From dbac79cad870862655d09c43dc8f9d167c9b1b5f Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Mon, 13 Jul 2026 21:18:27 -0400
Subject: [PATCH 1/5] sequoia-sq: 1.3.1 -> 1.4.0

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/se/sequoia-sq/package.nix | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/se/sequoia-sq/package.nix b/pkgs/by-name/se/sequoia-sq/package.nix
index fa1fa8f41622..353851c697c6 100644
--- a/pkgs/by-name/se/sequoia-sq/package.nix
+++ b/pkgs/by-name/se/sequoia-sq/package.nix
@@ -14,16 +14,16 @@
 
 rustPlatform.buildRustPackage (finalAttrs: {
   pname = "sequoia-sq";
-  version = "1.3.1";
+  version = "1.4.0";
 
   src = fetchFromGitLab {
     owner = "sequoia-pgp";
     repo = "sequoia-sq";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-lM+j1KtH3U/lbPXnKALAP75YokDufbdz8s8bjb0VXUY=";
+    hash = "sha256-+6QVRp0zDJIIv23YlAI/cspHuGc+YcWdPfJZIOxQRW8=";
   };
 
-  cargoHash = "sha256-3z1Qm/eeVlH0/x3C8PSSPIlQaRKk1U6mRlEiKk0AaVQ=";
+  cargoHash = "sha256-I6hPpRpILV+iU9erfVBQOXuICx4IvWvGyHWdep7jRm4=";
 
   nativeBuildInputs = [
     pkg-config
@@ -47,6 +47,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   env.ASSET_OUT_DIR = "/tmp/";
 
+  # key store daemon binds a loopback socket
+  __darwinAllowLocalNetworking = true;
+
   doCheck = true;
 
   postInstall = ''

From da71f23be546b9a09cf370cc4abac87f945f740c Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Mon, 13 Jul 2026 21:24:19 -0400
Subject: [PATCH 2/5] sequoia-sq: write build assets to target dir

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/se/sequoia-sq/package.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/se/sequoia-sq/package.nix b/pkgs/by-name/se/sequoia-sq/package.nix
index 353851c697c6..f7fcabf05a9e 100644
--- a/pkgs/by-name/se/sequoia-sq/package.nix
+++ b/pkgs/by-name/se/sequoia-sq/package.nix
@@ -45,7 +45,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
     export SSL_CERT_FILE=${cacert}/etc/ssl/certs/ca-bundle.crt
   '';
 
-  env.ASSET_OUT_DIR = "/tmp/";
+  env.ASSET_OUT_DIR = "target";
 
   # key store daemon binds a loopback socket
   __darwinAllowLocalNetworking = true;
@@ -53,12 +53,12 @@ rustPlatform.buildRustPackage (finalAttrs: {
   doCheck = true;
 
   postInstall = ''
-    installManPage /tmp/man-pages/*.*
+    installManPage ${finalAttrs.env.ASSET_OUT_DIR}/man-pages/*.*
     installShellCompletion \
       --cmd sq \
-      --bash /tmp/shell-completions/sq.bash \
-      --fish /tmp/shell-completions/sq.fish \
-      --zsh /tmp/shell-completions/_sq
+      --bash ${finalAttrs.env.ASSET_OUT_DIR}/shell-completions/sq.bash \
+      --fish ${finalAttrs.env.ASSET_OUT_DIR}/shell-completions/sq.fish \
+      --zsh ${finalAttrs.env.ASSET_OUT_DIR}/shell-completions/_sq
   '';
 
   passthru.updateScript = nix-update-script { };

From adf9c9fe56cf0a4480a7b0b4ca294f8bbb2c2bd5 Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Mon, 13 Jul 2026 21:57:13 -0400
Subject: [PATCH 3/5] sequoia-sq: enable structuredAttrs and strictDeps

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/se/sequoia-sq/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/by-name/se/sequoia-sq/package.nix b/pkgs/by-name/se/sequoia-sq/package.nix
index f7fcabf05a9e..7345fdf7f24d 100644
--- a/pkgs/by-name/se/sequoia-sq/package.nix
+++ b/pkgs/by-name/se/sequoia-sq/package.nix
@@ -25,6 +25,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
 
   cargoHash = "sha256-I6hPpRpILV+iU9erfVBQOXuICx4IvWvGyHWdep7jRm4=";
 
+  strictDeps = true;
+  __structuredAttrs = true;
+
   nativeBuildInputs = [
     pkg-config
     rustPlatform.bindgenHook

From f9640ca49ddfd8b9d5e7eac60f263fe27a915e80 Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Mon, 13 Jul 2026 22:01:10 -0400
Subject: [PATCH 4/5] sequoia-sq: add versionCheckHook

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/se/sequoia-sq/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/se/sequoia-sq/package.nix b/pkgs/by-name/se/sequoia-sq/package.nix
index 7345fdf7f24d..764f5af492ce 100644
--- a/pkgs/by-name/se/sequoia-sq/package.nix
+++ b/pkgs/by-name/se/sequoia-sq/package.nix
@@ -10,6 +10,7 @@
   openssl,
   cacert,
   sqlite,
+  versionCheckHook,
 }:
 
 rustPlatform.buildRustPackage (finalAttrs: {
@@ -54,6 +55,9 @@ rustPlatform.buildRustPackage (finalAttrs: {
   __darwinAllowLocalNetworking = true;
 
   doCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  doInstallCheck = true;
+  versionCheckProgramArg = "version";
 
   postInstall = ''
     installManPage ${finalAttrs.env.ASSET_OUT_DIR}/man-pages/*.*

From 94e565a31d646629b276a630b3d6ca15707e1abc Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Mon, 13 Jul 2026 22:03:02 -0400
Subject: [PATCH 5/5] sequoia-sq: add anish to maintainers

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/se/sequoia-sq/package.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/by-name/se/sequoia-sq/package.nix b/pkgs/by-name/se/sequoia-sq/package.nix
index 764f5af492ce..383f556a1ad6 100644
--- a/pkgs/by-name/se/sequoia-sq/package.nix
+++ b/pkgs/by-name/se/sequoia-sq/package.nix
@@ -79,6 +79,7 @@ rustPlatform.buildRustPackage (finalAttrs: {
       minijackson
       doronbehar
       dvn0
+      anish
     ];
     mainProgram = "sq";
   };