feat(emacs): add org-caldav integration for Nextcloud calendar sync

- Enable org-caldav package in packages.el
- Configure base org-caldav settings (URL, timezone, sync behavior)
- Add Personal calendar two-way sync (~/org/personal-calendar.org)
- Add Tasks calendar one-way sync from todo.org
- Add keybinding SPC o C for manual sync
- Document setup requirements in config comments

Note: Conflict resolution is 'Org always wins' (org-caldav limitation).
User needs to create Nextcloud app password and ~/.authinfo.gpg.

Refs: x-5tb, x-5tb.1, x-5tb.2, x-5tb.3

.beads/config.yaml

@@ -6,7 +6,7 @@
 # Issue prefix for this repository (used by bd init)
 # If not set, bd init will auto-detect from directory name
 # Example: issue-prefix: "myproject" creates issues like "myproject-1", "myproject-2", etc.
-# issue-prefix: ""
+issue-prefix: "x"
 
 # Use no-db mode: load from JSONL, no SQLite, write back after each command
 # When true, bd will use .beads/issues.jsonl as the source of truth
@@ -60,3 +60,5 @@ sync-branch: "beads-sync"
 # - linear.api-key
 # - github.org
 # - github.repo
+
+routing.mode: "explicit"

.gitea/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: https://git.johnogle.info/johno/gitea-actions/nix-setup@main
+      - uses: https://git.johnogle.info/johno/gitea-actions/nix-setup@v1
 
       - name: Check flake
         run: nix flake check

.gitignore

@@ -1,3 +1,8 @@
 result
 thoughts
 .beads
+
+# Gas Town (added by gt)
+.runtime/
+.claude/
+.logs/

flake.lock

@@ -8,17 +8,17 @@
         ]
       },
       "locked": {
-        "lastModified": 1768509852,
+        "lastModified": 1769204611,
-        "narHash": "sha256-4oZXrqBjK9V8qKHoxlfil20qcJdOU8HXJA4627nX1nQ=",
+        "narHash": "sha256-OcrHcO/TD4x5T7n1N1q8LgxA5Wb2cOaSsbj7HFzn6RA=",
-        "owner": "steveyegge",
+        "ref": "refs/heads/main",
-        "repo": "beads",
+        "rev": "a45b441bc57e65380e44cab1f4a43f8033aa26dd",
-        "rev": "d3db8253ff09e0f139ffbb6f839afe13acbf7bdb",
+        "revCount": 5462,
-        "type": "github"
+        "type": "git",
+        "url": "ssh://git@git.johnogle.info:2222/johno/beads.git"
       },
       "original": {
-        "owner": "steveyegge",
+        "type": "git",
-        "repo": "beads",
+        "url": "ssh://git@git.johnogle.info:2222/johno/beads.git"
-        "type": "github"
       }
     },
     "doomemacs": {
@@ -81,17 +81,17 @@
     "gastown": {
       "flake": false,
       "locked": {
-        "lastModified": 1768682809,
+        "lastModified": 1769213751,
-        "narHash": "sha256-PCP5PQasLqL5/OVNw6LsjiFfIU4RNniicTUcVq2ggHg=",
+        "narHash": "sha256-45+0Q7cSCKuBamVuJUr2zsDr8ae79I1WDjAHCA/YYt0=",
-        "owner": "steveyegge",
+        "ref": "refs/heads/main",
-        "repo": "gastown",
+        "rev": "089cf64c0b55fb6750311068b2765e24a5df0d1d",
-        "rev": "9cd2696abe68ac0defc612ace5028d327d4f207d",
+        "revCount": 3022,
-        "type": "github"
+        "type": "git",
+        "url": "ssh://git@git.johnogle.info:2222/johno/gastown.git"
       },
       "original": {
-        "owner": "steveyegge",
+        "type": "git",
-        "repo": "gastown",
+        "url": "ssh://git@git.johnogle.info:2222/johno/gastown.git"
-        "type": "github"
       }
     },
     "google-cookie-retrieval": {

flake.nix

@@ -43,12 +43,12 @@
     };
 
     beads = {
-      url = "github:steveyegge/beads";
+      url = "git+ssh://git@git.johnogle.info:2222/johno/beads.git";
       inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
 
     gastown = {
-      url = "github:steveyegge/gastown";
+      url = "git+ssh://git@git.johnogle.info:2222/johno/gastown.git";
       flake = false;  # No flake.nix upstream yet
     };
 
@@ -89,11 +89,20 @@
     };
 
 
+    # Shared unstable overlays for custom package builds
+    customUnstableOverlays = [
+      # Override claude-code in unstable to use our custom GCS-based build
+      # (needed for corporate networks that block npm registry)
+      (ufinal: uprev: {
+        claude-code = uprev.callPackage ./packages/claude-code {};
+      })
+    ];
+
     nixosModules = [
       ./roles
       inputs.home-manager.nixosModules.home-manager
       {
-        nixpkgs.overlays = [ (mkBaseOverlay {}) ];
+        nixpkgs.overlays = [ (mkBaseOverlay { unstableOverlays = customUnstableOverlays; }) ];
       }
       (mkHomeManagerConfig {
         sharedModules = [ inputs.plasma-manager.homeModules.plasma-manager ];
@@ -106,7 +115,7 @@
       inputs.home-manager-unstable.nixosModules.home-manager
       inputs.jovian.nixosModules.jovian
       {
-        nixpkgs.overlays = [ (mkBaseOverlay {}) ];
+        nixpkgs.overlays = [ (mkBaseOverlay { unstableOverlays = customUnstableOverlays; }) ];
       }
       (mkHomeManagerConfig {
         sharedModules = [ inputs.plasma-manager-unstable.homeModules.plasma-manager ];
@@ -117,17 +126,7 @@
       ./roles/darwin.nix
       inputs.home-manager.darwinModules.home-manager
       {
-        nixpkgs.overlays = [
+        nixpkgs.overlays = [ (mkBaseOverlay { unstableOverlays = customUnstableOverlays; }) ];
-          (mkBaseOverlay {
-            # Override claude-code in unstable to use our custom GCS-based build
-            # (needed for corporate networks that block npm registry)
-            unstableOverlays = [
-              (ufinal: uprev: {
-                claude-code = uprev.callPackage ./packages/claude-code {};
-              })
-            ];
-          })
-        ];
       }
       (mkHomeManagerConfig { sharedModules = []; })
     ];

home/roles/development/default.nix

@@ -65,6 +65,7 @@ in
       pkgs.unstable.claude-code
       pkgs.unstable.claude-code-router
       pkgs.unstable.codex
+      pkgs.sqlite
 
       # Custom packages
       pkgs.custom.tea-rbw

home/roles/emacs/doom/config.el

@@ -83,15 +83,62 @@
        "d" #'org-agenda-day-view
        "w" #'org-agenda-week-view))
 
-;; (use-package! org-caldav
+;; org-caldav: Sync Org entries with Nextcloud CalDAV
-;;   :defer t
+;; Setup requirements:
-;;   :config
+;; 1. Create Nextcloud app password: Settings -> Security -> Devices & sessions
-;;   (setq org-caldav-url "https://nextcloud.johnogle.info/remote.php/dav/calendars/johno"
+;; 2. Store in rbw: rbw add nextcloud-caldav (username in notes, app password as secret)
-;;         org-caldav-calendar-id "personal"
+;; 3. Run: doom sync
-;;         org-icalendar-timezone "America/Los_Angeles"
+;; 4. Test: M-x org-caldav-sync
-;;         org-caldav-inbox "~/org/calendar.org"
+;;
-;;         org-caldav-files nil
+;; Note: Conflict resolution is "Org always wins" - treat Org as source of truth
-;;         org-caldav-sync-direction 'cal->org))
+;; for entries that originated in Org.
+(use-package! org-caldav
+  :after org
+  :commands (org-caldav-sync)
+  :init
+  (map! :leader
+        :desc "Sync calendar" "o C" #'org-caldav-sync)
+  :config
+  ;; Nextcloud CalDAV base URL
+  (setq org-caldav-url "https://nextcloud.johnogle.info/remote.php/dav/calendars/johno")
+
+  ;; Timezone for iCalendar export
+  (setq org-icalendar-timezone "America/Los_Angeles")
+
+  ;; Sync state storage (in org directory for multi-machine sync)
+  (setq org-caldav-save-directory (expand-file-name ".org-caldav/" org-directory))
+
+  ;; Backup file for entries before modification
+  (setq org-caldav-backup-file (expand-file-name ".org-caldav/backup.org" org-directory))
+
+  ;; Sync behavior: bidirectional by default
+  (setq org-caldav-sync-direction 'twoway)
+
+  ;; What changes from calendar sync back to Org (conservative: title and timestamp only)
+  (setq org-caldav-sync-changes-to-org 'title-and-timestamp)
+
+  ;; Deletion handling: ask before deleting
+  (setq org-caldav-delete-calendar-entries 'ask)
+  (setq org-caldav-delete-org-entries 'ask)
+
+  ;; Enable TODO/VTODO sync
+  (setq org-icalendar-include-todo 'all)
+  (setq org-caldav-sync-todo t)
+
+  ;; Calendar-specific configuration
+  (setq org-caldav-calendars
+        '(;; Personal calendar: two-way sync with family-shared Nextcloud calendar
+          (:calendar-id "personal"
+           :inbox "~/org/personal-calendar.org"
+           :files ("~/org/personal-calendar.org"))
+
+          ;; Tasks calendar: one-way sync (org → calendar only)
+          ;; SCHEDULED/DEADLINE items from todo.org push to private Tasks calendar.
+          ;; No inbox = no download from calendar (effectively one-way).
+          ;; Note: Create 'tasks' calendar in Nextcloud first, keep it private.
+          (:calendar-id "tasks"
+           :files ("~/org/todo.org"))))
+  )
 
 (defun my/get-rbw-password (alias)
   "Return the password for ALIAS via rbw, unlocking the vault only if needed."

home/roles/emacs/doom/packages.el

@@ -49,7 +49,7 @@
 ;; ...Or *all* packages (NOT RECOMMENDED; will likely break things)
 ;; (unpin! t)
 
-;; (package! org-caldav)
+(package! org-caldav)
 
 ;; Note: Packages with custom recipes must be pinned for nix-doom-emacs-unstraightened
 ;; to build deterministically. Update pins when upgrading packages.

packages/claude-code/default.nix

@@ -1,7 +1,8 @@
 { lib
 , stdenv
 , fetchurl
-, autoPatchelfHook
+, patchelf
+, glibc
 }:
 
 let
@@ -38,8 +39,14 @@ in stdenv.mkDerivation {
 
   dontUnpack = true;
   dontBuild = true;
+  # Bun standalone binaries have JS code appended after the ELF sections
+  # stripping/patching would remove or corrupt this appended data
+  dontStrip = true;
+  dontPatchELF = true;
 
-  nativeBuildInputs = lib.optionals stdenv.isLinux [ autoPatchelfHook ];
+  # Don't use autoPatchelfHook - it rewrites the ELF and strips the appended
+  # bun bundle (the JS code is appended after the ELF sections)
+  nativeBuildInputs = lib.optionals stdenv.isLinux [ patchelf ];
 
   installPhase = ''
     runHook preInstall
@@ -49,6 +56,14 @@ in stdenv.mkDerivation {
     runHook postInstall
   '';
 
+  # Manually patch the interpreter for bun standalone binaries
+  # patchelf --set-interpreter modifies in-place without rewriting the entire ELF,
+  # preserving the appended JS bundle that bun needs at runtime
+  postFixup = lib.optionalString stdenv.isLinux ''
+    interpreter="${glibc}/lib/${if stdenv.hostPlatform.system == "aarch64-linux" then "ld-linux-aarch64.so.1" else "ld-linux-x86-64.so.2"}"
+    patchelf --set-interpreter "$interpreter" $out/bin/claude
+  '';
+
   meta = with lib; {
     description = "Terminal-based AI coding assistant from Anthropic";
     homepage = "https://www.anthropic.com/claude-code";