feat: adopt kwallet for pi credentials and ssh passphrases

env.sh

@@ -63,6 +63,11 @@ if [ -z "$SSH_AUTH_SOCK" ]; then
   fi
 fi
 
+if [ -x "/usr/bin/ksshaskpass" ]; then
+  export SSH_ASKPASS="/usr/bin/ksshaskpass"
+  export SSH_ASKPASS_REQUIRE="prefer"
+fi
+
 # va-api — auto-select driver based on available GPU
 if grep -q '0x1002' /sys/class/drm/card*/device/vendor 2>/dev/null; then
   export LIBVA_DRIVER_NAME=radeonsi

mise/conf.d/kde.toml

@@ -6,6 +6,7 @@
 
 [bootstrap.packages]
 "dnf:kdialog" = "latest"
+"dnf:ksshaskpass" = "latest"
 "dnf:pam-kwallet" = "latest"
 "brew-cask:font-inter" = "latest"
 "brew-cask:font-iosevka-ss08" = "latest"

mise/conf.d/pi.toml

@@ -1,5 +1,6 @@
 [dotfiles]
 "~/.pi/agent/settings.json" = "../../pi/settings.json"
+"~/.pi/agent/models.json" = "../../pi/models.json"
 "~/.pi/agent/themes/nord-dark.json" = "../../pi/themes/nord-dark.json"
 "~/.pi/agent/themes/nord-claude.json" = "../../pi/themes/nord-claude.json"
 

mise/conf.d/ssh.toml

@@ -1,3 +1,7 @@
+[dotfiles]
+"~/.ssh/config.d/00-machine.conf" = "../../ssh/client.conf"
+"~/.config/autostart/ssh-add.desktop" = "../../ssh/ssh-add.desktop"
+
 [bootstrap.files."/etc/ssh/sshd_config.d/01-odsod-machine.conf"]
 source = "../../ssh/machine.conf"
 owner = "root"

pi/models.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://pi.dev/schemas/models.schema.json",
+  "providers": {
+    "opper": {
+      "name": "Opper",
+      "baseUrl": "https://api.opper.ai/v3/compat",
+      "api": "openai-completions",
+      "apiKey": "!secret-tool lookup service opper user odsod",
+      "models": [
+        {
+          "id": "deepseek-v4.1-flash-1017",
+          "name": "DeepSeek V4.1 Flash (1017)",
+          "api": "openai-completions",
+          "reasoning": true,
+          "thinkingLevelMap": {
+            "off": "none",
+            "minimal": "minimal",
+            "low": "low",
+            "medium": "medium",
+            "high": "high",
+            "xhigh": "xhigh",
+            "max": "max"
+          },
+          "input": ["text", "image"],
+          "cost": {
+            "input": 0.2,
+            "output": 0.6,
+            "cacheRead": 0.006,
+            "cacheWrite": 0
+          },
+          "contextWindow": 1048576,
+          "maxTokens": 393216,
+          "compat": {
+            "supportsReasoningEffort": true
+          }
+        }
+      ]
+    }
+  }
+}

pi/settings.json

@@ -1,10 +1,11 @@
 {
-  "defaultProvider": "opencode-go",
-  "defaultModel": "deepseek-v4.1-flash",
+  "defaultProvider": "opper",
+  "defaultModel": "deepseek-v4.1-flash-1017",
+  "modelThinkingLevels": {
+    "opper/deepseek-v4.1-flash-1017": "high"
+  },
   "theme": "nord-claude",
   "quietStartup": true,
-  "defaultTools": [
-    "+codemode"
-  ],
+  "defaultTools": ["+codemode"],
   "lastChangelogVersion": "1.3.0"
-}
+}

ssh/client.conf

@@ -0,0 +1,8 @@
+# Machine SSH client defaults
+# Included via ~/.ssh/config.d/*
+
+Host *
+  AddKeysToAgent yes
+
+Host odsod-* *.lan *.ts.net 192.168.* 100.*
+  ForwardAgent yes

ssh/ssh-add.desktop

@@ -0,0 +1,7 @@
+[Desktop Entry]
+Name=SSH Key Agent
+Comment=Automatically load SSH keys into ssh-agent at login using ksshaskpass
+Exec=ssh-add -q
+Type=Application
+X-KDE-autostart-after=panel
+X-KDE-StartupNotify=false