feat: add mautrix mattermost

utils/pkgs/mautrix-mattermost/default.nix

@@ -0,0 +1,30 @@
+{ lib, buildGo126Module, fetchFromGitHub, olm }:
+
+buildGo126Module rec {
+  pname = "mautrix-mattermost";
+  version = "0-unstable-2026-03-01";
+
+  src = fetchFromGitHub {
+    owner = "bostrot";
+    repo = "mautrix-mattermost";
+    rev = "f7996f0e4acd68b24f2a1a88961712682b6017a5";
+    hash = "sha256-J8CJd0tsTLHJRyRVP8fVnzsCS5VV9iXr1epA6P2Qec4=";
+  };
+
+  vendorHash = "sha256-r4mmSEzx/oSv0OutLuXe7LwODUJaSwuQ/CNFZNqw5+c=";
+
+  buildInputs = [ olm ];
+
+  # Disable CGO except for olm
+  env.CGO_ENABLED = 1;
+
+  doCheck = false;
+
+  meta = with lib; {
+    description = "A Matrix-Mattermost puppeting bridge based on mautrix-go";
+    homepage = "https://github.com/bostrot/mautrix-mattermost";
+    license = licenses.agpl3Plus;
+    maintainers = [ ];
+    mainProgram = "mautrix-mattermost";
+  };
+}

utils/pkgs/mautrix-mattermost/update.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p nix-prefetch-github jq cacert
+
+set -euo pipefail
+
+cd "$(dirname "${BASH_SOURCE[0]}")"
+repo_root="$(cd ../../.. && pwd)"
+
+owner="bostrot"
+repo="mautrix-mattermost"
+
+# Get latest commit from GitHub
+echo "Fetching latest commit from $owner/$repo..."
+commit_info=$(curl -s "https://api.github.com/repos/$owner/$repo/commits?per_page=1")
+rev=$(echo "$commit_info" | jq -r '.[0].sha')
+date=$(echo "$commit_info" | jq -r '.[0].commit.committer.date' | cut -dT -f1)
+echo "Latest commit: $rev ($date)"
+
+# Update rev in default.nix
+sed -i "s|rev = \".*\";|rev = \"$rev\";|" default.nix
+sed -i "s|version = \".*\";|version = \"0-unstable-$date\";|" default.nix
+
+# Fetch source hash
+echo "Fetching source hash..."
+prefetch_output=$(nix-prefetch-github "$owner" "$repo" --rev "$rev" --json 2>/dev/null)
+src_hash=$(echo "$prefetch_output" | jq -r '.hash')
+echo "Source hash: $src_hash"
+sed -i "s|hash = \"sha256-.*\";|hash = \"$src_hash\";|" default.nix
+
+# Set placeholder vendorHash to trigger build failure
+sed -i "s|vendorHash = \"sha256-.*\";|vendorHash = \"sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=\";|" default.nix
+
+# Build to get the correct vendorHash
+echo "Building to determine vendorHash..."
+cd "$repo_root"
+build_output=$(nix build --impure --no-link --expr 'with import <nixpkgs> { config.permittedInsecurePackages = ["olm-3.2.16"]; }; callPackage ./utils/pkgs/mautrix-mattermost {}' 2>&1 || true)
+
+vendor_hash=$(echo "$build_output" | grep -oP "got:\s+sha256-[A-Za-z0-9+/=]+" | tail -1 | awk '{print $2}')
+
+if [ -z "$vendor_hash" ]; then
+  echo "Error: Could not determine vendorHash from build output"
+  echo "Build output:"
+  echo "$build_output"
+  exit 1
+fi
+
+echo "vendorHash: $vendor_hash"
+cd "$repo_root/utils/pkgs/mautrix-mattermost"
+sed -i "s|vendorHash = \"sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=\";|vendorHash = \"$vendor_hash\";|" default.nix
+
+# Verify the build works
+echo ""
+echo "Verifying build..."
+cd "$repo_root"
+if nix build --impure --no-link --expr 'with import <nixpkgs> { config.permittedInsecurePackages = ["olm-3.2.16"]; }; callPackage ./utils/pkgs/mautrix-mattermost {}'; then
+  echo ""
+  echo "Successfully updated mautrix-mattermost to $rev ($date)"
+  echo "  Source hash: $src_hash"
+  echo "  vendorHash: $vendor_hash"
+else
+  echo ""
+  echo "Build failed after updating hashes"
+  exit 1
+fi