backwards: Pin firefox legacy configPath

hosts/backwards/modules/firefox/default.nix

@@ -46,6 +46,12 @@ in
 
       package = wrapped;
 
+      # Pin the legacy profile location. The default changed to the XDG path
+      # (`$XDG_CONFIG_HOME/mozilla/firefox`) for stateVersion >= "26.05";
+      # keep the old `~/.mozilla/firefox` so the existing profile isn't
+      # stranded (migrating would require moving the profile dir by hand).
+      configPath = ".mozilla/firefox";
+
       profiles = {
         alex = {
           id = 0;

hosts/backwards/modules/ssh/default.nix

@@ -21,31 +21,32 @@ in
     home-manager.users.alex = {
       programs.ssh = {
         enable = true;
+        enableDefaultConfig = false;
 
-        matchBlocks = {
+        settings = {
           "manatee" = {
-            hostname = "manatee";
-            user = "alex";
-            identityFile = "/home/alex/.ssh/alex.backwards-manatee";
-            port = 1122;
+            HostName = "manatee";
+            User = "alex";
+            IdentityFile = "/home/alex/.ssh/alex.backwards-manatee";
+            Port = 1122;
           };
 
           "git.ppp.pm" = {
-            hostname = "git.ppp.pm";
-            identityFile = "/home/alex/.ssh/alex.backwards-git.ppp.pm";
+            HostName = "git.ppp.pm";
+            IdentityFile = "/home/alex/.ssh/alex.backwards-git.ppp.pm";
           };
 
           "*" = {
-            forwardAgent = false;
-            addKeysToAgent = "no";
-            compression = false;
-            serverAliveInterval = 0;
-            serverAliveCountMax = 3;
-            hashKnownHosts = false;
-            userKnownHostsFile = "~/.ssh/known_hosts";
-            controlMaster = "no";
-            controlPath = "~/.ssh/master-%r@%n:%p";
-            controlPersist = "no";
+            ForwardAgent = false;
+            AddKeysToAgent = "no";
+            Compression = false;
+            ServerAliveInterval = 0;
+            ServerAliveCountMax = 3;
+            HashKnownHosts = false;
+            UserKnownHostsFile = "~/.ssh/known_hosts";
+            ControlMaster = "no";
+            ControlPath = "~/.ssh/master-%r@%n:%p";
+            ControlPersist = "no";
           };
         };
       };

hosts/pinwheel/modules/ai/default.nix

@@ -6,6 +6,41 @@
 }:
 let
   enabled = config.mod.ai.enable;
+
+  # Shared statusline: show the logged-in account email.
+  statusLine = {
+    type = "command";
+    command = "jq -r '.oauthAccount.emailAddress' \"$CLAUDE_CONFIG_DIR/.claude.json\"";
+  };
+
+  # PostToolUse hook: echoes a JSON payload that injects a comment-policy
+  # reminder as additional context after every Write/Edit.
+  commentPolicyPayload = builtins.toJSON {
+    suppressOutput = true;
+    hookSpecificOutput = {
+      hookEventName = "PostToolUse";
+      additionalContext = "Comment policy: default to ZERO code comments. Review what you just wrote and delete any comment that narrates the change, restates the code, states the obvious, is tangential, or explains design/why rationale -- put that reasoning in your chat reply instead, never in the code. Never use em dashes or en dashes anywhere in file content; use a plain ASCII hyphen or reword.";
+    };
+  };
+
+  settings = builtins.toJSON {
+    inherit statusLine;
+    theme = "dark";
+    editorMode = "vim";
+    hooks = {
+      PostToolUse = [
+        {
+          matcher = "Write|Edit";
+          hooks = [
+            {
+              type = "command";
+              command = "echo ${lib.escapeShellArg commentPolicyPayload}";
+            }
+          ];
+        }
+      ];
+    };
+  };
 in
 {
   options = {
@@ -24,6 +59,9 @@ in
         wclaude = "CLAUDE_CONFIG_DIR=$HOME/.claude-personal claude";
         pclaude = "CLAUDE_CONFIG_DIR=$HOME/.claude-work claude";
       };
+
+      home.file.".claude-work/settings.json".text = settings;
+      home.file.".claude-personal/settings.json".text = settings;
     };
   };
 }

hosts/pinwheel/modules/firefox/default.nix

@@ -53,6 +53,12 @@ in
 
       package = wrapped;
 
+      # Pin the legacy profile location. The default changed to the XDG path
+      # (`$XDG_CONFIG_HOME/mozilla/firefox`) for stateVersion >= "26.05";
+      # keep the old `~/.mozilla/firefox` so the existing profile isn't
+      # stranded (migrating would require moving the profile dir by hand).
+      configPath = ".mozilla/firefox";
+
       profiles = {
         alex = {
           id = 0;

hosts/pinwheel/modules/gleam/default.nix

@@ -18,7 +18,7 @@ in
     home-manager.users.alex = {
       home.packages = [
         pkgs.gleam
-        pkgs.erlang
+        pkgs.beamPackages.erlang
       ];
     };
   };

hosts/pinwheel/modules/ssh/default.nix

@@ -7,6 +7,11 @@
   services.gnome.gcr-ssh-agent.enable = false;
   programs.ssh.startAgent = true;
 
+  # Create the setuid `fusermount3` wrapper that `sshfs` execs to mount. The
+  # `programs.fuse` module used to install this unconditionally; newer nixpkgs
+  # gates it behind this option (default off), so opt in explicitly.
+  programs.fuse.enable = true;
+
   home-manager.users.alex = {
     services.gnome-keyring = {
       enable = true;
@@ -31,49 +36,49 @@
       enable = true;
       enableDefaultConfig = false;
 
-      matchBlocks = {
+      settings = {
         "manatee" = {
-          hostname = "manatee";
-          user = "alex";
-          identityFile = "/home/alex/.ssh/alex.pinwheel-manatee";
-          port = 1122;
+          HostName = "manatee";
+          User = "alex";
+          IdentityFile = "/home/alex/.ssh/alex.pinwheel-manatee";
+          Port = 1122;
         };
 
         "backwards" = {
-          hostname = "backwards";
-          user = "alex";
-          identityFile = "/home/alex/.ssh/alex.pinwheel-backwards";
-          port = 1122;
+          HostName = "backwards";
+          User = "alex";
+          IdentityFile = "/home/alex/.ssh/alex.pinwheel-backwards";
+          Port = 1122;
         };
 
         "tadpole" = {
-          hostname = "65.21.106.222";
-          user = "alex";
-          identityFile = "/home/alex/.ssh/alex.pinwheel-tadpole";
-          port = 1122;
+          HostName = "65.21.106.222";
+          User = "alex";
+          IdentityFile = "/home/alex/.ssh/alex.pinwheel-tadpole";
+          Port = 1122;
         };
 
         "github.com" = {
-          hostname = "github.com";
-          identityFile = "/home/alex/.ssh/alex.pinwheel-github.com";
+          HostName = "github.com";
+          IdentityFile = "/home/alex/.ssh/alex.pinwheel-github.com";
         };
 
         "git.ppp.pm" = {
-          hostname = "git.ppp.pm";
-          identityFile = "/home/alex/.ssh/alex.pinwheel-git.ppp.pm";
+          HostName = "git.ppp.pm";
+          IdentityFile = "/home/alex/.ssh/alex.pinwheel-git.ppp.pm";
         };
 
         "*" = {
-          forwardAgent = false;
-          addKeysToAgent = "yes";
-          compression = false;
-          serverAliveInterval = 0;
-          serverAliveCountMax = 3;
-          hashKnownHosts = false;
-          userKnownHostsFile = "~/.ssh/known_hosts";
-          controlMaster = "no";
-          controlPath = "~/.ssh/master-%r@%n:%p";
-          controlPersist = "no";
+          ForwardAgent = false;
+          AddKeysToAgent = "yes";
+          Compression = false;
+          ServerAliveInterval = 0;
+          ServerAliveCountMax = 3;
+          HashKnownHosts = false;
+          UserKnownHostsFile = "~/.ssh/known_hosts";
+          ControlMaster = "no";
+          ControlPath = "~/.ssh/master-%r@%n:%p";
+          ControlPersist = "no";
         };
       };
     };

hosts/tadpole/modules/ssh/default.nix

@@ -21,24 +21,25 @@ in
     home-manager.users.alex = {
       programs.ssh = {
         enable = true;
+        enableDefaultConfig = false;
 
-        matchBlocks = {
+        settings = {
           "git.ppp.pm" = {
-            hostname = "git.ppp.pm";
-            identityFile = "/home/alex/.ssh/alex.tadpole-git.ppp.pm";
+            HostName = "git.ppp.pm";
+            IdentityFile = "/home/alex/.ssh/alex.tadpole-git.ppp.pm";
           };
 
           "*" = {
-            forwardAgent = false;
-            addKeysToAgent = "no";
-            compression = false;
-            serverAliveInterval = 0;
-            serverAliveCountMax = 3;
-            hashKnownHosts = false;
-            userKnownHostsFile = "~/.ssh/known_hosts";
-            controlMaster = "no";
-            controlPath = "~/.ssh/master-%r@%n:%p";
-            controlPersist = "no";
+            ForwardAgent = false;
+            AddKeysToAgent = "no";
+            Compression = false;
+            ServerAliveInterval = 0;
+            ServerAliveCountMax = 3;
+            HashKnownHosts = false;
+            UserKnownHostsFile = "~/.ssh/known_hosts";
+            ControlMaster = "no";
+            ControlPath = "~/.ssh/master-%r@%n:%p";
+            ControlPersist = "no";
           };
         };
       };