diff --git a/.roborev.toml b/.roborev.toml
index f808c1a52..1a554d395 100644
--- a/.roborev.toml
+++ b/.roborev.toml
@@ -1,5 +1,5 @@
 # Default agent for this repo when no workflow-specific agent is set.
-agent = 'gemini'
+agent = 'codex'
 # Default model for this repo when no workflow-specific model is set.
 model = ''
 # Backup agent for this repo if the primary agent fails.
diff --git a/Makefile b/Makefile
index f6860123b..76d8c6d70 100644
--- a/Makefile
+++ b/Makefile
@@ -1091,7 +1091,7 @@ launchctl-tmux-session-logger: ## Restart tmux-session-logger launchd agent.
 ##@ Systemd Services (Linux)
 
 .PHONY: systemctl
-systemctl: systemctl-docker systemctl-cliproxyapi systemctl-cliproxyapi-backup systemctl-code-syncer systemctl-docker-postgres systemctl-dolt systemctl-dotfiles-updater systemctl-make-updater systemctl-neverssl-keepalive systemctl-obsidian systemctl-ollama systemctl-openclaw systemctl-paperclip systemctl-roborev systemctl-tmux-session-logger ## Restart all systemd user services.
+systemctl: systemctl-docker systemctl-cliproxyapi systemctl-cliproxyapi-backup systemctl-code-syncer systemctl-docker-postgres systemctl-dolt systemctl-dotfiles-updater systemctl-make-updater systemctl-neverssl-keepalive systemctl-noctalia-shell systemctl-obsidian systemctl-ollama systemctl-openclaw systemctl-paperclip systemctl-roborev systemctl-tmux-session-logger ## Restart all systemd user services.
 
 .PHONY: systemctl-docker
 systemctl-docker: ## Start Docker daemon.
@@ -1153,6 +1153,22 @@ systemctl-neverssl-keepalive: ## Restart neverssl-keepalive systemd timer and se
 	@systemctl --user restart neverssl-keepalive.timer || true
 	@echo "✅ neverssl-keepalive restarted"
 
+.PHONY: systemctl-noctalia-shell
+systemctl-noctalia-shell: ## Restart noctalia-shell (quickshell) after Nix rebuild (matic only).
+	@echo "🔄 Restarting noctalia-shell..."
+	@if [ "$(DETECTED_HOST)" = "matic" ] || [ "$(HOST)" = "matic" ]; then \
+		if [ -n "$$WAYLAND_DISPLAY" ]; then \
+			pkill -x quickshell || true; \
+			sleep 1; \
+			nohup noctalia-shell >/dev/null 2>&1 & \
+		else \
+			echo "Skipping noctalia-shell (WAYLAND_DISPLAY not set)"; \
+		fi; \
+	else \
+		echo "Skipping noctalia-shell (host not matic)"; \
+	fi
+	@echo "✅ noctalia-shell restarted"
+
 .PHONY: systemctl-obsidian
 systemctl-obsidian: ## Restart Obsidian headless systemd user service.
 	@echo "🔄 Restarting obsidian..."
diff --git a/config/ghostty/config b/config/ghostty/config
index 25bbe3ad3..44f4e9f88 100644
--- a/config/ghostty/config
+++ b/config/ghostty/config
@@ -9,7 +9,7 @@ confirm-close-surface = true
 macos-option-as-alt = true
 macos-titlebar-style = "tabs"
 shell-integration = fish
-command = __FISH_PATH__ --login
+command = fish --login
 cursor-style = bar
 cursor-style-blink = true
 mouse-hide-while-typing = true
diff --git a/config/ghostty/default.nix b/config/ghostty/default.nix
index e971d37e2..8f3c87eaf 100644
--- a/config/ghostty/default.nix
+++ b/config/ghostty/default.nix
@@ -1,13 +1,10 @@
 { pkgs, ... }:
 let
   inherit (pkgs) lib;
-  fishPath = "${pkgs.fish}/bin/fish";
-  staticConfig = builtins.readFile ./config;
-  configText = builtins.replaceStrings [ "__FISH_PATH__" ] [ fishPath ] staticConfig;
 in
 {
   xdg.configFile."ghostty/config" = {
-    text = configText;
+    source = ./config;
   };
   xdg.configFile."ghostty/themes/Dracula Custom" = {
     source = ./themes + "/Dracula Custom";
@@ -20,7 +17,7 @@ in
   home.file."Library/Application Support/com.mitchellh.ghostty/config" =
     lib.mkIf pkgs.stdenv.isDarwin
       {
-        text = configText;
+        source = ./config;
       };
   home.file."Library/Application Support/com.mitchellh.ghostty/themes/Dracula Custom" =
     lib.mkIf pkgs.stdenv.isDarwin
diff --git a/config/gtk/default.nix b/config/gtk/default.nix
index 14dd0c362..20faf8c63 100644
--- a/config/gtk/default.nix
+++ b/config/gtk/default.nix
@@ -18,9 +18,6 @@
       name = "Adwaita";
       size = 24;
     };
-    gtk4.theme = {
-      name = "Adwaita";
-      package = pkgs.gnome-themes-extra;
-    };
+    gtk4.theme = null;
   };
 }
diff --git a/config/keyd/default.conf b/config/keyd/default.conf
index ef811097b..8549f385e 100644
--- a/config/keyd/default.conf
+++ b/config/keyd/default.conf
@@ -1,5 +1,9 @@
 [ids]
 *
+# Framework 13 AI 300 embedded controller (I2C HID). keyd's `*` wildcard
+# does not grab I2C HID consumer control devices, so the Framework key
+# bypasses keyd unless this id is listed explicitly.
+32ac:0006
 # xremap creates its own virtual keyboard device via uinput. By default, xremap
 # uses vendor/product 0x1234/0x5678 for that output device.
 #
diff --git a/home-manager/packages/default.nix b/home-manager/packages/default.nix
index 24439b0ea..ee9f61197 100644
--- a/home-manager/packages/default.nix
+++ b/home-manager/packages/default.nix
@@ -65,6 +65,7 @@ with pkgs;
   jujutsu
   just
   k6
+  lean4
   (if stdenv.isLinux && isDesktop then llama-cpp.override { vulkanSupport = true; } else llama-cpp)
   llm
   lsof