Add nono AI agent sandbox CLI

flake.lock

@@ -750,6 +750,22 @@
         "type": "github"
       }
     },
+    "nono": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1772780805,
+        "narHash": "sha256-U7ZC5WuoW8GkvIxZzAwzEQDJ2p9pgJ4QmsnPR4P34qE=",
+        "owner": "always-further",
+        "repo": "nono",
+        "rev": "92e2b5c4920bd31ddd87b10112ac8882769fa9e9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "always-further",
+        "repo": "nono",
+        "type": "github"
+      }
+    },
     "pimalaya": {
       "flake": false,
       "locked": {
@@ -790,6 +806,7 @@
           "nixpkgs"
         ],
         "nixvim": "nixvim",
+        "nono": "nono",
         "sops-nix": "sops-nix",
         "tuicr": "tuicr",
         "zjstatus": "zjstatus"

flake.nix

@@ -48,6 +48,10 @@
 		nixpkgs.url = "github:nixos/nixpkgs/master";
 		nixpkgs-lib.follows = "nixpkgs";
 		nixvim.url = "github:nix-community/nixvim";
+		nono = {
+			flake = false;
+			url = "github:always-further/nono";
+		};
 		sops-nix = {
 			inputs.nixpkgs.follows = "nixpkgs";
 			url = "github:Mic92/sops-nix";

modules/_lib/build-rust-package.nix

@@ -1,20 +0,0 @@
-{
-	inputs,
-	input,
-	prev,
-}: let
-	naersk-lib = prev.callPackage inputs.naersk {};
-	manifest = (prev.lib.importTOML "${input}/Cargo.toml").package;
-in
-	naersk-lib.buildPackage {
-		pname = manifest.name;
-		version = manifest.version;
-
-		src = input;
-
-		nativeBuildInputs = [prev.pkg-config];
-		buildInputs = [prev.openssl];
-		OPENSSL_NO_VENDOR = 1;
-
-		doCheck = false;
-	}

modules/ai-tools.nix

@@ -52,6 +52,7 @@
 
 		home.packages = [
 			inputs'.llm-agents.packages.claude-code
+			pkgs.nono
 		];
 
 		xdg.configFile = {

modules/dendritic.nix

@@ -63,6 +63,10 @@
 			url = "github:nix-community/naersk/master";
 			inputs.nixpkgs.follows = "nixpkgs";
 		};
+		nono = {
+			url = "github:always-further/nono";
+			flake = false;
+		};
 		# Secrets inputs
 		sops-nix = {
 			url = "github:Mic92/sops-nix";

modules/overlays.nix

@@ -4,12 +4,36 @@
 		(final: prev: {
 				himalaya = inputs.himalaya.packages.${prev.stdenv.hostPlatform.system}.default;
 			})
-		# jj-ryu (uses build-rust-package helper)
-		(final: prev: {
+		# jj-ryu
+		(final: prev: let
+				naersk-lib = prev.callPackage inputs.naersk {};
+				manifest = (prev.lib.importTOML "${inputs.jj-ryu}/Cargo.toml").package;
+			in {
 				jj-ryu =
-					import ./_lib/build-rust-package.nix {
-						inherit inputs prev;
-						input = inputs.jj-ryu;
+					naersk-lib.buildPackage {
+						pname = manifest.name;
+						version = manifest.version;
+						src = inputs.jj-ryu;
+						nativeBuildInputs = [prev.pkg-config];
+						buildInputs = [prev.openssl];
+						OPENSSL_NO_VENDOR = 1;
+						doCheck = false;
+					};
+			})
+		# nono (AI agent sandbox CLI — Cargo workspace)
+		(final: prev: let
+				naersk-lib = prev.callPackage inputs.naersk {};
+				manifest = (prev.lib.importTOML "${inputs.nono}/crates/nono-cli/Cargo.toml").package;
+			in {
+				nono =
+					naersk-lib.buildPackage {
+						pname = manifest.name;
+						version = manifest.version;
+						src = inputs.nono;
+						nativeBuildInputs = [prev.pkg-config prev.cmake prev.perl];
+						buildInputs = [prev.openssl] ++ prev.lib.optionals prev.stdenv.isLinux [prev.dbus];
+						OPENSSL_NO_VENDOR = 1;
+						doCheck = false;
 					};
 			})
 		# jj-starship (passes through upstream overlay)