tabs workaround

AGENTS.md

@@ -132,7 +132,8 @@ in {
 ### Secrets Management
 - Use SOPS for secrets (see `.sops.yaml`)
 - Never commit unencrypted secrets
-- Secret definitions in `modules/secrets.nix`
+- Secret definitions live in per-host modules (`modules/michael.nix`, `modules/tahani.nix`, etc.)
+- Shared SOPS defaults (module imports, key paths) in `modules/secrets.nix`
 
 ### Aspect Composition
 Use `den.aspects.<name>.includes` to compose aspects:

modules/dendritic.nix

@@ -4,6 +4,17 @@
 		(inputs.flake-file.flakeModules.dendritic or {})
 	];
 
+	# Use alejandra with tabs for flake.nix formatting (matches alejandra.toml)
+	flake-file.formatter = pkgs:
+		pkgs.writeShellApplication {
+			name = "alejandra-tabs";
+			runtimeInputs = [pkgs.alejandra];
+			text = ''
+				echo 'indentation = "Tabs"' > alejandra.toml
+				alejandra "$@"
+			'';
+		};
+
 	# Declare all framework and module inputs via flake-file
 	flake-file.inputs = {
 		den.url = "github:vic/den";