fix(ai-tools): adopt 'taskwarrior' home manager secrets approach

home/modules/ai-tools/opencode.nix

@@ -2,29 +2,40 @@
   config,
   lib,
   pkgs,
+  myUtils,
+  osConfig ? null,
+  inputs ? null,
   ...
 }:
 
 let
-  cfg = config.ai-tools.opencode;
+  sops = myUtils.sopsAvailability config osConfig;
+  standalone = osConfig == null;
 in
 {
-  config = lib.mkIf cfg.enable {
-    secrets.files.opencode = [ "api-key" ];
-    secrets.templates."opencode/auth.json" = {
-      path = ".local/share/opencode/auth.json";
-      content = ''
-        {
-          "zai-coding-plan": {
-            "type": "api",
-            "key": "${config.sops.placeholder."opencode/api-key"}"
-          }
-        }
-      '';
+  config = lib.mkIf config.ai-tools.opencode.enable (
+    lib.optionalAttrs standalone {
+      sops = {
+        secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" {
+          opencode = [ "api-key" ];
         };
+        templates."opencode/auth.json" = {
+          path = "${config.home.homeDirectory}/.local/share/opencode/auth.json";
+          content = builtins.toJSON {
+            zai-coding-plan = {
+              type = "api";
+              key = config.sops.placeholder."opencode/api-key";
+            };
+          };
+        };
+      };
+    }
+    // {
+      warnings =
+        lib.optional (!sops.available)
+          "opencode is enabled, but sops templates are not available. the opencode API key will not be configured.";
 
       home.packages = [ pkgs.opencode ];
-
       home.file.".config/opencode/opencode.json".text = builtins.toJSON {
         "$schema" = "https://opencode.ai/config.json";
         permission = {
@@ -46,5 +57,6 @@ in
         };
         plugin = [ "@mohak34/opencode-notifier@latest" ];
       };
-  };
+    }
+  );
 }

home/modules/taskwarrior/default.nix

@@ -9,7 +9,6 @@
 }:
 
 let
-  cfg = config.taskwarrior;
   sops = myUtils.sopsAvailability config osConfig;
   standalone = osConfig == null;
 
@@ -62,7 +61,7 @@ in
 {
   options.taskwarrior.enable = lib.mkEnableOption "taskwarrior";
 
-  config = lib.mkIf cfg.enable (
+  config = lib.mkIf config.taskwarrior.enable (
     lib.optionalAttrs standalone {
       sops = {
         secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" {