chore: sync nix and Justfile improvements from main

- flake.nix: use allowUnfreePredicate instead of allowUnfree, remove
  goVersion overlay in favor of explicit go_1_24, organize packages
  into named lists, fix aarch64-linux hash typo
- Justfile: reorder pre-commit deps, add golangci-lint version print,
  add local build tag, add fmt recipe, guard generate-client with
  SPEAKEASY_API_KEY, fix missing newline at EOF

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sylr

Justfile

@@ -3,11 +3,12 @@ set dotenv-load
 default:
   @just --list
 
-pre-commit: tidy generate lint export-docs-events openapi generate-client
+pre-commit: tidy generate generate-client lint export-docs-events openapi
 pc: pre-commit
 
 lint:
-    golangci-lint run --fix --build-tags it --timeout 5m
+    golangci-lint --version
+    golangci-lint run --fix --build-tags it,local --timeout 5m
     for d in $(ls tools); do \
         pushd tools/$d; \
         golangci-lint run --fix --build-tags it --timeout 5m; \
@@ -41,12 +42,15 @@ tests:
     cat coverage.txt | grep -v debug.go | grep -v "/machine/" | grep -v "pb.go" > coverage2.txt
     mv coverage2.txt coverage.txt
 
+fmt:
+    @golangci-lint fmt
+
 openapi:
     yq eval-all '. as $item ireduce ({}; . * $item)' openapi/v1.yaml openapi/v2.yaml openapi/overlay.yaml > openapi.yaml
     npx -y widdershins {{justfile_directory()}}/openapi/v2.yaml -o {{justfile_directory()}}/docs/api/README.md --search false --language_tabs 'http:HTTP' --summary --omitHeader
 
 generate-client: openapi
-    @cd pkg/client && speakeasy run --skip-versioning
+    if [ ! -z "${SPEAKEASY_API_KEY:-}" ]; then cd pkg/client && speakeasy run --skip-versioning; fi
 
 release-local:
     @goreleaser release --nightly --skip=publish --clean
@@ -60,4 +64,4 @@ release:
 generate-grpc-replication:
     protoc --go_out=. --go_opt=paths=source_relative \
         --go-grpc_out=. --go-grpc_opt=paths=source_relative \
-        ./internal/replication/grpc/replication_service.proto
+        ./internal/replication/grpc/replication_service.proto

flake.nix

@@ -12,8 +12,6 @@
 
   outputs = { self, nixpkgs, nur }:
     let
-      goVersion = 24;
-
       supportedSystems = [
         "x86_64-linux"
         "aarch64-linux"
@@ -26,8 +24,10 @@
           let
             pkgs = import nixpkgs {
               inherit system;
-              overlays = [ self.overlays.default nur.overlays.default ];
-              config.allowUnfree = true;
+              overlays = [ nur.overlays.default ];
+              config.allowUnfreePredicate = pkg: builtins.elem (nixpkgs.lib.getName pkg) [
+                "goreleaser-pro"
+              ];
             };
           in
           f { pkgs = pkgs; system = system; }
@@ -42,17 +42,13 @@
       };
       speakeasyHashes = {
         "x86_64-linux"   = "632559a6bdc765ef42b81b8404fd0a3e5023919a0bb70ff7e40a8cc259545afd";
-        "aarch64-linux"  = "c74c502df3a05a2d69e6b282886df23354a319d0510d2c1a21fcc124b7ad00efGOROOT";
+        "aarch64-linux"  = "c74c502df3a05a2d69e6b282886df23354a319d0510d2c1a21fcc124b7ad00ef";
         "x86_64-darwin"  = "8814be1fdd4eaf6dcc7fb251ede5693e1d3d4c8e03986f8d37bfd59e049698b9";
         "aarch64-darwin" = "12c20fa485de4725c9730cb2e8936cab4b0961d0a956e9f4c45534371f2a6148";
       };
 
     in
     {
-      overlays.default = final: prev: {
-        go = final."go_1_${toString goVersion}";
-      };
-
       packages = forEachSupportedSystem ({ pkgs, system }:
         {
           speakeasy = pkgs.stdenv.mkDerivation {
@@ -85,30 +81,35 @@
       defaultPackage.aarch64-darwin = self.packages.aarch64-darwin.speakeasy;
 
       devShells = forEachSupportedSystem ({ pkgs, system }:
+        let
+          stablePackages = with pkgs; [
+            ginkgo
+            go_1_24
+            go-tools
+            golangci-lint
+            gomarkdoc
+            goperf
+            gotools
+            jdk11
+            jq
+            just
+            mockgen
+            nodejs_22
+            protobuf_27
+            protoc-gen-go
+            protoc-gen-go-grpc
+            yq-go
+          ];
+          otherPackages = [
+            pkgs.nur.repos.goreleaser.goreleaser-pro
+            self.packages.${system}.speakeasy
+          ];
+        in
         {
           default = pkgs.mkShell {
-            packages = with pkgs; [
-              go
-              gotools
-              go-tools
-              golangci-lint
-              ginkgo
-              yq-go
-              jq
-              pkgs.nur.repos.goreleaser.goreleaser-pro
-              mockgen
-              gomarkdoc
-              jdk11
-              just
-              nodejs_22
-              self.packages.${system}.speakeasy
-              goperf
-              protobuf_27
-              protoc-gen-go-grpc
-              protoc-gen-go
-            ];
+            packages = stablePackages ++ otherPackages;
           };
         }
       );
     };
-}
+}