Move stow under home-manager activation

README.md

@@ -23,5 +23,4 @@ nix run \
     switch \
       --extra-experimental-features 'nix-command flakes' \
       --flake .#artem@deimos
-stow legacy
 ```

hosts/deimos/nixos.nix

@@ -137,6 +137,8 @@ in
         mount-cwd
 
         (readwrite (noescape "~/.gemini"))
+        # The above is a stow-controlled symlink to the following.
+        (readwrite (noescape "~/dotfiles/legacy/.gemini"))
 
         (add-pkg-deps (
           with pkgs;

legacy/.gemini/policies/coding.toml

@@ -34,6 +34,18 @@ commandPrefix = "git show"
 decision = "allow"
 priority = 100
 
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "git log"
+decision = "allow"
+priority = 100
+
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "git diff"
+decision = "allow"
+priority = 100
+
 [[rule]]
 toolName = "run_shell_command"
 commandPrefix = "mkdir"
@@ -82,3 +94,21 @@ toolName = "run_shell_command"
 commandPrefix = "ls"
 decision = "allow"
 priority = 100
+
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "find"
+decision = "allow"
+priority = 100
+
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "head"
+decision = "allow"
+priority = 100
+
+[[rule]]
+toolName = "run_shell_command"
+commandPrefix = "echo"
+decision = "allow"
+priority = 100

modules/home/common.nix

@@ -1,4 +1,9 @@
-{ pkgs, primaryUser, ... }:
+{
+  pkgs,
+  lib,
+  primaryUser,
+  ...
+}:
 {
   home.username = primaryUser;
   home.packages = with pkgs; [
@@ -7,6 +12,11 @@
     gemini-cli
     silver-searcher
   ];
+  home.activation.stowLegacy = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
+    if [ -d "$HOME/dotfiles" ]; then
+      run ${pkgs.stow}/bin/stow -d $HOME/dotfiles -t $HOME legacy
+    fi
+  '';
 
   programs.zsh = {
     enable = true;