diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 7cdb121f..65d69e6b 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -177,6 +177,8 @@ in
       "nixpkgs-review"
       "sane-scripts.dev"
       "sequoia"
+      "wally-cli"
+      "zsa-udev-rules"
     ];
 
     consoleMediaUtils = declPackageSet [
@@ -363,6 +365,7 @@ in
       "inkscape"
       # "jellyfin-media-player"
       "kdenlive"
+      "keymapp"
       # "kid3"  # audio tagging
       "krita"
       "libreoffice"  # TODO: replace with an office suite that uses saner packaging?
diff --git a/hosts/common/programs/default.nix b/hosts/common/programs/default.nix
index fa9c13d0..77800cb4 100644
--- a/hosts/common/programs/default.nix
+++ b/hosts/common/programs/default.nix
@@ -76,6 +76,7 @@
     ./imagemagick.nix
     ./jellyfin-media-player.nix
     ./kdenlive.nix
+    ./keymapp.nix
     ./komikku.nix
     ./koreader
     ./less.nix
@@ -153,6 +154,7 @@
     ./tuba.nix
     ./unl0kr
     ./vlc.nix
+    ./wally-cli.nix
     ./waybar
     ./waylock.nix
     ./where-am-i.nix
@@ -171,6 +173,7 @@
     ./zeal.nix
     ./zecwallet-lite.nix
     ./zulip.nix
+    ./zsa-udev-rules.nix
     ./zsh
   ];
 
diff --git a/hosts/common/programs/keymapp.nix b/hosts/common/programs/keymapp.nix
new file mode 100644
index 00000000..26b56021
--- /dev/null
+++ b/hosts/common/programs/keymapp.nix
@@ -0,0 +1,8 @@
+# ZSA keyboard (Ergodox, Moonlander, ...) firmware flasher and keymap viewer.
+# video: <https://www.zsa.io/flash>
+# displays on launch:
+# - "Error connecting to the keyboard, make sure the layout flashed on your keyboard was recently compiled with Oryx and that the [Live training] option is toggled on in the advanced settings."
+{ ... }:
+{
+  sane.programs.keymapp = {};
+}
diff --git a/hosts/common/programs/wally-cli.nix b/hosts/common/programs/wally-cli.nix
new file mode 100644
index 00000000..192b25f3
--- /dev/null
+++ b/hosts/common/programs/wally-cli.nix
@@ -0,0 +1,5 @@
+# wally-cli: allows flashing firmware to keyboards like ZSA Ergodox.
+{ ... }:
+{
+  sane.programs.wally-cli = {};
+}
diff --git a/hosts/common/programs/zsa-udev-rules.nix b/hosts/common/programs/zsa-udev-rules.nix
new file mode 100644
index 00000000..2f278df6
--- /dev/null
+++ b/hosts/common/programs/zsa-udev-rules.nix
@@ -0,0 +1,8 @@
+{ config, lib, ... }:
+let
+  cfg = config.sane.programs.zsa-udev-rules;
+in
+{
+  sane.programs.zsa-udev-rules.sandbox.enable = false;
+  services.udev.packages = lib.mkIf cfg.enabled [ cfg.package ];
+}