flake.nix

{
  description = "ContextCloak: Gordian Envelope cryptographic primitives for Promptyst";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    flake-utils.url = "github:numtide/flake-utils";
    typix = {
      url = "github:loqusion/typix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
  };

  outputs = { nixpkgs, flake-utils, typix, ... }:
    flake-utils.lib.eachDefaultSystem (system:
      let
        pkgs = nixpkgs.legacyPackages.${system};
        typixLib = typix.lib.${system};
        src = pkgs.lib.cleanSourceWith {
          src = ./.;
          filter = path: type:
            type == "directory"
            || pkgs.lib.hasSuffix ".typ" path
            || pkgs.lib.hasSuffix ".toml" path;
        };

        mkTestCheck = testFile: typixLib.mkTypstDerivation {
          name = "contextcloak-${builtins.replaceStrings ["/"] ["-"] testFile}";
          inherit src;
          buildPhaseTypstCommand = "typst compile --root . ${testFile} output.pdf";
          installPhaseCommand = "touch $out";
        };
      in {
        checks = {
          test-envelope = mkTestCheck "tests/test-envelope.typ";
        };

        devShells.default = typixLib.devShell {
          packages = [ pkgs.just ];
        };
      }
    );
}