devshell.nix

_: {
  # The repo's tasks, plus what I reach for by hand. 'nix develop' is the way
  # in, and inside it every task in flake/tasks.nix is a bare command:
  # 'rebuild endgame' rather than 'nix run .#rebuild endgame'.
  #
  # core/system-packages.nix only carries what my hosts need at runtime, not
  # what working on this repo needs.
  perSystem =
    { config, pkgs, ... }:
    {
      devShells.default = pkgs.mkShell {
        packages =
          # Every task, from the one place they are defined.
          builtins.attrValues config.packages ++ [
            # Not tasks, but the tools I use directly on this tree. The tasks
            # declare their own runtimeInputs and do not rely on these.
            #
            # Spelled pkgs.* rather than opened with 'with', for the reason
            # apps/spotify.nix gives: at a glance you can see where each name
            # comes from.
            pkgs.age
            pkgs.nixfmt
            pkgs.nvd
            pkgs.sops
            pkgs.ssh-to-age
          ];
      };
    };
}