Detects configuration drift between the declared NixOS config and the actual running system state, and reports how to re-converge. Use when a host behaves oddly after manual changes, before a deploy to confirm the tree matches reality, or when auditing declarative-state integrity. Reports findings; enforce with a…
Plans and orchestrates multi-host NixOS deployments with dependency ordering, parallelism, and rollback awareness. Use when rolling changes across p620/p510/razer, sequencing a dependent rollout, or deciding safe deploy order. Recommends the plan; you run the switch.
Generates and refreshes documentation for NixOS modules and infrastructure so docs track the code. Use when module options changed, a README is stale, or you want docs regenerated from the current config. Mechanical sync work.
Read-only scan of NixOS/nixpkgs GitHub issues for known bugs affecting packages in your closure. Use before a flake bump or when an update feels risky, to surface breaking issues early. Reports only, changes nothing.
Analyzes systemd/journal logs, traces failures to root cause, and drafts NixOS config fixes. Use when a service is failing, after a bad boot, or when diagnosing an error you can't place. Generates fixes for your review.
Detects duplication and anti-patterns across NixOS modules and proposes/applies refactors following docs/NIXOS-ANTI-PATTERNS.md. Use when consolidating repeated config, cleaning a grown module, or acting on an anti-pattern finding.
Read-only audit of Nix/NixOS files against this repo's anti-pattern catalogue (docs/NIXOS-ANTI-PATTERNS.md) and best-practices guide (docs/PATTERNS.md). Use when reviewing module changes, before committing host-config edits, or when triaging a PR. Reports findings only — does NOT edit files. Pair with /nix-fix for…
Runs deadnix/statix and related linters on NixOS files and applies mechanical fixes. Use before committing, after editing a module, or to sweep dead code and lint violations. Fast, rule-based checking.
Diagnoses and resolves package conflicts, version mismatches, and dependency collisions in the config. Use when a build fails on a collision, two modules pull conflicting versions, or an override needs untangling.
Profiles build times and evaluation cost and pinpoints bottlenecks with optimization suggestions. Use when a rebuild feels slow, eval time crept up, or you're tuning closure size. Analysis and recommendations only.
Audits NixOS hosts for security weaknesses, missing systemd hardening, and exposure, and proposes fixes per the repo's hardening patterns. Use for a periodic security sweep, after adding a service, or before exposing something.
Generates unit/integration/smoke tests for NixOS modules and configs. Use when a module has no coverage, after adding a feature flag, or to scaffold a NixOS VM test. Produces tests for your review.
Orchestrates a safe NixOS update cycle: flake bump, issue check, test build, and completion alert. Use for a routine guarded update rather than a raw nix flake update. Reports results and stops before the switch.