diff --git a/recipes/incoming/cargo-binstall.toml b/recipes/incoming/cargo-binstall.toml
deleted file mode 100644
index 54b11947..00000000
--- a/recipes/incoming/cargo-binstall.toml
+++ /dev/null
@@ -1,22 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cargo-binstall"
-version = "1.20.0"
-
-[source]
-repo   = "https://github.com/cargo-bins/cargo-binstall"
-commit = "30b5ca8b54e1dcffd9548bc87ede1531310fdc67"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cargo-binstall"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cargo-binstall /out/usr/bin/cargo-binstall"
-
-# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
-# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): bzip2, xz, zstd
diff --git a/recipes/incoming/cargo-bloat.toml b/recipes/incoming/cargo-bloat.toml
deleted file mode 100644
index e615e476..00000000
--- a/recipes/incoming/cargo-bloat.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cargo-bloat"
-version = "0.12.1"
-
-[source]
-repo   = "https://github.com/RazrFalcon/cargo-bloat"
-commit = "69ccabda2b1671c4fd675e9a660af29ee985506f"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cargo-bloat"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cargo-bloat /out/usr/bin/cargo-bloat"
diff --git a/recipes/incoming/cargo-deny.toml b/recipes/incoming/cargo-deny.toml
deleted file mode 100644
index 0cddee45..00000000
--- a/recipes/incoming/cargo-deny.toml
+++ /dev/null
@@ -1,22 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cargo-deny"
-version = "0.19.9"
-
-[source]
-repo   = "https://github.com/EmbarkStudios/cargo-deny"
-commit = "1c9ca2b643ee15722178c1350501aabb024dd6f3"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cargo-deny"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cargo-deny /out/usr/bin/cargo-deny"
-
-# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
-# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): zstd
diff --git a/recipes/incoming/cargo-expand.toml b/recipes/incoming/cargo-expand.toml
deleted file mode 100644
index fbd9a3ae..00000000
--- a/recipes/incoming/cargo-expand.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cargo-expand"
-version = "1.0.122"
-
-[source]
-repo   = "https://github.com/dtolnay/cargo-expand"
-commit = "5c8d549b567d56bc8819f4efd34de0283dee54e0"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cargo-expand"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cargo-expand /out/usr/bin/cargo-expand"
diff --git a/recipes/incoming/cargo-machete.toml b/recipes/incoming/cargo-machete.toml
deleted file mode 100644
index e6044d83..00000000
--- a/recipes/incoming/cargo-machete.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cargo-machete"
-version = "0.9.2"
-
-[source]
-repo   = "https://github.com/bnjbvr/cargo-machete"
-commit = "ac30a525c0a8d163a92d727b3ff079ee3f6ecb08"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cargo-machete"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cargo-machete /out/usr/bin/cargo-machete"
diff --git a/recipes/incoming/cobalt.toml b/recipes/incoming/cobalt.toml
deleted file mode 100644
index 9a98614f..00000000
--- a/recipes/incoming/cobalt.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "cobalt"
-version = "0.20.4"
-
-[source]
-repo   = "https://github.com/cobalt-org/cobalt.rs"
-commit = "509f2436a51b629eef2bf1144d7ccf7a43c59cb1"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "cobalt"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/cobalt /out/usr/bin/cobalt"
diff --git a/recipes/incoming/fnm.toml b/recipes/incoming/fnm.toml
deleted file mode 100644
index 83de3060..00000000
--- a/recipes/incoming/fnm.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "fnm"
-version = "1.39.0"
-
-[source]
-repo   = "https://github.com/Schniz/fnm"
-commit = "d2555b46362ad8888213b76822631561371ce199"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "fnm"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/fnm /out/usr/bin/fnm"
diff --git a/recipes/incoming/git-absorb.toml b/recipes/incoming/git-absorb.toml
new file mode 100644
index 00000000..2d40946a
--- /dev/null
+++ b/recipes/incoming/git-absorb.toml
@@ -0,0 +1,48 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "git-absorb"
+version = "0.9.0"
+
+[source]
+tarball = "https://github.com/tummychow/git-absorb/archive/refs/tags/0.9.0.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "5a02cbbb4df65340705dd6ef721cd40d8ae7eadf6926f9682de3a6ade20d9a2b1caf51e69d32b9c47e2b7a16c864f58992fbe486387c480965cc816f2b713011"
+sha256  = "a0f74e6306d7fbd746d2b4a6856621d46a7f82e3e88b6bb8b6fc0480cf811f53"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+cargo auditable build --frozen --release
+
+	target/release/git-absorb --gen-completions bash > git-absorb.bash
+	target/release/git-absorb --gen-completions fish > git-absorb.fish
+	target/release/git-absorb --gen-completions zsh > _git-absorb
+
+	make -C Documentation git-absorb.1
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 --target-directory="/out"/usr/bin target/release/git-absorb
+
+	install -Dm644 git-absorb.bash "/out"/usr/share/bash-completion/completions/git-absorb
+	install -Dm644 git-absorb.fish "/out"/usr/share/fish/vendor_completions.d/git-absorb.fish
+	install -Dm644 _git-absorb "/out"/usr/share/zsh/site-functions/_git-absorb
+
+	install -Dm644 --target-directory="/out"/usr/share/man/man1 Documentation/git-absorb.1
+}
+_abuild_phase
+'''
+
+[deps]
+build = ["asciidoc", "libgit2"]
diff --git a/recipes/incoming/jless.toml b/recipes/incoming/jless.toml
new file mode 100644
index 00000000..10b1e2a1
--- /dev/null
+++ b/recipes/incoming/jless.toml
@@ -0,0 +1,36 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "jless"
+version = "0.9.0"
+
+[source]
+tarball = "https://github.com/PaulJuliusMartinez/jless/archive/refs/tags/v0.9.0.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "2c0f4b5d662f7e93727b25ef6b138368b453dc7246a6a2a3d14c158e15baeaf70df00252b0e1a813016837504bd6f75585d6e21760c52fc3ba76d61fc094ec7a"
+sha256  = "43527a78ba2e5e43a7ebd8d0da8b5af17a72455c5f88b4d1134f34908a594239"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+cargo auditable build --frozen --release
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm0755 target/release/jless "/out"/usr/bin/jless
+}
+_abuild_phase
+'''
+
+[deps]
+build = ["python3", "libxcb"]
diff --git a/recipes/incoming/kalker.toml b/recipes/incoming/kalker.toml
new file mode 100644
index 00000000..b1574132
--- /dev/null
+++ b/recipes/incoming/kalker.toml
@@ -0,0 +1,37 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "kalker"
+version = "2.2.2"
+
+[source]
+tarball = "https://github.com/PaddiM8/kalker/archive/refs/tags/v2.2.2.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "7595e38245ea36ebd0b72df4d44db73411e19d363102e7a967d043b0dc2266a5d3db8f6b6e69b6f259ed640220d4fa48cfbc5de7ea52425e6f320aac2abec64b"
+sha256  = "4f35555e19c8a1a05ceba6a7043088a00fea3fbf780bbd4af90696172ce9f7c3"
+patches = ["system-libs.patch"]
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+cargo auditable build --release --frozen
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 target/release/kalker "/out"/usr/bin/kalker
+}
+_abuild_phase
+'''
+
+[deps]
+build = ["gmp", "m4", "mpc1", "mpfr"]
diff --git a/recipes/incoming/ripsecrets.toml b/recipes/incoming/ripsecrets.toml
deleted file mode 100644
index a65c8d9b..00000000
--- a/recipes/incoming/ripsecrets.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
-# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
-#   compiler/link/phases y adaptá hasta que compile.
-# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
-name    = "ripsecrets"
-version = "0.1.11"
-
-[source]
-repo   = "https://github.com/sirwart/ripsecrets"
-commit = "7d94620933e79b8acaa0cd9e60e9864b07673d86"
-
-[build]
-compiler = "zig-cc"
-target   = "x86_64-linux-musl"
-link     = "static"
-flags    = ["--bin", "ripsecrets"]
-
-[build.phases]
-install = "mkdir -p /out/usr/bin && cp target/release/ripsecrets /out/usr/bin/ripsecrets"
diff --git a/recipes/incoming/topgrade.toml b/recipes/incoming/topgrade.toml
new file mode 100644
index 00000000..83ed90a4
--- /dev/null
+++ b/recipes/incoming/topgrade.toml
@@ -0,0 +1,47 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "topgrade"
+version = "17.6.1"
+
+[source]
+tarball = "https://github.com/topgrade-rs/topgrade/archive/refs/tags/v17.6.1.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "4473e971a3c744ce4f07096c7b6e38d384b2d1eb8698cfa26bd6018c361a667f971f14410d265b2c82119d805485c9247d4d16465dc0e7e2b4b5f7b4529b600b"
+sha256  = "c25274461f61b8fa469c1645a892bb5b52236bb64dc448152c6f485f9ec1cb1d"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+cargo auditable build --release --frozen
+
+	target/release/topgrade --gen-completion bash > topgrade.bash
+	target/release/topgrade --gen-completion fish > topgrade.fish
+	target/release/topgrade --gen-completion zsh > _topgrade
+
+	target/release/topgrade --gen-manpage > topgrade.8
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 target/release/topgrade "/out"/usr/bin/topgrade
+	install -Dm644 LICENSE "/out"/usr/share/licenses/topgrade/LICENSE
+
+	install -Dm644 topgrade.bash "/out"/usr/share/bash-completion/completions/topgrade
+	install -Dm644 topgrade.fish "/out"/usr/share/fish/vendor_completions.d/topgrade.fish
+	install -Dm644 _topgrade "/out"/usr/share/zsh/site-functions/_topgrade
+
+	install -Dm644 config.example.toml "/out"/usr/share/doc/topgrade/config.example.toml
+	install -Dm644 topgrade.8 "/out"/usr/share/man/man8/topgrade.8
+}
+_abuild_phase
+'''
diff --git a/recipes/incoming/tuc.toml b/recipes/incoming/tuc.toml
new file mode 100644
index 00000000..65845773
--- /dev/null
+++ b/recipes/incoming/tuc.toml
@@ -0,0 +1,33 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "tuc"
+version = "1.3.0"
+
+[source]
+tarball = "https://github.com/riquito/tuc/archive/v1.3.0/tuc-1.3.0.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "da64cffa388d032576b1f96f13d20c1ee657cd99eba0d1b0252dcc133bcd5b2de49007a30c426760d845dbd5ddf23ab7b81ebb83bce4eba7f40d25712f539ddf"
+sha256  = "81dc5f4a0355ecdf9515c88c34c365d20f339d316df7dbe72667cd2b18445c61"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+cargo auditable build --frozen --release
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 target/release/tuc -t "/out"/usr/bin/
+}
+_abuild_phase
+'''
diff --git a/recipes/incoming/yazi.toml b/recipes/incoming/yazi.toml
new file mode 100644
index 00000000..e91994af
--- /dev/null
+++ b/recipes/incoming/yazi.toml
@@ -0,0 +1,41 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "yazi"
+version = "26.5.6"
+
+[source]
+tarball = "https://github.com/sxyazi/yazi/archive/refs/tags/v26.5.6.tar.gz"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "2f1b980753c82f5e4186759ec6c40df6c2d740b3521fe31edaff69802701b0c5292c03fde5a1e775e17e91c694ea63c0b16a149fa39ccc609b4780281421d38e"
+sha256  = "a18445df86a20068f7b17609d12d6f635de488958579ae7a2b143a244ba7e63f"
+patches = ["system-lua.patch"]
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+YAZI_GEN_COMPLETIONS=true cargo auditable build --release --frozen --workspace --no-default-features
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 target/release/yazi "/out"/usr/bin/yazi
+	install -Dm644 yazi-boot/completions/yazi.bash "/out"/usr/share/bash-completion/completions/yazi
+	install -Dm644 yazi-boot/completions/yazi.fish "/out"/usr/share/fish/vendor_completions.d/yazi.fish
+	install -Dm644 yazi-boot/completions/_yazi "/out"/usr/share/zsh/site-functions/_yazi
+	install -Dm644 LICENSE "/out"/usr/share/licenses/yazi/LICENSE
+}
+_abuild_phase
+'''
+
+[deps]
+build = ["lua5.5"]
diff --git a/tandas/cli-rust-7.txt b/tandas/cli-rust-7.txt
new file mode 100644
index 00000000..048bc955
--- /dev/null
+++ b/tandas/cli-rust-7.txt
@@ -0,0 +1,24 @@
+yazi
+topgrade
+fend
+macchina
+genact
+huniq
+tailspin
+ruplacer
+numbat
+kalker
+frawk
+cargo-msrv
+cargo-cache
+cargo-update
+git-absorb
+rink
+jless
+ttyper
+hwatch
+tuc
+gobang
+fblog
+diskonaut
+bingrep