feat(nix): add flake to support nix builds

.gitignore

@@ -7,6 +7,7 @@ node_modules
 out
 dist
 *.tgz
+result
 
 # code coverage
 coverage

.nix/nix-deps-hash.txt

@@ -0,0 +1 @@
+sha256-Lr3M22JlMcX+HTZay2A1rN/zwGnznIjaib3E3y0Aob0=

.nix/package.nix

@@ -0,0 +1,65 @@
+{pkgs}: let
+  packageData = builtins.fromJSON (builtins.readFile ../package.json);
+
+  # Fetch dependencies (Network enabled, verified by hash)
+  bunDeps = pkgs.stdenv.mkDerivation {
+    pname = "hunk-deps";
+    inherit (packageData) version;
+    src = ../.;
+    dontCheckForBrokenSymlinks = true;
+    nativeBuildInputs = [pkgs.bun];
+    outputHashAlgo = "sha256";
+    outputHashMode = "recursive";
+    outputHash = pkgs.lib.fileContents ./nix-deps-hash.txt;
+
+    buildPhase = ''
+      export HOME=$TMPDIR
+      bun install --frozen-lockfile --no-progress --ignore-scripts
+    '';
+
+    installPhase = ''
+      mkdir -p $out
+      cp -R node_modules $out/
+    '';
+  };
+in
+  pkgs.stdenv.mkDerivation {
+    pname = "hunk";
+    inherit (packageData) version;
+    src = ../.;
+    dontStrip = true;
+
+    nativeBuildInputs = with pkgs; [
+      bun
+      bash
+    ];
+
+    buildPhase = ''
+      runHook preBuild
+
+      # Copy the pre-fetched dependencies
+      cp -R ${bunDeps}/node_modules ./node_modules
+      chmod -R +w ./node_modules
+
+      # Use project's custom build script
+      bun run build:bin
+
+      runHook postBuild
+    '';
+
+    installPhase = ''
+      runHook preInstall
+      mkdir -p $out/bin
+      cp ./dist/hunk $out/bin/hunk
+      chmod +x $out/bin/hunk
+      runHook postInstall
+    '';
+
+    meta = with pkgs.lib; {
+      description = "Terminal diff viewer for agentic changesets";
+      homepage = "https://github.com/modem-dev/hunk";
+      license = licenses.mit;
+      mainProgram = "hunk";
+      platforms = [ "x86_64-linux" "aarch64-linux" "x86_64-darwin" "aarch64-darwin" ];
+    };
+  }

flake.nix

@@ -0,0 +1,36 @@
+{
+  description = "Hunk - Review-first terminal diff viewer for agentic coders";
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    systems.url = "github:nix-systems/default";
+  };
+
+  outputs = {
+    systems,
+    nixpkgs,
+    ...
+  }: let
+    eachSystem = nixpkgs.lib.genAttrs (import systems);
+  in {
+    packages = eachSystem (
+      system: let
+        pkgs = import nixpkgs {inherit system;};
+      in {
+        default = import ./.nix/package.nix {inherit pkgs;};
+      }
+    );
+    devShells = eachSystem (
+      system: let
+        pkgs = import nixpkgs {inherit system;};
+      in {
+        default = pkgs.mkShell {
+          buildInputs = with pkgs; [
+            bun
+            nodejs
+            git
+          ];
+        };
+      }
+    );
+  };
+}

package.json

@@ -69,7 +69,8 @@
     "bench:bootstrap-load": "bun run benchmarks/bootstrap-load.ts",
     "bench:highlight-prefetch": "bun run benchmarks/highlight-prefetch.ts",
     "bench:large-stream": "bun run benchmarks/large-stream.ts",
-    "bench:large-stream-profile": "bun run benchmarks/large-stream-profile.ts"
+    "bench:large-stream-profile": "bun run benchmarks/large-stream-profile.ts",
+    "nix:update-hash": "bash ./scripts/update-nix-hash.sh"
   },
   "dependencies": {
     "@pierre/diffs": "^1.1.19",

scripts/update-nix-hash.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -e
+
+echo "Resetting Nix dependency hash..."
+echo "sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=" >.nix/nix-deps-hash.txt
+
+echo "Running Nix build to calculate new hash (this will intentionally fail)..."
+OUTPUT=$(nix build 2>&1 || true)
+NEW_HASH=$(echo "$OUTPUT" | grep -oE 'got:[[:space:]]+sha256-[a-zA-Z0-9+/=]+' | sed 's/got:[[:space:]]*//')
+
+if [ -n "$NEW_HASH" ]; then
+  echo "$NEW_HASH" >.nix/nix-deps-hash.txt
+  echo "✅ Successfully updated .nix/nix-deps-hash.txt to: $NEW_HASH"
+else
+  echo "❌ Failed to extract hash. Did the build succeed unexpectedly?"
+  echo "Nix output:"
+  echo "$OUTPUT"
+  exit 1
+fi