From 52fe0b813d3081d7bcb394a35806d13258827453 Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Wed, 20 May 2026 13:56:10 +0100
Subject: feat(pkg,nix): migrate build orchestrators + debuggers to nix; drop
 toolchains
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Migrated to Home-Manager (nix/common.nix):

  cmake, ninja, ccache, sccache (build orchestrators — they only
    delegate to whatever compiler is on PATH, don't ship one
    themselves, so no ABI shadowing risk)
  valgrind (instruments at syscall/library boundary; works fine with
    pacman-built target binaries)
  doxygen (source-only documentation tool; was accidentally dropped
    in the previous sweep — restored here)

Dropped entirely (per-project flake.nix + direnv .envrc instead):

  clang, lld, mold, rustup, npm

  Rationale: these are language/toolchain-specific compilers and
  linkers; when a project needs them, the project's own flake provides
  the version it wants, pinned in flake.lock. base-devel still ships
  gcc/ld/as/make for general-purpose system builds and one-offs.

  npm is also dropped from pacman; nodejs_24 in nix/common.nix already
  ships npm for the editor/AI-agent path. Project-side npm comes via
  per-project flake when needed.

Updated nix/common.nix policy comment to match: only ban the actual
compilers/linkers (cc/gcc/clang/ld) and forbidden runtimes (cargo,
rustc, go, python3) — build orchestrators and instrumentation tools
are explicitly allowed.

The --- dev --- section in base.txt is now just perf and podman-*
(kernel-coupled / system-runtime-coupled).
---
 meta/base.txt | 23 +++++++----------------
 1 file changed, 7 insertions(+), 16 deletions(-)

(limited to 'meta')

diff --git a/meta/base.txt b/meta/base.txt
index 19407f5..2fa95f8 100644
--- a/meta/base.txt
+++ b/meta/base.txt
@@ -58,24 +58,15 @@ ell
 # direnv's source_url with a content hash, so no extra package needed.) ---
 nix
 
-# --- dev (compiler / linker / build-system / language toolchains — these
-# MUST stay on pacman: nix/common.nix is forbidden from shipping them
-# because nix-store paths on PATH would shadow the system ones and
-# silently link projects against nixpkgs glibc instead of the system
-# sysroot. See policy comment at the top of nix/common.nix.) ---
-ccache
-clang
-cmake
-lld
-mold
-ninja
-npm
-perf
+# --- dev (system-coupled runtimes only — base-devel ships gcc/ld/as/make
+# for general-purpose builds; the orchestrators (cmake/ninja/ccache/
+# sccache), debuggers and toolchain-specific compilers/linkers live in
+# nix instead. clang/lld/mold/rustup/go are intentionally absent — when
+# a project needs them, the project's flake.nix + direnv `.envrc`
+# provide them.) ---
+perf             # links against running kernel ABI; must match kernel pkg
 podman-compose
 podman-docker
-rustup
-sccache
-valgrind
 
 # --- sound ---
 alsa-utils
-- 
cgit v1.3.1