# Supply-chain gate for `update` in modules/home/zsh.nix. nix, claude, skills
# and gh come from the user's PATH: they are configured elsewhere, and nix
# must match the installed daemon.
{
  writeShellApplication,
  coreutils,
  curl,
  gawk,
  git,
  gnugrep,
  gnused,
  jq,
  vulnix,
}:

writeShellApplication {
  name = "vet";
  runtimeInputs = [
    coreutils
    curl
    gawk
    git
    gnugrep
    gnused
    jq
    vulnix
  ];
  runtimeEnv.VET_PROMPT = ./prompt.md;
  text = builtins.readFile ./vet.sh;
}