updates

modules/capabilities/ai/default.nix

@@ -28,6 +28,8 @@ in
         };
 
         features.plugins = true;
+        # The Nix package lacks the codex-package.json layout the daemon requires.
+        features.daemon_auto_start = false;
         hooks = ai.codexHooks;
         mcp_servers = ai.servers // {
           context7 = ai.servers.context7 // {
@@ -98,7 +100,7 @@ in
         pkgs.nodejs
         pkgs.python3
         inputs.llm-agents.packages.${pkgs.stdenv.hostPlatform.system}.codex
-        pkgs.llm-agents.chatgpt
+        inputs.llm-agents.packages.${pkgs.stdenv.hostPlatform.system}.chatgpt
         pkgs.llm-agents.pi
         pkgs.llm-agents.claude-code
         pkgs.llm-agents.herdr

modules/capabilities/audio.nix

@@ -8,4 +8,13 @@
       jack.enable = true;
     };
   };
+
+  flake.modules.homeManager.audio =
+    { pkgs, ... }:
+    {
+      home.packages = [
+        pkgs.reaper
+        pkgs.bitwig-studio
+      ];
+    };
 }

modules/capabilities/nix.nix

@@ -14,6 +14,10 @@ in
       settings = {
         trusted-users = [ "@wheel" ];
         use-xdg-base-directories = true;
+        extra-substituters = [ "https://devenv.cachix.org" ];
+        extra-trusted-public-keys = [
+          "devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw="
+        ];
 
         experimental-features = [
           "nix-command"

modules/capabilities/workbench/_support/tools.nix

@@ -13,6 +13,7 @@
     kubelogin-oidc
     jq
     just
+    python3Packages.python-openstackclient
     python314
     rclone
     sops

modules/profiles/workstation-base.nix

@@ -43,6 +43,7 @@ in
   flake.modules.homeManager.workstation-base = {
     imports = [
       homeModules.passwords
+      homeModules.audio
       homeModules.clipboard
       homeModules.handy
       homeModules.desktop-commands