@sebastienrousseau/dotfiles 0.2.468 → 0.2.481

package/dot_config/shell/00-container-detect.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# 00-container-detect.sh: Detect container environments
+# Sets environment flags so downstream configs can adapt behaviour
+# (e.g. simpler prompts, skip host-only tooling).
+#
+# Security: Uses targeted detection methods to minimize information disclosure.
+# Only checks for presence of containers, not specific runtime details.
+
+# Detect container environment using file-based indicators (preferred)
+# These methods don't expose runtime details like /proc/1/cgroup would
+_detect_container() {
+  # Docker creates this file
+  [ -f /.dockerenv ] && return 0
+
+  # Podman/other OCI runtimes create this
+  [ -f /run/.containerenv ] && return 0
+
+  # Check for container environment variables (set by runtime)
+  [ -n "${container:-}" ] && return 0
+
+  # Systemd-nspawn sets this
+  [ -n "${SYSTEMD_NSPAWN_CONTAINER:-}" ] && return 0
+
+  # LXC/LXD detection via environment
+  [ -n "${LXC_NAME:-}" ] && return 0
+
+  # Fallback: Check cgroup v2 for container slice (minimal info exposure)
+  # Only checks if we're in a container scope, not which runtime
+  if [ -f /proc/self/cgroup ]; then
+    grep -qsE '^0::/.*/(docker|libpod|lxc|containerd)' /proc/self/cgroup 2>/dev/null && return 0
+  fi
+
+  return 1
+}
+
+if _detect_container; then
+  export DOTFILES_CONTAINER=1
+fi
+unset -f _detect_container
+
+# Detect GitHub Codespaces
+if [ -n "${CODESPACES:-}" ]; then
+  export DOTFILES_CODESPACE=1
+  export DOTFILES_CONTAINER=1
+fi
+
+# Detect VS Code devcontainer (Remote - Containers sets this)
+if [ -n "${REMOTE_CONTAINERS:-}" ] || [ -n "${REMOTE_CONTAINERS_IPC:-}" ]; then
+  export DOTFILES_DEVCONTAINER=1
+  export DOTFILES_CONTAINER=1
+fi

package/dot_config/shell/00-core-paths.sh.tmpl

@@ -0,0 +1,95 @@
+#!/usr/bin/env bash
+
+# Universal Paths (Generated by Chezmoi)
+# Note: XDG variables are set in ~/.zshenv (Bootloader)
+
+# 1. System Paths (Prepend, but will be pushed down by later prepends)
+export PATH="/usr/bin:/bin:/usr/sbin:/sbin:${PATH}"
+
+# 2. Homebrew Paths (Prepend -> Higher Priority)
+if [[ -d "/opt/homebrew/bin" ]]; then
+    export PATH="/opt/homebrew/bin:/opt/homebrew/sbin:${PATH}"
+fi
+
+# 3. Language Runtimes
+# Ruby (Homebrew)
+if [[ -d "/opt/homebrew/opt/ruby/bin" ]]; then
+    export PATH="/opt/homebrew/opt/ruby/bin:${PATH}"
+fi
+# Ruby (User Gems)
+export PATH="${HOME}/.gem/ruby/bin:${PATH}"
+
+# Python (Pipx)
+export PIPX_HOME="${XDG_DATA_HOME:-$HOME/.local/share}/pipx"
+export PIPX_BIN_DIR="${XDG_BIN_HOME:-$HOME/.local/bin}"
+export PATH="${PIPX_BIN_DIR}:${PATH}"
+
+# Rust (Cargo)
+export PATH="${HOME}/.cargo/bin:${PATH}"
+
+# Go
+export PATH="${HOME}/go/bin:${PATH}"
+
+# Bun
+export BUN_INSTALL="${HOME}/.bun"
+export PATH="${BUN_INSTALL}/bin:${PATH}"
+
+# Kubeconfig merge logic (merge all configs in ~/.kube/config.d/)
+# Lazy-loaded via kubectl wrapper to avoid startup cost
+_lazy_load_kubeconfig() {
+    if [[ -d "${HOME}/.kube/config.d" ]]; then
+        local kubeconfig_extra=""
+        for conf in "${HOME}/.kube/config.d"/*; do
+            [[ -f "$conf" ]] && kubeconfig_extra="${kubeconfig_extra}:${conf}"
+        done
+        [[ -n "$kubeconfig_extra" ]] && export KUBECONFIG="${HOME}/.kube/config${kubeconfig_extra}"
+    fi
+    unfunction kubectl _lazy_load_kubeconfig 2>/dev/null
+    command kubectl "$@"
+}
+# Only wrap kubectl if config.d exists and kubectl is installed
+if [[ -d "${HOME}/.kube/config.d" ]]; then
+    kubectl() { _lazy_load_kubeconfig "$@"; }
+fi
+# Still honor explicit KUBECONFIG or in-cluster detection
+if [[ -n "${KUBERNETES_SERVICE_HOST:-}" ]] || [[ -n "${KUBECONFIG:-}" ]]; then
+    _lazy_load_kubeconfig --version >/dev/null 2>&1 || true
+fi
+
+# Node.js (Global)
+export PATH="${HOME}/.node_modules/bin:${PATH}"
+
+# Lua (Luarocks)
+export PATH="${HOME}/.luarocks/bin:${PATH}"
+
+# 4. Applications (macOS Specifics from 99-custom)
+export PATH="/Library/Apple/usr/bin:/Library/TeX/texbin:${PATH}"
+export PATH="/Applications/Topaz Photo AI.app/Contents/Resources/bin:/Applications/Little Snitch.app/Contents/Components:/Applications/iTerm.app/Contents/Resources/utilities:${PATH}"
+export PATH="/Applications/Visual Studio Code.app/Contents/Resources/app/bin:${PATH}"
+
+# 5. Local Bin (Highest Priority)
+export PATH="${HOME}/.local/bin:${PATH}"
+export PATH="${HOME}/bin:${PATH}"
+
+# Deduplicate PATH (Keep first occurrence to maintain precedence)
+# Standard Zsh handles this with 'typeset -U path', but for bash compatibility/subshells:
+if [ -z "${ZSH_VERSION:-}" ]; then
+    # Use native bash associative arrays for O(n) deduplication (bash 4+)
+    if [[ ${BASH_VERSION%%.*} -ge 4 ]]; then
+        declare -A _seen_paths
+        IFS=':' read -ra _path_array <<< "$PATH"
+        _new_path=""
+        for _dir in "${_path_array[@]}"; do
+            if [[ -n "$_dir" && -z "${_seen_paths[$_dir]:-}" ]]; then
+                _seen_paths[$_dir]=1
+                _new_path="${_new_path:+$_new_path:}$_dir"
+            fi
+        done
+        PATH="$_new_path"
+        unset _seen_paths _path_array _new_path _dir
+    else
+        # Fallback to awk for bash 3.x
+        PATH=$(echo "$PATH" | awk -v RS=':' '!seen[$0]++ {ORS=(NR>1?":":"")} {print}')
+    fi
+    export PATH
+fi

package/dot_config/shell/05-core-safety.sh.tmpl

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+# 05-safety.sh: Core Safety Settings
+# Part of the "Core Layer"
+
+# Set sane defaults for safety, though be careful with -e in interactive shell
+# Use 'set -o pipefail' to catch pipeline errors if supported
+if [[ -n "$BASH_VERSION" ]] || [[ -n "$ZSH_VERSION" ]]; then
+    set -o pipefail 2>/dev/null || true
+fi
+
+# Prevent file overwrite with redirection (force use of >|)
+set -o noclobber

package/dot_config/shell/40-ls-colors.sh.tmpl

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+# Set ls colors with GNU/BSD detection
+# GNU coreutils: LS_COLORS via dircolors
+# BSD/macOS: LSCOLORS + CLICOLOR
+
+if command -v dircolors >/dev/null 2>&1; then
+  if [ -f "${XDG_CONFIG_HOME:-$HOME/.config}/dircolors" ]; then
+    # shellcheck disable=SC1090
+    eval "$(dircolors -b "${XDG_CONFIG_HOME:-$HOME/.config}/dircolors")"
+  else
+    # shellcheck disable=SC1090
+    eval "$(dircolors -b)"
+  fi
+else
+  case "$(uname -s 2>/dev/null)" in
+    Darwin*)
+      export CLICOLOR=1
+      export LSCOLORS="ExFxCxDxBxegedabagacad"
+      if command -v gdircolors >/dev/null 2>&1; then
+        # shellcheck disable=SC1090
+        eval "$(gdircolors -b)"
+      fi
+      ;;
+  esac
+fi
+
+# Ensure LS_COLORS is set for Zsh completion when only LSCOLORS exists
+if [ -z "${LS_COLORS:-}" ] && [ -n "${LSCOLORS:-}" ]; then
+  export LS_COLORS=""
+fi

package/dot_config/shell/50-logic-functions.sh.tmpl

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+# Universal Functions (Generated by Chezmoi)
+
+{{- $globPattern := joinPath .chezmoi.sourceDir ".chezmoitemplates/functions/**/*.sh" }}
+{{- $files := glob $globPattern }}
+{{- range $files }}
+  {{- include . }}
+  {{- "\n" }}
+{{- end }}

package/dot_config/shell/90-theme-switch.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+# Detect system appearance (dark/light) and export THEME_MODE
+# Consumed by starship, bat, delta, fzf, and other theme-aware tools
+#
+# macOS: reads AppleInterfaceStyle from user defaults
+# Linux: checks DBUS org.freedesktop.portal.Settings color-scheme
+#
+# Performance: Caches result for 1 hour to avoid system calls on every shell startup
+
+detect_theme_mode() {
+  local cache_file="${XDG_CACHE_HOME:-$HOME/.cache}/dotfiles_theme_mode"
+  local cache_ttl=3600  # 1 hour in seconds
+
+  # Check if cache exists and is fresh
+  if [[ -f "$cache_file" ]]; then
+    local cache_age
+    local now
+    now=$(date +%s)
+    # macOS uses -f %m, Linux uses -c %Y for mtime
+    if [[ "$(uname -s)" == "Darwin" ]]; then
+      cache_age=$((now - $(stat -f %m "$cache_file" 2>/dev/null || echo 0)))
+    else
+      cache_age=$((now - $(stat -c %Y "$cache_file" 2>/dev/null || echo 0)))
+    fi
+    if [[ $cache_age -lt $cache_ttl ]]; then
+      THEME_MODE="$(cat "$cache_file")"
+      export THEME_MODE
+      return
+    fi
+  fi
+
+  # Ensure cache directory exists
+  mkdir -p "$(dirname "$cache_file")"
+
+  case "$(uname -s)" in
+    Darwin)
+      if defaults read -g AppleInterfaceStyle >/dev/null 2>&1; then
+        export THEME_MODE="dark"
+      else
+        export THEME_MODE="light"
+      fi
+      ;;
+    Linux)
+      if command -v busctl >/dev/null 2>&1; then
+        local scheme
+        scheme="$(busctl --user get-property \
+          org.freedesktop.portal.Desktop \
+          /org/freedesktop/portal/desktop \
+          org.freedesktop.portal.Settings \
+          Read "org.freedesktop.appearance" "color-scheme" 2>/dev/null |
+          grep -o '[0-9]*$')"
+        if [ "$scheme" = "1" ]; then
+          export THEME_MODE="dark"
+        else
+          export THEME_MODE="light"
+        fi
+      else
+        export THEME_MODE="dark"
+      fi
+      ;;
+    *)
+      export THEME_MODE="dark"
+      ;;
+  esac
+
+  # Cache the result
+  echo "$THEME_MODE" > "$cache_file"
+}
+
+detect_theme_mode

package/dot_config/shell/90-ux-aliases.sh.tmpl

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+
+# Core Aliases — Eager Load (Generated by Chezmoi)
+# These are lightweight, high-frequency aliases loaded at shell startup.
+if [ -n "${BASH_VERSION:-}" ]; then
+  shopt -s expand_aliases
+fi
+
+{{ $coreCategories := list "cd" "clear" "configuration" "default" "diagnostics" "editor" "git" "interactive" "installer" "mkdir" "modern" "ps" "sudo" "compliance" -}}
+{{ $globPattern := joinPath .chezmoi.sourceDir ".chezmoitemplates/aliases/**/*.aliases.sh" -}}
+{{ $files := glob $globPattern -}}
+{{ range $files -}}
+  {{ $name := . -}}
+  {{ $isCore := false -}}
+  {{ range $coreCategories -}}
+    {{ if contains (printf "/%s/" .) $name -}}
+      {{ $isCore = true -}}
+    {{ end -}}
+  {{ end -}}
+  {{ if and $isCore (not (contains "/macOS/" $name)) }}
+{{ include $name }}
+  {{ end -}}
+{{ end }}
+
+# OS-Specific Core Aliases
+
+## macOS
+{{- if eq .chezmoi.os "darwin" }}
+  {{- $macGlobPattern := joinPath .chezmoi.sourceDir ".chezmoitemplates/aliases/macOS/*.aliases.sh" }}
+  {{- $macFiles := glob $macGlobPattern }}
+  {{- range $macFiles }}
+    {{- include . }}
+    {{- "\n" }}
+  {{- end }}
+{{- end }}

package/dot_config/shell/91-ux-aliases-lazy.sh.tmpl

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+# Tool-Specific Aliases — Lazy Load (Generated by Chezmoi)
+# These are loaded after the first prompt via precmd hook to keep startup fast.
+if [ -n "${BASH_VERSION:-}" ]; then
+  shopt -s expand_aliases
+fi
+
+{{ $coreCategories := list "cd" "clear" "configuration" "default" "diagnostics" "editor" "git" "interactive" "installer" "mkdir" "modern" "ps" "sudo" "compliance" -}}
+{{ $globPattern := joinPath .chezmoi.sourceDir ".chezmoitemplates/aliases/**/*.aliases.sh" -}}
+{{ $files := glob $globPattern -}}
+{{ range $files -}}
+  {{ $name := . -}}
+  {{ $isCore := false -}}
+  {{ range $coreCategories -}}
+    {{ if contains (printf "/%s/" .) $name -}}
+      {{ $isCore = true -}}
+    {{ end -}}
+  {{ end -}}
+  {{ if and (not $isCore) (not (contains "/macOS/" $name)) }}
+{{ include $name }}
+  {{ end -}}
+{{ end }}

package/dot_config/shell/Brewfile

@@ -0,0 +1,207 @@
+# =============================================================================
+# Brewfile - Unified Cross-Platform Package Management
+# Optimized for performance and development workflows
+# =============================================================================
+# Usage: brew bundle --file=~/.config/shell/Brewfile
+# =============================================================================
+
+# -----------------------------------------------------------------------------
+# Taps
+# -----------------------------------------------------------------------------
+tap "homebrew/bundle"
+tap "homebrew/services"
+
+# -----------------------------------------------------------------------------
+# Core Utilities (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "git"
+brew "chezmoi"
+brew "jq"
+brew "yq"
+brew "ripgrep"
+brew "fd"
+brew "fzf"
+brew "bat"
+brew "eza"
+brew "dust"
+brew "duf"
+brew "tree"
+brew "trash"
+brew "rename"
+
+# -----------------------------------------------------------------------------
+# Shell & Prompt (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "zsh"
+brew "starship"
+brew "zoxide"
+brew "atuin"
+brew "direnv"
+
+# -----------------------------------------------------------------------------
+# Development (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "neovim"
+brew "vim"
+brew "tmux"
+brew "lazygit"
+brew "git-delta"
+brew "git-absorb"                # Auto-create fixup commits
+brew "gh"
+brew "glab"
+brew "shellcheck"
+brew "shfmt"
+
+# -----------------------------------------------------------------------------
+# Languages & Runtimes (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "mise"                    # Universal version manager
+brew "uv"                      # Fast Python package manager
+brew "rustup"
+brew "go"
+
+# -----------------------------------------------------------------------------
+# Lua (for Neovim) (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "lua"
+brew "luajit"
+brew "luarocks"
+brew "stylua"
+
+# -----------------------------------------------------------------------------
+# System Monitoring (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "btop"
+brew "procs"
+brew "gping"
+brew "hyperfine"
+brew "fastfetch"
+
+# -----------------------------------------------------------------------------
+# Security & Encryption (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "age"
+brew "gnupg"
+brew "git-crypt"
+brew "mkcert"
+brew "lynis"
+
+# -----------------------------------------------------------------------------
+# AI & LLM Tools (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "ollama"
+brew "aichat"
+brew "mods"
+brew "fabric-ai"
+
+# -----------------------------------------------------------------------------
+# File & Text Processing (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "hexyl"
+brew "glow"
+brew "gum"
+brew "tlrc"
+brew "imagemagick"
+brew "ffmpeg"
+
+# -----------------------------------------------------------------------------
+# Networking (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "curl"
+brew "wget"
+brew "httpie"
+brew "mtr"
+
+# -----------------------------------------------------------------------------
+# Archive & Compression (Cross-Platform)
+# -----------------------------------------------------------------------------
+brew "p7zip"
+brew "unar"
+brew "sevenzip"
+
+# =============================================================================
+# macOS Only
+# =============================================================================
+if OS.mac?
+  # macOS Specific CLI Tools
+  brew "mas"                   # Mac App Store CLI
+  brew "duti"                  # Default app handler
+  brew "topgrade"              # Universal updater
+  brew "pinentry-mac"          # GPG pinentry for macOS
+
+  # -------------------------------------------------------------------------
+  # GUI Applications (Casks) - macOS Only
+  # -------------------------------------------------------------------------
+
+  # Terminals
+  cask "ghostty"
+  cask "warp"
+  cask "iterm2"
+
+  # Editors & IDEs
+  cask "visual-studio-code"
+  cask "zed"
+
+  # Browsers
+  cask "google-chrome"
+
+  # Productivity
+  cask "raycast"
+  cask "cleanmymac"
+  cask "cleanshot"
+  cask "copyclip"
+  cask "pdf-squeezer"
+  cask "imageoptim"
+  cask "the-unarchiver"
+  cask "betterzip"
+
+  # System Utilities
+  cask "karabiner-elements"
+  cask "jordanbaird-ice"
+  cask "aldente"
+  cask "topnotch"
+  cask "little-snitch"
+
+  # Development
+  cask "github"
+  cask "devutils"
+  cask "1password-cli"
+
+  # AI Tools
+  cask "claude-code"
+
+  # Design
+  cask "colorsnapper"
+  cask "sketch"
+
+  # Media
+  cask "vlc"
+
+  # Cloud & Sync
+  cask "dropbox"
+
+  # Communication
+  cask "zoom"
+
+  # Backup
+  cask "carbon-copy-cloner"
+
+  # Fonts
+  cask "font-meslo-lg-nerd-font"
+  cask "font-victor-mono"
+  cask "font-roboto-mono-for-powerline"
+
+  # Optional: LaTeX (large ~4GB, uncomment if needed)
+  # cask "mactex"
+end
+
+# =============================================================================
+# Linux / WSL
+# =============================================================================
+if OS.linux?
+  # Universal updater (also useful on Linux/WSL)
+  brew "topgrade"
+
+  # Linux-specific GPG pinentry
+  brew "pinentry"
+end

package/dot_config/shell/Brewfile.cask

@@ -0,0 +1,92 @@
+# =============================================================================
+# Brewfile.cask - GUI Applications (macOS)
+# =============================================================================
+
+# -----------------------------------------------------------------------------
+# Terminals
+# -----------------------------------------------------------------------------
+cask "ghostty"
+cask "warp"
+cask "iterm2"
+
+# -----------------------------------------------------------------------------
+# Editors & IDEs
+# -----------------------------------------------------------------------------
+cask "visual-studio-code"
+cask "zed"
+
+# -----------------------------------------------------------------------------
+# Browsers
+# -----------------------------------------------------------------------------
+cask "google-chrome"
+
+# -----------------------------------------------------------------------------
+# Productivity
+# -----------------------------------------------------------------------------
+cask "raycast"
+cask "cleanmymac"
+cask "cleanshot"
+cask "copyclip"
+cask "pdf-squeezer"
+cask "imageoptim"
+cask "the-unarchiver"
+cask "betterzip"
+
+# -----------------------------------------------------------------------------
+# System Utilities
+# -----------------------------------------------------------------------------
+cask "karabiner-elements"
+cask "jordanbaird-ice"
+cask "aldente"
+cask "topnotch"
+cask "little-snitch"
+
+# -----------------------------------------------------------------------------
+# Development
+# -----------------------------------------------------------------------------
+cask "github"
+cask "devutils"
+cask "1password-cli"
+
+# -----------------------------------------------------------------------------
+# AI Tools
+# -----------------------------------------------------------------------------
+cask "claude-code"
+
+# -----------------------------------------------------------------------------
+# Design
+# -----------------------------------------------------------------------------
+cask "colorsnapper"
+cask "sketch"
+
+# -----------------------------------------------------------------------------
+# Media
+# -----------------------------------------------------------------------------
+cask "vlc"
+
+# -----------------------------------------------------------------------------
+# Cloud & Sync
+# -----------------------------------------------------------------------------
+cask "dropbox"
+
+# -----------------------------------------------------------------------------
+# Communication
+# -----------------------------------------------------------------------------
+cask "zoom"
+
+# -----------------------------------------------------------------------------
+# Backup
+# -----------------------------------------------------------------------------
+cask "carbon-copy-cloner"
+
+# -----------------------------------------------------------------------------
+# Fonts
+# -----------------------------------------------------------------------------
+cask "font-meslo-lg-nerd-font"
+cask "font-victor-mono"
+cask "font-roboto-mono-for-powerline"
+
+# -----------------------------------------------------------------------------
+# Optional: LaTeX (large ~4GB)
+# -----------------------------------------------------------------------------
+cask "mactex"