61b96826eeb5b566ecf286e30b3 +Subproject commit 7b579e4e39cb5e02b921aa80f4d1a6e0308432b0 diff --git a/opencodeBTW b/opencodeBTW deleted file mode 160000 index 3edd90c..0000000 --- a/opencodeBTW +++ /dev/null @@ -1 +0,0 @@ -Subproject commit 3edd90c80a01ff34b3929857a4d3dd43d14e41b9