{
  lib,
  flake,
  rustPlatform,
  fetchFromGitHub,
  pkg-config,
  unpinCargoMsrvHook,
  openssl,
  sqlite,
  zstd,
  dbus,
  stdenv,
  versionCheckHook,
}:

rustPlatform.buildRustPackage (finalAttrs: {
  pname = "but";
  version = "0.22.3";

  src = fetchFromGitHub {
    owner = "gitbutlerapp";
    repo = "gitbutler";
    tag = "release/${finalAttrs.version}";
    hash = "sha256-nW3yCbpbIhawLQVV+DptzGYiFBSKcyAP89NtDWHJM+0=";
  };

  cargoHash = "sha256-XRc2yok9K7f/vRAqgO78JUq/U36XSiUeOINupfOOSjw=";

  # Upstream pins a specific stable channel; allow building with nixpkgs' rustc.
  postPatch = ''
    rm -f rust-toolchain.toml
  '';

  nativeBuildInputs = [
    pkg-config
    unpinCargoMsrvHook
  ];

  buildInputs = [
    openssl
    sqlite
    zstd
  ]
  ++ lib.optionals stdenv.hostPlatform.isLinux [
    dbus
  ];

  env = {
    # Upstream reads the user-facing version from $VERSION at build time
    # (set by their release pipeline); without it `but --version` reports "dev".
    VERSION = finalAttrs.version;
    # CHANNEL=release makes the binary use the production app identifier.
    CHANNEL = "release";
    OPENSSL_NO_VENDOR = "1";
    ZSTD_SYS_USE_PKG_CONFIG = "1";
    # Avoid generating TypeScript bindings into the source tree during build.
    TS_RS_EXPORT_DIR = "/build/ts-rs";
  };

  cargoBuildFlags = [
    "--package=but"
  ];
  # Signal that the binary is distributed via a package manager so it
  # disables self-update / `but update install` codepaths.
  buildFeatures = [ "but/packaged-but-distribution" ];

  # The workspace test suite requires git fixtures, network access and the
  # full Tauri/GUI stack; the CLI itself is exercised via versionCheckHook.
  doCheck = false;

  doInstallCheck = true;
  nativeInstallCheckInputs = [ versionCheckHook ];
  versionCheckProgramArg = "--version";

  passthru.category = "Workflow & Project Management";

  meta = with lib; {
    description = "GitButler CLI - virtual branches and AI-assisted Git workflow from the terminal";
    homepage = "https://github.com/gitbutlerapp/gitbutler";
    changelog = "https://github.com/gitbutlerapp/gitbutler/releases/tag/release/${finalAttrs.version}";
    license = flake.lib.licenses.fsl11Mit;
    sourceProvenance = with sourceTypes; [ fromSource ];
    maintainers = with flake.lib.maintainers; [ mic92 ];
    mainProgram = "but";
    platforms = platforms.linux ++ platforms.darwin;
  };
})