diff --git a/.gitignore b/.gitignore
index f7aa9d68..3039d866 100644
--- a/.gitignore
+++ b/.gitignore
@@ -53,3 +53,6 @@ test-languages/
 
 nul
 release/
+
+# Nix
+result
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 00000000..8ba83bdf
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1779536132,
+        "narHash": "sha256-q+fF42iv/geEbHfgSzy3tS0FF/EyD6XTZ98E6yxiBO8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "3d8f0f3f72a6cd4d93d0ad13203f2ea1cb7e1456",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 00000000..8c26c31c
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,103 @@
+{
+  description = "CodeGraph – semantic code intelligence for AI agents";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+  };
+
+  outputs = { self, nixpkgs }:
+    let
+      supportedSystems = [
+        "x86_64-linux"
+        "aarch64-linux"
+        "x86_64-darwin"
+        "aarch64-darwin"
+      ];
+      forAllSystems = nixpkgs.lib.genAttrs supportedSystems;
+      nixpkgsFor = forAllSystems (system: nixpkgs.legacyPackages.${system});
+    in
+    {
+      packages = forAllSystems (system:
+        let
+          pkgs = nixpkgsFor.${system};
+
+          # Node 24 — matches build-bundle.sh pin (v24.16.0).
+          # Requires node:sqlite (>=22.5), blocks 25.x (V8 turboshaft OOM).
+          nodejs = pkgs.nodejs_24;
+
+          codegraph = pkgs.buildNpmPackage {
+            pname = "codegraph";
+            version =
+              (builtins.fromJSON (builtins.readFile ./package.json)).version;
+
+            src = ./.;
+
+            npmDeps = pkgs.fetchNpmDeps {
+              src = ./.;
+              # Update after package-lock.json changes:
+              #   nix run nixpkgs#prefetch-npm-deps -- package-lock.json
+              hash = "sha256-GJfqzykgrgD/KCtf8LupRw31S2cCmwGCF/0PMpzaCrk=";
+            };
+
+            inherit nodejs;
+
+            npmBuildScript = "build";
+
+            # The build copies .wasm + schema.sql into dist/ via the
+            # `copy-assets` npm script (called from `build`).  Nothing
+            # extra to do here.
+
+            installPhase = ''
+              runHook preInstall
+
+              # Application code
+              mkdir -p $out/lib/codegraph
+              cp -r dist $out/lib/codegraph/dist
+              cp package.json $out/lib/codegraph/
+
+              # Production node_modules — prune devDependencies that the
+              # build step pulled in so the closure stays lean.
+              npm prune --omit=dev
+              find node_modules -mindepth 1 -maxdepth 1 -type d -empty -delete
+              cp -r node_modules $out/lib/codegraph/node_modules
+
+              # Launcher wrapper: injects --liftoff-only so tree-sitter's
+              # large WASM grammars stay on V8's Liftoff baseline compiler
+              # and never hit the turboshaft Zone OOM (issues #293/#298).
+              mkdir -p $out/bin
+              cat > $out/bin/codegraph <<'EOF'
+#!/bin/sh
+exec @node@ --liftoff-only @out@/lib/codegraph/dist/bin/codegraph.js "$@"
+EOF
+              substituteInPlace $out/bin/codegraph \
+                --replace-fail '@node@' '${nodejs}/bin/node' \
+                --replace-fail '@out@' "$out"
+              chmod +x $out/bin/codegraph
+
+              runHook postInstall
+            '';
+
+            meta = with pkgs.lib; {
+              description =
+                "Semantic code intelligence for AI agents — local-first knowledge graph over tree-sitter";
+              homepage = "https://github.com/colbymchenry/codegraph";
+              license = licenses.mit;
+              mainProgram = "codegraph";
+              platforms = platforms.unix;
+            };
+          };
+        in
+        {
+          default = codegraph;
+          inherit codegraph;
+        });
+
+      devShells = forAllSystems (system:
+        let pkgs = nixpkgsFor.${system};
+        in {
+          default = pkgs.mkShell {
+            buildInputs = [ pkgs.nodejs_24 pkgs.prefetch-npm-deps ];
+          };
+        });
+    };
+}