From d0ad93c7c5af6570852ef4fb306948d1a15b067f Mon Sep 17 00:00:00 2001
From: sergio <sergiovelasquezzeballos@gmail.com>
Date: Wed, 24 Jun 2026 06:42:42 -0400
Subject: [PATCH] =?UTF-8?q?Etapa=20G:=20fuel-2=20=E2=80=94=20recarga=20de?=
 =?UTF-8?q?=20cola=20del=20worker=20VPS=20(+26=20pineadas)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 recipes/incoming/amfora.toml                 |  19 +
 recipes/incoming/angle-grinder.toml          |  19 +
 recipes/incoming/below.toml                  |  22 +
 recipes/incoming/cargo-auditable.toml        |  19 +
 recipes/incoming/cargo-bisect-rustc.toml     |  22 +
 recipes/incoming/cargo-crev.toml             |  22 +
 recipes/incoming/cargo-fuzz.toml             |  19 +
 recipes/incoming/cargo-geiger.toml           |  22 +
 recipes/incoming/cargo-limit.toml            |  19 +
 recipes/incoming/cargo-supply-chain.toml     |  19 +
 recipes/incoming/cargo-temp.toml             |  19 +
 recipes/incoming/croc.toml                   |  19 +
 recipes/incoming/evcxr.toml                  |  22 +
 recipes/incoming/fblog.toml                  |  19 +
 recipes/incoming/gron.toml                   |  19 +
 recipes/incoming/hexpatch.toml               |  22 +
 recipes/incoming/irust.toml                  |  19 +
 recipes/incoming/jump.toml                   |  19 +
 recipes/incoming/magic-wormhole.toml         |  19 +
 recipes/incoming/netop.toml                  |  19 +
 recipes/incoming/oculante.toml               |  22 +
 recipes/incoming/qrcp.toml                   |  19 +
 recipes/incoming/rep-grep.toml               |  19 +
 recipes/incoming/sendme.toml                 |  19 +
 recipes/incoming/sequoia-openpgp-2.3.0.patch | 667 +++++++++++++++++++
 recipes/incoming/sequoia-sq.toml             |  47 ++
 recipes/incoming/shellharden.toml            |  19 +
 recipes/incoming/tere.toml                   |  22 +
 recipes/incoming/trunk.toml                  |  22 +
 recipes/incoming/wasm-pack.toml              |  22 +
 tandas/fuel-2.txt                            |  60 ++
 31 files changed, 1336 insertions(+)
 create mode 100644 recipes/incoming/amfora.toml
 create mode 100644 recipes/incoming/angle-grinder.toml
 create mode 100644 recipes/incoming/below.toml
 create mode 100644 recipes/incoming/cargo-auditable.toml
 create mode 100644 recipes/incoming/cargo-bisect-rustc.toml
 create mode 100644 recipes/incoming/cargo-crev.toml
 create mode 100644 recipes/incoming/cargo-fuzz.toml
 create mode 100644 recipes/incoming/cargo-geiger.toml
 create mode 100644 recipes/incoming/cargo-limit.toml
 create mode 100644 recipes/incoming/cargo-supply-chain.toml
 create mode 100644 recipes/incoming/cargo-temp.toml
 create mode 100644 recipes/incoming/croc.toml
 create mode 100644 recipes/incoming/evcxr.toml
 create mode 100644 recipes/incoming/fblog.toml
 create mode 100644 recipes/incoming/gron.toml
 create mode 100644 recipes/incoming/hexpatch.toml
 create mode 100644 recipes/incoming/irust.toml
 create mode 100644 recipes/incoming/jump.toml
 create mode 100644 recipes/incoming/magic-wormhole.toml
 create mode 100644 recipes/incoming/netop.toml
 create mode 100644 recipes/incoming/oculante.toml
 create mode 100644 recipes/incoming/qrcp.toml
 create mode 100644 recipes/incoming/rep-grep.toml
 create mode 100644 recipes/incoming/sendme.toml
 create mode 100644 recipes/incoming/sequoia-openpgp-2.3.0.patch
 create mode 100644 recipes/incoming/sequoia-sq.toml
 create mode 100644 recipes/incoming/shellharden.toml
 create mode 100644 recipes/incoming/tere.toml
 create mode 100644 recipes/incoming/trunk.toml
 create mode 100644 recipes/incoming/wasm-pack.toml
 create mode 100644 tandas/fuel-2.txt

diff --git a/recipes/incoming/amfora.toml b/recipes/incoming/amfora.toml
new file mode 100644
index 00000000..fb87c810
--- /dev/null
+++ b/recipes/incoming/amfora.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "amfora"
+version = "1.11.0"
+
+[source]
+repo   = "https://github.com/makew0rld/amfora"
+commit = "4d9a5c56c88f7bec2938968182c88130b923fbba"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/angle-grinder.toml b/recipes/incoming/angle-grinder.toml
new file mode 100644
index 00000000..43e8849e
--- /dev/null
+++ b/recipes/incoming/angle-grinder.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "angle-grinder"
+version = "0.19.6"
+
+[source]
+repo   = "https://github.com/rcoh/angle-grinder"
+commit = "e98ad5c286f2415ef933acc4563649bd26cea684"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "agrind"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/agrind /out/usr/bin/agrind"
diff --git a/recipes/incoming/below.toml b/recipes/incoming/below.toml
new file mode 100644
index 00000000..238acdb2
--- /dev/null
+++ b/recipes/incoming/below.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "below"
+version = "0.11.0"
+
+[source]
+repo   = "https://github.com/facebookincubator/below"
+commit = "6d62fc1f705385dfa71474e7c984b34c868ad089"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "below"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/below /out/usr/bin/below"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): rustfmt, elfutils, zlib
diff --git a/recipes/incoming/cargo-auditable.toml b/recipes/incoming/cargo-auditable.toml
new file mode 100644
index 00000000..919ed44b
--- /dev/null
+++ b/recipes/incoming/cargo-auditable.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-auditable"
+version = "0.7.2"
+
+[source]
+repo   = "https://github.com/rust-secure-code/cargo-auditable"
+commit = "0c4c6591a355c0fec883f70a4e9280974f15e02c"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-auditable"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-auditable /out/usr/bin/cargo-auditable"
diff --git a/recipes/incoming/cargo-bisect-rustc.toml b/recipes/incoming/cargo-bisect-rustc.toml
new file mode 100644
index 00000000..a5964e4e
--- /dev/null
+++ b/recipes/incoming/cargo-bisect-rustc.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-bisect-rustc"
+version = "0.6.11"
+
+[source]
+repo   = "https://github.com/rust-lang/cargo-bisect-rustc"
+commit = "875a7a0ae72c3054369dedf4f66926dbfb8d9514"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-bisect-rustc"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-bisect-rustc /out/usr/bin/cargo-bisect-rustc"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): openssl
diff --git a/recipes/incoming/cargo-crev.toml b/recipes/incoming/cargo-crev.toml
new file mode 100644
index 00000000..dbca71b2
--- /dev/null
+++ b/recipes/incoming/cargo-crev.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-crev"
+version = "0.27.1"
+
+[source]
+repo   = "https://github.com/crev-dev/cargo-crev"
+commit = "54d198b02359a612c0c5f4f8eee6ceb8b9a4169b"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-crev"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-crev /out/usr/bin/cargo-crev"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): perl, git-minimal, openssl
diff --git a/recipes/incoming/cargo-fuzz.toml b/recipes/incoming/cargo-fuzz.toml
new file mode 100644
index 00000000..e5d71ed2
--- /dev/null
+++ b/recipes/incoming/cargo-fuzz.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-fuzz"
+version = "0.13.2"
+
+[source]
+repo   = "https://github.com/rust-fuzz/cargo-fuzz"
+commit = "984c861c8dfea28055254c5f1d2659ab2cd63f76"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-fuzz"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-fuzz /out/usr/bin/cargo-fuzz"
diff --git a/recipes/incoming/cargo-geiger.toml b/recipes/incoming/cargo-geiger.toml
new file mode 100644
index 00000000..393a30f4
--- /dev/null
+++ b/recipes/incoming/cargo-geiger.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-geiger"
+version = "0.13.0"
+
+[source]
+repo   = "https://github.com/geiger-rs/cargo-geiger"
+commit = "08543ac0b48ff6eec12c0a1f2478ef9c3259cd4d"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-geiger"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-geiger /out/usr/bin/cargo-geiger"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): openssl
diff --git a/recipes/incoming/cargo-limit.toml b/recipes/incoming/cargo-limit.toml
new file mode 100644
index 00000000..9fc8d1ff
--- /dev/null
+++ b/recipes/incoming/cargo-limit.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-limit"
+version = "0.0.10"
+
+[source]
+repo   = "https://github.com/alopatindev/cargo-limit"
+commit = "fc8fc9d7482004bd2e34019650cb11770f99d931"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-limit"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-limit /out/usr/bin/cargo-limit"
diff --git a/recipes/incoming/cargo-supply-chain.toml b/recipes/incoming/cargo-supply-chain.toml
new file mode 100644
index 00000000..2c5fabc5
--- /dev/null
+++ b/recipes/incoming/cargo-supply-chain.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-supply-chain"
+version = "0.3.4"
+
+[source]
+repo   = "https://github.com/rust-secure-code/cargo-supply-chain"
+commit = "9f540db088c83ef262f8e24f937a704e4fcf6f8d"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-supply-chain"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-supply-chain /out/usr/bin/cargo-supply-chain"
diff --git a/recipes/incoming/cargo-temp.toml b/recipes/incoming/cargo-temp.toml
new file mode 100644
index 00000000..82591cbb
--- /dev/null
+++ b/recipes/incoming/cargo-temp.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "cargo-temp"
+version = "0.4.1"
+
+[source]
+repo   = "https://github.com/yozhgoor/cargo-temp"
+commit = "fe7976f8dd456ba28cd349c903e69c4c251e4682"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "cargo-temp"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/cargo-temp /out/usr/bin/cargo-temp"
diff --git a/recipes/incoming/croc.toml b/recipes/incoming/croc.toml
new file mode 100644
index 00000000..3e7e30d0
--- /dev/null
+++ b/recipes/incoming/croc.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "croc"
+version = "10.4.4"
+
+[source]
+repo   = "https://github.com/schollz/croc"
+commit = "d225c8514f52b4335142394066b47bb0b70c8452"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/evcxr.toml b/recipes/incoming/evcxr.toml
new file mode 100644
index 00000000..a02991db
--- /dev/null
+++ b/recipes/incoming/evcxr.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "evcxr"
+version = "0.21.1"
+
+[source]
+repo   = "https://github.com/google/evcxr"
+commit = "ace31b6c59c8b1280148424c4e3ee72eb5a71b72"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "evcxr"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/evcxr /out/usr/bin/evcxr"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): cmake
diff --git a/recipes/incoming/fblog.toml b/recipes/incoming/fblog.toml
new file mode 100644
index 00000000..3a7a957f
--- /dev/null
+++ b/recipes/incoming/fblog.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "fblog"
+version = "4.17.0"
+
+[source]
+repo   = "https://github.com/brocode/fblog"
+commit = "43e3b10a0f3c82a53ce82e6645e5b0735c54d5bd"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "fblog"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/fblog /out/usr/bin/fblog"
diff --git a/recipes/incoming/gron.toml b/recipes/incoming/gron.toml
new file mode 100644
index 00000000..5af828aa
--- /dev/null
+++ b/recipes/incoming/gron.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "gron"
+version = "0.7.1"
+
+[source]
+repo   = "https://github.com/tomnomnom/gron"
+commit = "badf401da553eb41b7ffde4be6a64809ed0ed846"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/hexpatch.toml b/recipes/incoming/hexpatch.toml
new file mode 100644
index 00000000..9c6092d4
--- /dev/null
+++ b/recipes/incoming/hexpatch.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "hexpatch"
+version = "1.12.6"
+
+[source]
+repo   = "https://github.com/Etto48/HexPatch"
+commit = "a85c1eac953ec0e27642c525b543d985f6fb16d5"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "hexpatch"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/hexpatch /out/usr/bin/hexpatch"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): cmake, python3
diff --git a/recipes/incoming/irust.toml b/recipes/incoming/irust.toml
new file mode 100644
index 00000000..d768f62f
--- /dev/null
+++ b/recipes/incoming/irust.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "irust"
+version = "1.76.2"
+
+[source]
+repo   = "https://github.com/sigmaSd/IRust"
+commit = "3c12baca63a3d9b4fbcbaaab7654cb15afe592f8"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "irust"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/irust /out/usr/bin/irust"
diff --git a/recipes/incoming/jump.toml b/recipes/incoming/jump.toml
new file mode 100644
index 00000000..2f37e868
--- /dev/null
+++ b/recipes/incoming/jump.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "jump"
+version = "0.67.0"
+
+[source]
+repo   = "https://github.com/gsamokovarov/jump"
+commit = "0e9fabf0c06a0c4f847081e7138b3478c3959dfd"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/magic-wormhole.toml b/recipes/incoming/magic-wormhole.toml
new file mode 100644
index 00000000..9fcfda7b
--- /dev/null
+++ b/recipes/incoming/magic-wormhole.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "magic-wormhole"
+version = "0.24.0"
+
+[source]
+repo   = "https://github.com/magic-wormhole/magic-wormhole"
+commit = "3bf46e020341ff966aa1ca58d7260005256c1a8f"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["python3", "setuptools", "versioneer", "hypothesis", "magic-wormhole-mailbox-server", "magic-wormhole-transit-relay", "pytest-twisted", "noiseprotocol"]
diff --git a/recipes/incoming/netop.toml b/recipes/incoming/netop.toml
new file mode 100644
index 00000000..567c9838
--- /dev/null
+++ b/recipes/incoming/netop.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "netop"
+version = "0.1.4"
+
+[source]
+repo   = "https://github.com/ZingerLittleBee/netop"
+commit = "e9ea41968800613a477a9cbe343068449d4d6c74"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "netop"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/netop /out/usr/bin/netop"
diff --git a/recipes/incoming/oculante.toml b/recipes/incoming/oculante.toml
new file mode 100644
index 00000000..81b599a0
--- /dev/null
+++ b/recipes/incoming/oculante.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "oculante"
+version = "0.9.2.1-unstable-2025-10-08"
+
+[source]
+repo   = "https://github.com/woelper/oculante"
+commit = "51b9f70b35e09850baee85971720b8d3ac49c80b"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "oculante"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/oculante /out/usr/bin/oculante"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): cmake, nasm, perl, openssl, fontconfig, shaderc, libglvnd, libx11, libxcursor, libxi, libxrandr, gtk+3, libxkbcommon, wayland
diff --git a/recipes/incoming/qrcp.toml b/recipes/incoming/qrcp.toml
new file mode 100644
index 00000000..5ddc85c9
--- /dev/null
+++ b/recipes/incoming/qrcp.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "qrcp"
+version = "0.11.6"
+
+[source]
+repo   = "https://github.com/claudiodangelis/qrcp"
+commit = "4ed525205106afdf77f21347ee1aa21c385c1b85"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[deps]
+build = ["go"]
diff --git a/recipes/incoming/rep-grep.toml b/recipes/incoming/rep-grep.toml
new file mode 100644
index 00000000..42d92bb2
--- /dev/null
+++ b/recipes/incoming/rep-grep.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "rep-grep"
+version = "0.0.8"
+
+[source]
+repo   = "https://github.com/robenkleene/rep-grep"
+commit = "9adb6b048117282dba8489f32e16bde4aad34149"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "rep"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/rep /out/usr/bin/rep"
diff --git a/recipes/incoming/sendme.toml b/recipes/incoming/sendme.toml
new file mode 100644
index 00000000..0788b6e2
--- /dev/null
+++ b/recipes/incoming/sendme.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "sendme"
+version = "0.33.0"
+
+[source]
+repo   = "https://github.com/n0-computer/sendme"
+commit = "50017958103489cfd00525d306e4f485f7f4bc1a"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "sendme"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/sendme /out/usr/bin/sendme"
diff --git a/recipes/incoming/sequoia-openpgp-2.3.0.patch b/recipes/incoming/sequoia-openpgp-2.3.0.patch
new file mode 100644
index 00000000..1cc68e3c
--- /dev/null
+++ b/recipes/incoming/sequoia-openpgp-2.3.0.patch
@@ -0,0 +1,667 @@
+diff --git a/Cargo.lock b/Cargo.lock
+index b491b7c..c9c9e3e 100644
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -187,16 +187,7 @@ version = "3.0.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "8824ecca2e851cec16968d54a01dd372ef8f95b244fb84b84e70128be347c3c6"
+ dependencies = [
+- "term 0.7.0",
+-]
+-
+-[[package]]
+-name = "ascii-canvas"
+-version = "4.0.0"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "ef1e3e699d84ab1b0911a1010c5c106aa34ae89aeac103be5ce0c3859db1e891"
+-dependencies = [
+- "term 1.0.1",
++ "term",
+ ]
+ 
+ [[package]]
+@@ -291,7 +282,7 @@ dependencies = [
+  "bitflags",
+  "cexpr",
+  "clang-sys",
+- "itertools 0.13.0",
++ "itertools",
+  "proc-macro2",
+  "quote",
+  "regex",
+@@ -306,16 +297,7 @@ version = "0.5.3"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "0700ddab506f33b20a03b13996eccd309a48e5ff77d0d95926aa0210fb4e95f1"
+ dependencies = [
+- "bit-vec 0.6.3",
+-]
+-
+-[[package]]
+-name = "bit-set"
+-version = "0.8.0"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+-dependencies = [
+- "bit-vec 0.8.0",
++ "bit-vec",
+ ]
+ 
+ [[package]]
+@@ -324,18 +306,24 @@ version = "0.6.3"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "349f9b6a179ed607305526ca489b34ad0a41aed5f7980fa90eb03160b69598fb"
+ 
+-[[package]]
+-name = "bit-vec"
+-version = "0.8.0"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+-
+ [[package]]
+ name = "bitflags"
+ version = "2.9.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd"
+ 
++[[package]]
++name = "bitvec"
++version = "1.0.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "1bc2832c24239b0141d5674bb9174f9d68a8b5b3f2753311927c172ca46f7e9c"
++dependencies = [
++ "funty",
++ "radium",
++ "tap",
++ "wyz",
++]
++
+ [[package]]
+ name = "blake2"
+ version = "0.10.6"
+@@ -505,6 +493,15 @@ dependencies = [
+  "cipher",
+ ]
+ 
++[[package]]
++name = "cbc"
++version = "0.1.2"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
++dependencies = [
++ "cipher",
++]
++
+ [[package]]
+ name = "cc"
+ version = "1.2.16"
+@@ -769,7 +766,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+ dependencies = [
+  "generic-array",
+- "rand_core",
++ "rand_core 0.6.4",
+  "subtle",
+  "zeroize",
+ ]
+@@ -781,7 +778,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3"
+ dependencies = [
+  "generic-array",
+- "rand_core",
++ "rand_core 0.6.4",
+  "typenum",
+ ]
+ 
+@@ -860,6 +857,21 @@ dependencies = [
+  "cfg-if",
+ ]
+ 
++[[package]]
++name = "cx448"
++version = "0.1.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "b4c0cf476284b03eb6c10e78787b21c7abb7d7d43cb2f02532ba6b831ed892fa"
++dependencies = [
++ "crypto-bigint",
++ "elliptic-curve",
++ "rand_core 0.6.4",
++ "sha3",
++ "signature",
++ "subtle",
++ "zeroize",
++]
++
+ [[package]]
+ name = "data-encoding"
+ version = "2.8.0"
+@@ -1099,7 +1111,7 @@ checksum = "4a3daa8e81a3963a60642bcc1f90a670680bd4a77535faa384e9d1c79d620871"
+ dependencies = [
+  "curve25519-dalek",
+  "ed25519",
+- "rand_core",
++ "rand_core 0.6.4",
+  "serde",
+  "sha2",
+  "subtle",
+@@ -1119,6 +1131,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+ dependencies = [
+  "base16ct",
++ "base64ct",
+  "crypto-bigint",
+  "digest",
+  "ff",
+@@ -1127,9 +1140,12 @@ dependencies = [
+  "hkdf",
+  "pem-rfc7468",
+  "pkcs8",
+- "rand_core",
++ "rand_core 0.6.4",
+  "sec1",
++ "serde_json",
++ "serdect",
+  "subtle",
++ "tap",
+  "zeroize",
+ ]
+ 
+@@ -1255,7 +1271,8 @@ version = "0.13.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "ded41244b729663b1e574f1b4fb731469f69f79c17667b5d776b16cda0479449"
+ dependencies = [
+- "rand_core",
++ "bitvec",
++ "rand_core 0.6.4",
+  "subtle",
+ ]
+ 
+@@ -1283,12 +1300,6 @@ version = "0.4.2"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "0ce7134b9999ecaf8bcd65542e436736ef32ddca1b3e06094cb6ec5755203b80"
+ 
+-[[package]]
+-name = "fixedbitset"
+-version = "0.5.7"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "1d674e81391d1e1ab681a28d99df07927c6d4aa5b027d7da16ba32d1d21ecd99"
+-
+ [[package]]
+ name = "flate2"
+ version = "1.1.0"
+@@ -1368,6 +1379,12 @@ version = "1.3.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
+ 
++[[package]]
++name = "funty"
++version = "2.0.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
++
+ [[package]]
+ name = "futures"
+ version = "0.3.31"
+@@ -1578,7 +1595,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+ dependencies = [
+  "ff",
+- "rand_core",
++ "rand_core 0.6.4",
+  "subtle",
+ ]
+ 
+@@ -1650,7 +1667,7 @@ dependencies = [
+  "hickory-proto",
+  "once_cell",
+  "radix_trie",
+- "rand",
++ "rand 0.8.5",
+  "thiserror 1.0.69",
+  "tokio",
+  "tracing",
+@@ -1673,7 +1690,7 @@ dependencies = [
+  "ipnet",
+  "once_cell",
+  "openssl",
+- "rand",
++ "rand 0.8.5",
+  "thiserror 1.0.69",
+  "tinyvec",
+  "tokio",
+@@ -1694,7 +1711,7 @@ dependencies = [
+  "lru-cache",
+  "once_cell",
+  "parking_lot",
+- "rand",
++ "rand 0.8.5",
+  "resolv-conf",
+  "smallvec",
+  "thiserror 1.0.69",
+@@ -1720,15 +1737,6 @@ dependencies = [
+  "digest",
+ ]
+ 
+-[[package]]
+-name = "home"
+-version = "0.5.9"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "e3d1354bf6b7235cb4a0576c2619fd4ed18183f689b12b006a0ee7329eeff9a5"
+-dependencies = [
+- "windows-sys 0.52.0",
+-]
+-
+ [[package]]
+ name = "hostname"
+ version = "0.3.1"
+@@ -2129,24 +2137,6 @@ dependencies = [
+  "either",
+ ]
+ 
+-[[package]]
+-name = "itertools"
+-version = "0.13.0"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
+-dependencies = [
+- "either",
+-]
+-
+-[[package]]
+-name = "itertools"
+-version = "0.14.0"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+-dependencies = [
+- "either",
+-]
+-
+ [[package]]
+ name = "itoa"
+ version = "1.0.14"
+@@ -2178,42 +2168,21 @@ version = "0.20.2"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "55cb077ad656299f160924eb2912aa147d7339ea7d69e1b5517326fdcec3c1ca"
+ dependencies = [
+- "ascii-canvas 3.0.0",
+- "bit-set 0.5.3",
++ "ascii-canvas",
++ "bit-set",
+  "ena",
+- "itertools 0.11.0",
+- "lalrpop-util 0.20.2",
+- "petgraph 0.6.5",
++ "itertools",
++ "lalrpop-util",
++ "petgraph",
+  "regex",
+  "regex-syntax 0.8.5",
+  "string_cache",
+- "term 0.7.0",
++ "term",
+  "tiny-keccak",
+  "unicode-xid",
+  "walkdir",
+ ]
+ 
+-[[package]]
+-name = "lalrpop"
+-version = "0.22.1"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "7047a26de42016abf8f181b46b398aef0b77ad46711df41847f6ed869a2a1d5b"
+-dependencies = [
+- "ascii-canvas 4.0.0",
+- "bit-set 0.8.0",
+- "ena",
+- "itertools 0.14.0",
+- "lalrpop-util 0.22.1",
+- "petgraph 0.7.1",
+- "regex",
+- "regex-syntax 0.8.5",
+- "sha3",
+- "string_cache",
+- "term 1.0.1",
+- "unicode-xid",
+- "walkdir",
+-]
+-
+ [[package]]
+ name = "lalrpop-util"
+ version = "0.20.2"
+@@ -2223,16 +2192,6 @@ dependencies = [
+  "regex-automata 0.4.9",
+ ]
+ 
+-[[package]]
+-name = "lalrpop-util"
+-version = "0.22.1"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "e8d05b3fe34b8bd562c338db725dfa9beb9451a48f65f129ccb9538b48d2c93b"
+-dependencies = [
+- "regex-automata 0.4.9",
+- "rustversion",
+-]
+-
+ [[package]]
+ name = "lazy_static"
+ version = "1.5.0"
+@@ -2550,7 +2509,7 @@ dependencies = [
+  "num-integer",
+  "num-iter",
+  "num-traits",
+- "rand",
++ "rand 0.8.5",
+  "smallvec",
+  "zeroize",
+ ]
+@@ -2747,7 +2706,7 @@ dependencies = [
+  "ecdsa",
+  "elliptic-curve",
+  "primeorder",
+- "rand_core",
++ "rand_core 0.6.4",
+  "sha2",
+ ]
+ 
+@@ -2781,7 +2740,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "346f04948ba92c43e8469c1ee6736c7563d71012b17d40745260fe106aac2166"
+ dependencies = [
+  "base64ct",
+- "rand_core",
++ "rand_core 0.6.4",
+  "subtle",
+ ]
+ 
+@@ -2857,17 +2816,7 @@ version = "0.6.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "b4c5cc86750666a3ed20bdaf5ca2a0344f9c67674cae0515bec2da16fbaa47db"
+ dependencies = [
+- "fixedbitset 0.4.2",
+- "indexmap",
+-]
+-
+-[[package]]
+-name = "petgraph"
+-version = "0.7.1"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "3672b37090dbd86368a4145bc067582552b29c27377cad4e0a306c97f9bd7772"
+-dependencies = [
+- "fixedbitset 0.5.7",
++ "fixedbitset",
+  "indexmap",
+ ]
+ 
+@@ -3050,6 +2999,12 @@ dependencies = [
+  "proc-macro2",
+ ]
+ 
++[[package]]
++name = "radium"
++version = "0.7.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
++
+ [[package]]
+ name = "radix_trie"
+ version = "0.2.1"
+@@ -3068,7 +3023,16 @@ checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+ dependencies = [
+  "libc",
+  "rand_chacha",
+- "rand_core",
++ "rand_core 0.6.4",
++]
++
++[[package]]
++name = "rand"
++version = "0.9.4"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
++dependencies = [
++ "rand_core 0.9.5",
+ ]
+ 
+ [[package]]
+@@ -3078,7 +3042,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+ dependencies = [
+  "ppv-lite86",
+- "rand_core",
++ "rand_core 0.6.4",
+ ]
+ 
+ [[package]]
+@@ -3090,6 +3054,15 @@ dependencies = [
+  "getrandom 0.2.15",
+ ]
+ 
++[[package]]
++name = "rand_core"
++version = "0.9.5"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
++dependencies = [
++ "getrandom 0.3.1",
++]
++
+ [[package]]
+ name = "rayon"
+ version = "1.10.0"
+@@ -3333,7 +3306,7 @@ dependencies = [
+  "num-traits",
+  "pkcs1",
+  "pkcs8",
+- "rand_core",
++ "rand_core 0.6.4",
+  "signature",
+  "spki",
+  "subtle",
+@@ -3489,6 +3462,7 @@ dependencies = [
+  "der",
+  "generic-array",
+  "pkcs8",
++ "serdect",
+  "subtle",
+  "zeroize",
+ ]
+@@ -3574,8 +3548,8 @@ dependencies = [
+  "anyhow",
+  "chrono",
+  "futures",
+- "lalrpop 0.22.1",
+- "lalrpop-util 0.22.1",
++ "lalrpop",
++ "lalrpop-util",
+  "libc",
+  "sequoia-ipc",
+  "sequoia-openpgp",
+@@ -3596,11 +3570,11 @@ dependencies = [
+  "ctor",
+  "dirs 5.0.1",
+  "fs2",
+- "lalrpop 0.20.2",
+- "lalrpop-util 0.20.2",
++ "lalrpop",
++ "lalrpop-util",
+  "libc",
+  "memsec",
+- "rand",
++ "rand 0.8.5",
+  "sequoia-openpgp",
+  "socket2",
+  "tempfile",
+@@ -3722,9 +3696,9 @@ dependencies = [
+ 
+ [[package]]
+ name = "sequoia-openpgp"
+-version = "2.0.0"
++version = "2.3.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "015e5fc3d023418b9db98ca9a7f3e90b305872eeafe5ca45c5c32b5eb335c1e8"
++checksum = "c847f0f148cf238c3aec88d092fd3c4301c21e906829ea9e415ea7531f7ec094"
+ dependencies = [
+  "aes",
+  "aes-gcm",
+@@ -3738,9 +3712,11 @@ dependencies = [
+  "bzip2",
+  "camellia",
+  "cast5",
++ "cbc",
+  "cfb-mode",
+  "chrono",
+  "cipher",
++ "cx448",
+  "des",
+  "digest",
+  "dsa",
+@@ -3755,21 +3731,22 @@ dependencies = [
+  "hkdf",
+  "idea",
+  "idna",
+- "lalrpop 0.20.2",
+- "lalrpop-util 0.20.2",
++ "lalrpop",
++ "lalrpop-util",
+  "libc",
+  "md-5",
+  "memsec",
+  "nettle",
+  "num-bigint-dig",
++ "num-integer",
+  "ocb3",
+  "openssl",
+  "openssl-sys",
+  "p256",
+  "p384",
+  "p521",
+- "rand",
+- "rand_core",
++ "rand 0.9.4",
++ "rand_core 0.6.4",
+  "regex",
+  "regex-syntax 0.8.5",
+  "ripemd",
+@@ -3784,13 +3761,14 @@ dependencies = [
+  "winapi",
+  "x25519-dalek",
+  "xxhash-rust",
++ "zeroize",
+ ]
+ 
+ [[package]]
+ name = "sequoia-policy-config"
+-version = "0.8.0"
++version = "0.8.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "8e016b708d64857b6a97e1a331d9471b73e30ed450d247628e1a0ce236b1e597"
++checksum = "c8c2be5e64986e3192d5714c2334fbfb9e22c8cb41d7ad4583847eb590a8cea1"
+ dependencies = [
+  "anyhow",
+  "chrono",
+@@ -3846,7 +3824,7 @@ dependencies = [
+  "termcolor",
+  "terminal_size",
+  "textwrap",
+- "thiserror 1.0.69",
++ "thiserror 2.0.12",
+  "tokio",
+  "toml_edit",
+  "typenum",
+@@ -3921,6 +3899,16 @@ dependencies = [
+  "serde",
+ ]
+ 
++[[package]]
++name = "serdect"
++version = "0.2.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "a84f14a19e9a014bb9f4512488d9829a68e04ecabffb0f9904cd1ace94598177"
++dependencies = [
++ "base16ct",
++ "serde",
++]
++
+ [[package]]
+ name = "sha1collisiondetection"
+ version = "0.3.4"
+@@ -3981,7 +3969,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+ dependencies = [
+  "digest",
+- "rand_core",
++ "rand_core 0.6.4",
+ ]
+ 
+ [[package]]
+@@ -4214,6 +4202,12 @@ dependencies = [
+  "libc",
+ ]
+ 
++[[package]]
++name = "tap"
++version = "1.0.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
++
+ [[package]]
+ name = "tempfile"
+ version = "3.17.1"
+@@ -4240,7 +4234,7 @@ dependencies = [
+  "percent-encoding",
+  "pest",
+  "pest_derive",
+- "rand",
++ "rand 0.8.5",
+  "regex",
+  "serde",
+  "serde_json",
+@@ -4259,16 +4253,6 @@ dependencies = [
+  "winapi",
+ ]
+ 
+-[[package]]
+-name = "term"
+-version = "1.0.1"
+-source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "a3bb6001afcea98122260987f8b7b5da969ecad46dbf0b5453702f776b491a41"
+-dependencies = [
+- "home",
+- "windows-sys 0.52.0",
+-]
+-
+ [[package]]
+ name = "termcolor"
+ version = "1.4.1"
+@@ -4937,7 +4921,7 @@ checksum = "99abfb435a71e54ab2971d8d8c32f1a7e006cdbf527f71743b1d45b93517bb92"
+ dependencies = [
+  "cipher",
+  "doc-comment",
+- "rand_core",
++ "rand_core 0.6.4",
+  "winapi",
+  "zeroize",
+ ]
+@@ -5215,6 +5199,15 @@ version = "0.5.5"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51"
+ 
++[[package]]
++name = "wyz"
++version = "0.5.1"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
++dependencies = [
++ "tap",
++]
++
+ [[package]]
+ name = "x25519-dalek"
+ version = "2.0.1"
+@@ -5222,7 +5215,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
+ dependencies = [
+  "curve25519-dalek",
+- "rand_core",
++ "rand_core 0.6.4",
+  "zeroize",
+ ]
+ 
diff --git a/recipes/incoming/sequoia-sq.toml b/recipes/incoming/sequoia-sq.toml
new file mode 100644
index 00000000..00ffc56c
--- /dev/null
+++ b/recipes/incoming/sequoia-sq.toml
@@ -0,0 +1,47 @@
+# Importada de Alpine aports por `hammer import-alpine` (Etapa G). PUNTO DE PARTIDA — pero
+# YA trae los parches de musl de Alpine (lo que un import de nix pierde). Pendiente: el
+# sha256 del tarball (el wrapper lo calcula), y adaptar build/install del shell de abuild.
+name    = "sequoia-sq"
+version = "1.3.1"
+
+[source]
+tarball = "https://gitlab.com/sequoia-pgp/sequoia-sq/-/archive/v1.3.1/sequoia-sq-v1.3.1.tar.bz2"
+# FIXME sha256: el wrapper lo calcula (Alpine publica sha512). sha512 de Alpine:
+# sha512 = "043d7ff85333e4a126fe86001ebe0f99c1a2142a4d7ac49138c160b7ce9b9c21c013691ac50f4eb153512e38bb1b151cab1f358c65a8797c55ee0bd6c45fe8a1"
+sha256  = "ca4a6ef07ab9ca492c8166d6d6ed0354eb81f418bf819cf095c1ee856c461365"
+patches = ["sequoia-openpgp-2.3.0.patch"]
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = []
+
+[build.phases]
+# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
+compile = '''
+_abuild_phase() {
+export CARGO_TARGET_DIR=target
+	cargo auditable build --frozen --release --no-default-features --features crypto-openssl
+}
+_abuild_phase
+'''
+# de package() de Alpine (traducido $pkgdir→/out):
+install = '''
+_abuild_phase() {
+install -Dm755 target/release/sq \
+		-t "/out"/usr/bin/
+	install -Dm644 target/release/build/sequoia-sq-*/out/shell-completions/_sq \
+		"/out"/usr/share/zsh/site-functions/_sq
+	install -Dm644 target/release/build/sequoia-sq-*/out/shell-completions/sq.bash \
+		"/out"/usr/share/bash-completion/completions/sq
+	install -Dm644 target/release/build/sequoia-sq-*/out/shell-completions/sq.fish \
+		"/out"/usr/share/fish/vendor_completions.d/sq.fish
+	install -Dm644 target/release/build/sequoia-sq-*/out/man-pages/*.1 \
+		-t "/out"/usr/share/man/man1/
+}
+_abuild_phase
+'''
+
+[deps]
+build = ["bzip2", "capnproto", "clang", "openssl", "sqlite"]
diff --git a/recipes/incoming/shellharden.toml b/recipes/incoming/shellharden.toml
new file mode 100644
index 00000000..2c24a408
--- /dev/null
+++ b/recipes/incoming/shellharden.toml
@@ -0,0 +1,19 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "shellharden"
+version = "4.3.1"
+
+[source]
+repo   = "https://github.com/anordal/shellharden"
+commit = "d63188f981536c844d1ee384cb83af8607cbb8e6"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "shellharden"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/shellharden /out/usr/bin/shellharden"
diff --git a/recipes/incoming/tere.toml b/recipes/incoming/tere.toml
new file mode 100644
index 00000000..69aa4a66
--- /dev/null
+++ b/recipes/incoming/tere.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "tere"
+version = "1.6.0"
+
+[source]
+repo   = "https://github.com/mgunyho/tere"
+commit = "5adf1176e8c12c073ad244cac7773a7808ed2021"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "tere"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/tere /out/usr/bin/tere"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): ncurses
diff --git a/recipes/incoming/trunk.toml b/recipes/incoming/trunk.toml
new file mode 100644
index 00000000..808f0021
--- /dev/null
+++ b/recipes/incoming/trunk.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "trunk"
+version = "0.21.14"
+
+[source]
+repo   = "https://github.com/trunk-rs/trunk"
+commit = "8ec159c52dcaf661e6950bb71d7f62ab24558164"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "trunk"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/trunk /out/usr/bin/trunk"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): openssl
diff --git a/recipes/incoming/wasm-pack.toml b/recipes/incoming/wasm-pack.toml
new file mode 100644
index 00000000..33f1f8b4
--- /dev/null
+++ b/recipes/incoming/wasm-pack.toml
@@ -0,0 +1,22 @@
+# Importada de nixpkgs por `hammer import-nix` (Etapa G). PUNTO DE PARTIDA, no final:
+# - el build usa el lab de hammer (zig-cc / musl estático), NO el stdenv de nix ⇒ revisá
+#   compiler/link/phases y adaptá hasta que compile.
+# - las deps van con su nombre NIX; remapealas a las recetas del corpus si difieren.
+name    = "wasm-pack"
+version = "0.15.0"
+
+[source]
+repo   = "https://github.com/wasm-bindgen/wasm-pack"
+commit = "8320269d4b1d7a3a06da0fcc67cf5b176699ebe3"
+
+[build]
+compiler = "zig-cc"
+target   = "x86_64-linux-musl"
+link     = "static"
+flags    = ["--bin", "wasm-pack"]
+
+[build.phases]
+install = "mkdir -p /out/usr/bin && cp target/release/wasm-pack /out/usr/bin/wasm-pack"
+
+# buildInputs de nix (NO deps de hammer — cargo vendorea; backend Rust por
+# defecto). Si algún sys-crate C falla, adaptá per-paquete (patch/feature): cmake, zstd
diff --git a/tandas/fuel-2.txt b/tandas/fuel-2.txt
new file mode 100644
index 00000000..16e59dd6
--- /dev/null
+++ b/tandas/fuel-2.txt
@@ -0,0 +1,60 @@
+# fuel-2 — segunda cola profunda para el worker VPS (2026-06-24). Candidatos frescos no probados.
+# --- transferencia / red ---
+magic-wormhole
+sendme
+croc
+portal-client
+qrcp
+http-server-rs
+# --- cargo subcomandos ---
+cargo-fuzz
+cargo-geiger
+cargo-bisect-rustc
+cargo-crev
+cargo-tally
+cargo-temp
+cargo-run-bin
+cargo-limit
+cargo-quickinstall
+cargo-binutils
+cargo-supply-chain
+cargo-auditable
+cargo-show
+cargo-asm
+twiggy
+wasm-pack
+trunk
+leptosfmt
+# --- repl / lenguaje ---
+evcxr
+irust
+papyrus
+# --- text / data / log ---
+angle-grinder
+gron
+lemmeknow
+lowcharts
+piechart
+fblog
+hexpatch
+rep-grep
+ammonia
+# --- files / nav ---
+tere
+jump
+hop
+# --- system / fetch ---
+rust-petname
+petname
+below
+netop
+# --- security / crypto ---
+sequoia-sq
+himitsu
+rsop
+oculante
+# --- dev / fmt ---
+shellharden
+amfora
+indicatif
+pipeview