diff --git a/.envrc b/.envrc
index 3550a30..0d0486a 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1,9 @@
 use flake
+
+# ── Headroom (uv-managed Python venv) ──────────────────────────
+VENV_DIR="$PWD/.direnv/headroom-venv"
+if [ ! -d "$VENV_DIR" ]; then
+  uv venv "$VENV_DIR"
+  uv pip install --python "$VENV_DIR/bin/python" --quiet "headroom-ai[proxy]"
+fi
+PATH_add "$VENV_DIR/bin"
diff --git a/.gitignore b/.gitignore
index 0b80812..b154e34 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,8 +4,10 @@ node_modules
 bun.lock
 package.json
 
+AGENTS.md
 .codegraph
 .mcp.json
 opencode.jsonc
 .agents
+.serena
 skills-lock.json
diff --git a/flake.nix b/flake.nix
index 1e6c9b6..5455fe8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -216,6 +216,7 @@
     # ── Dev Shells (for direnv) ──────────────────────────────────
     devShells = forAllSystems (sys: let
       pkgs = nixpkgs.legacyPackages.${sys};
+      pkgs-unstable = nixpkgs-unstable.legacyPackages.${sys};
     in {
       # Notice the 'default =' here!
       default = pkgs.mkShell {
@@ -225,8 +226,14 @@
           git
           nil
           bun
+          nodejs
           xorriso
+          pkgs-unstable.codex
+          uv
         ];
+        shellHook = ''
+          export PATH="$PWD/node_modules/.bin:$PATH"
+        '';
       };
     });
   };