{ modules, ... }:
{
  modules.ai = {
    provides = {
      secrets = {
        homeManager =
          { config, ... }:
          {
            sops = {
              secrets.scug-io-ai-key = {
                # Decrypted file path (available at runtime, not eval time)
                path = config.home.homeDirectory + "/.secrets/scug_io_api_key";
                sopsFile = ../secrets/content/secrets.yaml;
              };
              secrets.opencode-go-zen-key = {
                # Decrypted file path (available at runtime, not eval time)
                path = config.home.homeDirectory + "/.secrets/opencode-go-zen-key";
                sopsFile = ../secrets/content/secrets.yaml;
              };
            };
            programs.fish = {
              shellInit = ''
                if test -f "$HOME/.secrets/scug_io_api_key"
                set -x SCUG_IO_API_KEY (cat "$HOME/.secrets/scug_io_api_key")
                end
                if test -f "$HOME/.secrets/opencode-go-zen-key"
                set -x OPENCODE_GO_API_KEY (cat "$HOME/.secrets/opencode-go-zen-key")
                end
              '';
            };
          };
      };
    };
  };
}