From c96dbf8d46056785310843f908c43cc954a39066 Mon Sep 17 00:00:00 2001
From: Barrett Ruth <62671086+barrettruth@users.noreply.github.com>
Date: Wed, 4 Mar 2026 14:10:07 -0500
Subject: [PATCH] Ci/digest final (#69)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* ci(digest): approve with DIGEST_PAT after disabling require_last_push_approval

require_last_push_approval blocked barrettruth from approving their
own push. Disabled that restriction in the ruleset — 1 approval is
still required for all PRs, but the approver can now be the pusher.
DIGEST_PAT (barrettruth) approves, CI runs via PAT push, auto-merge
fires when checks pass.

* ci: format + scripts

* ci: nix
---
 flake.nix     | 5 ++++-
 scripts/ci.sh | 2 ++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index aebd6d8..fb5faf0 100644
--- a/flake.nix
+++ b/flake.nix
@@ -13,9 +13,12 @@
       ...
     }:
     let
-      forEachSystem = f: nixpkgs.lib.genAttrs (import systems) (system: f nixpkgs.legacyPackages.${system});
+      forEachSystem =
+        f: nixpkgs.lib.genAttrs (import systems) (system: f nixpkgs.legacyPackages.${system});
     in
     {
+      formatter = forEachSystem (pkgs: pkgs.nixfmt-tree);
+
       devShells = forEachSystem (pkgs: {
         default = pkgs.mkShell {
           packages = [
diff --git a/scripts/ci.sh b/scripts/ci.sh
index 3e9356d..7714909 100755
--- a/scripts/ci.sh
+++ b/scripts/ci.sh
@@ -4,4 +4,6 @@ set -eu
 nix develop --command stylua --check lua spec
 git ls-files '*.lua' | xargs nix develop --command selene --display-style quiet
 nix develop --command prettier --check .
+nix fmt
+git diff --exit-code -- '*.nix'
 nix develop --command busted