stigui/flake.nix at main · nealfennimore/stigui · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    agentbox.url = "github:nealfennimore/agent-sandbox";
    flake-utils.url = "github:numtide/flake-utils";
  };

  outputs =
    {
      self,
      nixpkgs,
      agentbox,
      flake-utils,
    }:
    flake-utils.lib.eachDefaultSystem (
      system:
      let
        pkgs = import nixpkgs {
          inherit system;
          config.allowUnfree = true;
        };
        packages = with pkgs; [
          nodejs_22
          curl
          parallel
          unzip
          yq-go
          jq
          ripgrep
          (import ./stig-viewer.nix { inherit pkgs; })
        ];
        box = agentbox.lib.${system};
        claude = box.mkClaudeSandbox {
          extraPackages = packages;
          allowedDomains = box.agentDomains // {
            "crates.io" = "*";
            "index.crates.io" = "*";
            "static.crates.io" = "*";
          };
        };
      in
      {
        devShells.default = pkgs.mkShell {
          packages = [
            claude
          ]
          ++ packages;

          shellHook = "";
        };
      }
    );
}