feat(nixos): add Bambu Studio Flatpak

Manage the user Flatpak through nix-flatpak and enable printer discovery through the host firewall.

Cargo.lock

@@ -164,6 +164,10 @@ dependencies = [
  "proc-macro2",
 ]
 
+[[package]]
+name = "scaffolding"
+version = "0.1.0"
+
 [[package]]
 name = "serde"
 version = "1.0.229"

Cargo.toml

@@ -4,6 +4,7 @@ members = [
     "src/machoke",
     "src/monorepo",
     "src/status",
+    "tools/scaffolding",
 ]
 resolver = "3"
 

configs/nixos/hosts/zeus/default.nix

@@ -43,6 +43,7 @@
   modules.shell.omp.enable = true;
 
   modules.desktop.enable = true;
+  modules.desktop.apps.bambu-studio.enable = true;
   modules.desktop.apps.obsidian.enable = true;
   modules.desktop.apps.r2modman.enable = true;
   modules.desktop.emulation.enable = true;

configs/nixos/modules/desktop/apps/bambu-studio.nix

@@ -0,0 +1,36 @@
+{
+  config,
+  inputs,
+  lib,
+  util,
+  ...
+}:
+# Bambu Studio for preparing and monitoring Bambu Lab prints.
+let
+  user = config.user.name;
+in
+{
+  options.modules.desktop.apps.bambu-studio.enable =
+    lib.mkEnableOption "Bambu Studio for preparing and monitoring Bambu Lab prints";
+
+  config = lib.mkIf config.modules.desktop.apps.bambu-studio.enable {
+    services.flatpak.enable = true;
+
+    home-manager.sharedModules = [ inputs.nix-flatpak.homeManagerModules.nix-flatpak ];
+    home-manager.users.${user}.services.flatpak = {
+      enable = true;
+      packages = [ "com.bambulab.BambuStudio" ];
+    };
+
+    # Bambu printers announce themselves with SSDP multicast or broadcast traffic.
+    networking.firewall.allowedUDPPorts = [
+      1990
+      2021
+    ];
+
+    registry.window-icon.${config.networking.hostName}.bambu-studio = {
+      class = "[Bb]ambu[Ss]tudio";
+      icon = util.glyph "f1b2";
+    };
+  };
+}

configs/nixos/modules/shell/fish/default.nix

@@ -30,6 +30,7 @@ in
     home-manager.users.${user} = {
       home.packages = with pkgs; [
         bat # backs the manpager
+        e2fsprogs # provides chattr and lsattr for the readonly function
         fastfetch # the shell greeting
       ];
 
@@ -99,6 +100,11 @@ in
             body = builtins.readFile ./functions/deploy-to.fish;
           };
 
+          readonly = {
+            description = "Toggle write protection for a Borderlands 2 save";
+            body = builtins.readFile ./functions/readonly.fish;
+          };
+
         };
 
         # Rendered by home-manager into ~/.config/fish/config.fish.

configs/nixos/modules/shell/fish/functions/readonly.fish

@@ -0,0 +1,35 @@
+if test (count $argv) -ne 1
+    echo "usage: readonly <save-number>" >&2
+    return 2
+end
+
+set save_number $argv[1]
+if not string match --quiet --regex '^[0-9]{4}$' -- "$save_number"
+    echo "readonly: save number must contain four digits" >&2
+    return 2
+end
+
+set save_name "Save$save_number.sav"
+set save "$HOME/.local/share/Steam/steamapps/compatdata/49520/pfx/drive_c/users/steamuser/Documents/My games/Borderlands 2/WillowGame/SaveData/76561198060918970/$save_name"
+
+if not test -f "$save"
+    echo "readonly: save not found: $save" >&2
+    return 1
+end
+
+set attribute_output (lsattr -d -- "$save")
+or begin
+    echo "readonly: failed to read attributes for $save_name" >&2
+    return 1
+end
+
+set attribute_flags (string split --max 1 ' ' -- "$attribute_output")[1]
+if string match --quiet '*i*' -- "$attribute_flags"
+    sudo chattr -i -- "$save"
+    or return $status
+    echo "$save_name is now writable"
+else
+    sudo chattr +i -- "$save"
+    or return $status
+    echo "$save_name is now read-only"
+end

flake.lock

@@ -321,6 +321,22 @@
         "type": "github"
       }
     },
+    "nix-flatpak": {
+      "locked": {
+        "lastModified": 1767983141,
+        "narHash": "sha256-7ZCulYUD9RmJIDULTRkGLSW1faMpDlPKcbWJLYHoXcs=",
+        "owner": "gmodena",
+        "repo": "nix-flatpak",
+        "rev": "440818969ac2cbd77bfe025e884d0aa528991374",
+        "type": "github"
+      },
+      "original": {
+        "owner": "gmodena",
+        "ref": "v0.7.0",
+        "repo": "nix-flatpak",
+        "type": "github"
+      }
+    },
     "nixos-hardware": {
       "inputs": {
         "nixpkgs": [
@@ -456,6 +472,7 @@
         "firefox-addons": "firefox-addons",
         "gitea-axi": "gitea-axi",
         "home-manager": "home-manager_3",
+        "nix-flatpak": "nix-flatpak",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs_2",
         "nixpkgs-stable": "nixpkgs-stable",

flake.nix

@@ -16,6 +16,9 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
+    # Installs Flatpak applications declaratively.
+    nix-flatpak.url = "github:gmodena/nix-flatpak/?ref=v0.7.0";
+
     # Provides signed AMO extensions pinned by version and hash.
     firefox-addons = {
       url = "gitlab:rycee/nur-expressions?dir=pkgs/firefox-addons";

src/skills/grill/SKILL.md

@@ -3,46 +3,28 @@ name: grill
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: each decision branches into the decisions it unblocks.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Maintain the design tree in a new Markdown file. Use the file as the source of truth.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-Build the complete **frontier** before the first question.
-After each answer, recompute and display every frontier decision.
-
-Ask one frontier decision per turn.
-A clarification leaves that decision open.
-
-Format a question like so:
+Format a round like so:
 
 ```
-❓ **D1 — <decision title>**: <question body, might be multiple paragraphs, including multiple choices>
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
 
-**Options**
-
-1. <option>
-...
-<n>. **<recommended option>** — recommended
+➡️ <your recommended answer>
 
 ---
 
-❓ **D2 — <decision title>**: <question body, might be multiple paragraphs, including multiple choices>
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
 
-**Options**
-
-1. <option>
-...
-<n>. **<recommended option>** — recommended
+➡️ <your recommended answer>
 ```
 
-List every viable answer in an ordered list and mark your recommended answer.
 Word each question so "yes" accepts your recommended answer.
 
-Before asking the next question, account for every decision that the response settles.
-Record preferences as constraints.
-Settle an implementation decision only after facts establish that it is viable.
-A decision with unresolved prerequisites belongs outside the frontier.
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
 
-Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), find it with available tools; don't ask the user for anything you could look up yourself. The _decisions_ are the user's: put each to them and wait.
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), find it with available tools; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the result; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
 
-The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Present every settled decision from the design tree. Do not act on it until the user confirms you have reached a shared understanding.
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

tools/scaffolding/BUILD

@@ -0,0 +1,27 @@
+load("@rules_rust//rust:defs.bzl", "rust_binary", "rust_library", "rust_test")
+
+rust_library(
+  name = "rust",
+  crate_name = "rust",
+  srcs = [
+    "rust.rs",
+    "rust_test.rs",
+  ],
+  compile_data = glob(["templates/*"]),
+)
+
+rust_test(
+  name = "rust_test",
+  crate = ":rust",
+)
+
+rust_binary(
+  name = "rust_cli",
+  crate_name = "rust_cli",
+  srcs = [
+    "rust_main.rs",
+  ],
+  deps = [
+    ":rust",
+  ],
+)

tools/scaffolding/Cargo.toml

@@ -0,0 +1,12 @@
+[package]
+name = "scaffolding"
+version = "0.1.0"
+edition = "2024"
+
+[lib]
+name = "rust"
+path = "rust.rs"
+
+[[bin]]
+name = "rust_cli"
+path = "rust_main.rs"

tools/scaffolding/rust.rs

@@ -0,0 +1,192 @@
+use std::env;
+use std::fs;
+use std::io;
+use std::path::{Path, PathBuf};
+
+const BUILD_TEMPLATE: &str = include_str!("templates/BUILD.template");
+const CARGO_TEMPLATE: &str = include_str!("templates/Cargo.toml.template");
+const LIBRARY_TEMPLATE: &str = include_str!("templates/library.rs.template");
+const BINARY_TEMPLATE: &str = include_str!("templates/binary.rs.template");
+const TEST_TEMPLATE: &str = include_str!("templates/test.rs.template");
+const CRATE_NAME_PLACEHOLDER: &str = "{CRATE_NAME}";
+
+/// Creates a Rust package at `destination`.
+pub fn run(destination: &Path) -> io::Result<PathBuf> {
+    scaffold(&workspace_root()?, destination)
+}
+
+fn scaffold(workspace_root: &Path, destination: &Path) -> io::Result<PathBuf> {
+    let workspace_root = fs::canonicalize(workspace_root)?;
+    let destination = resolve_destination(&workspace_root, destination)?;
+    let crate_name = crate_name(&destination)?;
+    let workspace_member = workspace_member(&workspace_root, &destination)?;
+    let files = render_files(&crate_name);
+    let cargo_path = workspace_root.join("Cargo.toml");
+    let cargo_manifest = fs::read_to_string(&cargo_path)?;
+    let cargo_manifest = update_workspace_members(&cargo_manifest, &workspace_member)?;
+
+    fs::create_dir(&destination)?;
+    for file in files {
+        fs::write(destination.join(file.name), file.contents)?;
+    }
+    fs::write(cargo_path, cargo_manifest)?;
+
+    Ok(destination)
+}
+
+fn workspace_root() -> io::Result<PathBuf> {
+    match env::var_os("BUILD_WORKSPACE_DIRECTORY") {
+        Some(path) => Ok(PathBuf::from(path)),
+        None => env::current_dir(),
+    }
+}
+
+fn resolve_destination(workspace_root: &Path, destination: &Path) -> io::Result<PathBuf> {
+    let destination = if destination.is_absolute() {
+        destination.to_path_buf()
+    } else {
+        workspace_root.join(destination)
+    };
+    let parent = destination.parent().ok_or_else(|| {
+        io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "the destination must have a parent directory",
+        )
+    })?;
+    let parent = fs::canonicalize(parent)?;
+
+    if !parent.starts_with(workspace_root) {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            format!(
+                "the destination is outside the workspace: {}",
+                destination.display()
+            ),
+        ));
+    }
+
+    let destination = parent.join(destination.file_name().ok_or_else(|| {
+        io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "the destination must name a directory",
+        )
+    })?);
+    if destination.try_exists()? {
+        return Err(io::Error::new(
+            io::ErrorKind::AlreadyExists,
+            format!("the destination already exists: {}", destination.display()),
+        ));
+    }
+
+    Ok(destination)
+}
+
+fn crate_name(destination: &Path) -> io::Result<String> {
+    let crate_name = destination
+        .file_name()
+        .and_then(|name| name.to_str())
+        .ok_or_else(|| {
+            io::Error::new(
+                io::ErrorKind::InvalidInput,
+                "the destination name must be valid UTF-8",
+            )
+        })?;
+
+    if crate_name.is_empty()
+        || !crate_name.bytes().all(|character| {
+            character.is_ascii_lowercase() || character.is_ascii_digit() || character == b'_'
+        })
+    {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            format!("invalid crate name: {crate_name}"),
+        ));
+    }
+
+    Ok(crate_name.to_owned())
+}
+
+fn workspace_member(workspace_root: &Path, destination: &Path) -> io::Result<String> {
+    let member = destination.strip_prefix(workspace_root).map_err(|_| {
+        io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "the destination is outside the workspace",
+        )
+    })?;
+    let member = member.to_str().ok_or_else(|| {
+        io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "the destination must be valid UTF-8",
+        )
+    })?;
+
+    Ok(member.replace(std::path::MAIN_SEPARATOR, "/"))
+}
+
+fn render_files(crate_name: &str) -> Vec<RenderedFile> {
+    vec![
+        render_file("BUILD", BUILD_TEMPLATE, crate_name),
+        render_file("Cargo.toml", CARGO_TEMPLATE, crate_name),
+        render_file(&format!("{crate_name}.rs"), LIBRARY_TEMPLATE, crate_name),
+        render_file(
+            &format!("{crate_name}_main.rs"),
+            BINARY_TEMPLATE,
+            crate_name,
+        ),
+        render_file(&format!("{crate_name}_test.rs"), TEST_TEMPLATE, crate_name),
+    ]
+}
+
+fn render_file(name: &str, template: &str, crate_name: &str) -> RenderedFile {
+    RenderedFile {
+        name: name.to_owned(),
+        contents: template.replace(CRATE_NAME_PLACEHOLDER, crate_name),
+    }
+}
+
+fn update_workspace_members(manifest: &str, member: &str) -> io::Result<String> {
+    let workspace_start = manifest.find("[workspace]").ok_or_else(|| {
+        io::Error::new(
+            io::ErrorKind::InvalidData,
+            "the root Cargo.toml has no [workspace] section",
+        )
+    })?;
+    let members_start = manifest[workspace_start..]
+        .find("members = [")
+        .map(|offset| workspace_start + offset)
+        .ok_or_else(|| {
+            io::Error::new(
+                io::ErrorKind::InvalidData,
+                "the root Cargo.toml has no workspace members array",
+            )
+        })?;
+    let members_end = manifest[members_start..]
+        .find(']')
+        .map(|offset| members_start + offset)
+        .ok_or_else(|| {
+            io::Error::new(
+                io::ErrorKind::InvalidData,
+                "the root Cargo.toml has an unclosed workspace members array",
+            )
+        })?;
+
+    if manifest[members_start..members_end].contains(&format!("\"{member}\"")) {
+        return Err(io::Error::new(
+            io::ErrorKind::AlreadyExists,
+            format!("the workspace already has member: {member}"),
+        ));
+    }
+
+    let mut manifest = manifest.to_owned();
+    manifest.insert_str(members_end, &format!("    \"{member}\",\n"));
+    Ok(manifest)
+}
+
+struct RenderedFile {
+    name: String,
+    contents: String,
+}
+
+#[cfg(test)]
+#[path = "rust_test.rs"]
+mod rust_test;

tools/scaffolding/rust_main.rs

@@ -0,0 +1,29 @@
+use std::env;
+use std::io;
+use std::path::PathBuf;
+
+fn main() -> io::Result<()> {
+    let mut arguments = env::args_os();
+    let program = arguments.next().unwrap_or_else(|| "rust_cli".into());
+    let Some(destination) = arguments.next() else {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            format!("usage: {} <destination>", PathBuf::from(program).display()),
+        ));
+    };
+
+    if destination == "--help" {
+        println!("usage: {} <destination>", PathBuf::from(program).display());
+        return Ok(());
+    }
+    if arguments.next().is_some() {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "expected exactly one destination",
+        ));
+    }
+
+    let destination = rust::run(&PathBuf::from(destination))?;
+    println!("created {}", destination.display());
+    Ok(())
+}

tools/scaffolding/rust_test.rs

@@ -0,0 +1,71 @@
+use std::fs;
+use std::path::Path;
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use super::{crate_name, render_files, scaffold, update_workspace_members};
+
+#[test]
+fn accepts_valid_crate_names() {
+    assert_eq!(crate_name(Path::new("foo_2")).unwrap(), "foo_2");
+}
+
+#[test]
+fn rejects_invalid_crate_names() {
+    assert!(crate_name(Path::new("Foo")).is_err());
+    assert!(crate_name(Path::new("foo-bar")).is_err());
+}
+
+#[test]
+fn renders_crate_name_into_every_file() {
+    for file in render_files("example") {
+        assert!(!file.contents.contains("{CRATE_NAME}"));
+    }
+}
+
+#[test]
+fn adds_workspace_member() {
+    let manifest = "[workspace]\nmembers = [\n    \"src/status\",\n]\n";
+    let updated = update_workspace_members(manifest, "src/example").unwrap();
+
+    assert_eq!(
+        updated,
+        "[workspace]\nmembers = [\n    \"src/status\",\n    \"src/example\",\n]\n"
+    );
+}
+
+#[test]
+fn creates_a_rust_package() {
+    let workspace = std::env::temp_dir().join(format!(
+        "scaffolding-test-{}-{}",
+        std::process::id(),
+        SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos(),
+    ));
+    fs::create_dir_all(workspace.join("src")).unwrap();
+    fs::write(
+        workspace.join("Cargo.toml"),
+        "[workspace]\nmembers = [\n]\n",
+    )
+    .unwrap();
+
+    let destination = scaffold(&workspace, &workspace.join("src/example")).unwrap();
+
+    assert_eq!(
+        destination,
+        fs::canonicalize(workspace.join("src/example")).unwrap()
+    );
+    assert!(destination.join("BUILD").exists());
+    assert!(destination.join("Cargo.toml").exists());
+    assert!(destination.join("example.rs").exists());
+    assert!(destination.join("example_main.rs").exists());
+    assert!(destination.join("example_test.rs").exists());
+    assert!(
+        fs::read_to_string(workspace.join("Cargo.toml"))
+            .unwrap()
+            .contains("    \"src/example\",")
+    );
+
+    fs::remove_dir_all(workspace).unwrap();
+}

tools/scaffolding/templates/BUILD.template

@@ -0,0 +1,26 @@
+load("@rules_rust//rust:defs.bzl", "rust_binary", "rust_library", "rust_test")
+
+rust_library(
+  name = "{CRATE_NAME}",
+  crate_name = "{CRATE_NAME}",
+  srcs = [
+    "{CRATE_NAME}.rs",
+    "{CRATE_NAME}_test.rs",
+  ],
+)
+
+rust_test(
+  name = "{CRATE_NAME}_test",
+  crate = ":{CRATE_NAME}",
+)
+
+rust_binary(
+  name = "{CRATE_NAME}_cli",
+  crate_name = "{CRATE_NAME}_cli",
+  srcs = [
+    "{CRATE_NAME}_main.rs",
+  ],
+  deps = [
+    ":{CRATE_NAME}",
+  ],
+)

tools/scaffolding/templates/Cargo.toml.template

@@ -0,0 +1,11 @@
+[package]
+name = "{CRATE_NAME}"
+version = "0.1.0"
+edition = "2024"
+
+[lib]
+path = "{CRATE_NAME}.rs"
+
+[[bin]]
+name = "{CRATE_NAME}_cli"
+path = "{CRATE_NAME}_main.rs"

tools/scaffolding/templates/binary.rs.template

@@ -0,0 +1,3 @@
+fn main() {
+    {CRATE_NAME}::run();
+}

tools/scaffolding/templates/library.rs.template

@@ -0,0 +1,5 @@
+#[cfg(test)]
+#[path = "{CRATE_NAME}_test.rs"]
+mod tests;
+
+pub fn run() {}

tools/scaffolding/templates/test.rs.template

@@ -0,0 +1,6 @@
+use super::run;
+
+#[test]
+fn runs() {
+    run();
+}