home/home/meili.nix

{
  config,
  inputs,
  lib,
  pkgs,
  ...
}:
let
  configHome = "${config.xdg.configHome}/gnupg";
  secrets = inputs.secrets.secrets;
in
{
  home.sessionVariables = {
    SSH_AUTH_SOCK = lib.mkDefault "${configHome}/S.gpg-agent.ssh";
  };

  imports = [
    inputs.agenix.homeManagerModules.default

    ./features/core.nix

    ./features/cli
    ./features/desktop
    ./features/nvim
  ];

  services.gpg-agent.pinentry.package = pkgs.pinentry_mac;

  programs.fish.interactiveShellInit = ''
    eval "$(/opt/homebrew/bin/brew shellenv)"
    set OPENROUTER_API_KEY $(cat ${config.age.secrets."meili/openrouter".path})
  '';

  programs.opencode = {
    enable = true;
    package = pkgs.unstable.opencode;
  };

  # FIXME: change this to a different identity
  age.identityPaths = [ "/Users/thomas/.ssh/builder_ed25519" ];
  age.secrets = {
    "meili/control-pat".file = secrets."meili/control-pat.age";
    "meili/openrouter".file = secrets."meili/openrouter.age";
  };
}