Evaluate the final merged value of an attribute in the user's actual NixOS/Home Manager configuration via nix eval (e.g. attr='services.openssh.enable'). flake_uri and mode auto-resolve when omitted.

Validation ladder for the configuration, fast to slow: level='lint' (statix+deadnix; returns a structured findings list — lint only), 'flake' (nix flake check), 'dry-build' (evaluate and plan the closure build), 'dry-activate' (NixOS only, shows what activation would change).

Format .nix files. With paths: nixfmt per file. Without: nix fmt in the flake directory, falling back to nixfmt on all .nix files when the flake defines no formatter.

Build the full system/HM closure without activating it. Returns the output store path.

Build the new closure and diff it against the running system (nvd, falling back to nix store diff-closures): package additions, removals, version changes. Use before switch.

Activate the configuration (sudo nixos-rebuild switch / home-manager switch). Records rollback_generation first. Returns a structured 'summary' (units changed, derivations built) plus gen before/after; on success the raw log is trimmed to a tail (pass full_log=True for all of it). No implicit validation by default; pass validate=True to gate on check('dry-build') first. On a sudo auth failure returns a 'privilege' diagnosis.

action='list': enumerate system/HM generations with dates and current marker. action='rollback': revert to the previous generation. Pass mode='home-manager' for HM generations.