@sebastienrousseau/dotfiles 0.2.468 → 0.2.481

package/docs/ALIASES.md

@@ -0,0 +1,128 @@
+# Aliases
+
+This page lists all shell aliases that the dotfiles provide.
+
+## Organization
+
+The repo organizes aliases in `~/.dotfiles/.chezmoitemplates/aliases/` by category. Each category has its own directory containing a `<name>.aliases.sh` file.
+
+## Categories
+
+### Navigation
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `..` | `cd ..` | Go up one directory |
+| `...` | `cd ../..` | Go up two directories |
+| `....` | `cd ../../..` | Go up three directories |
+| `-` | `cd -` | Go to previous directory |
+
+### Git
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `g` | `git` | Git shorthand |
+| `ga` | `git add` | Stage files |
+| `gaa` | `git add --all` | Stage all files |
+| `gc` | `git commit` | Commit |
+| `gcm` | `git commit -m` | Commit with message |
+| `gco` | `git checkout` | Checkout |
+| `gd` | `git diff` | Show diff |
+| `gf` | `git fetch` | Fetch |
+| `gl` | `git pull` | Pull |
+| `gp` | `git push` | Push |
+| `gst` | `git status` | Status |
+| `lg` | `git log --graph --oneline` | Graph log |
+| `lgui` | `lazygit` | Open lazygit |
+
+### Docker
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `d` | `docker` | Docker shorthand |
+| `dco` | `docker compose` | Docker Compose |
+| `dps` | `docker ps` | List containers |
+| `dpsa` | `docker ps -a` | List all containers |
+| `di` | `docker images` | List images |
+| `dexec` | `docker exec -it` | Execute in container |
+| `denter` | `docker exec -it <container> /bin/bash` | Enter container |
+| `dlogsf` | `docker logs -f` | Follow logs |
+| `dl` | `docker logs` | Show logs |
+| `dprune` | `docker system prune` | Clean up |
+| `dprunea` | `docker system prune -a` | Clean up all |
+| `lzd` | `lazydocker` | Open lazydocker |
+
+### Kubernetes
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `k` | `kubectl` | kubectl shorthand |
+| `kg` | `kubectl get` | Get resources |
+| `kgp` | `kubectl get pods` | Get pods |
+| `kga` | `kubectl get all` | Get all resources |
+| `kd` | `kubectl describe` | Describe resource |
+| `kdel` | `kubectl delete` | Delete resource |
+| `kl` | `kubectl logs` | View logs |
+| `kex` | `kubectl exec -it` | Execute in pod |
+| `kaf` | `kubectl apply -f` | Apply from file |
+| `kctx` | `kubectx` | Switch context |
+| `kn` | `kubens` | Switch namespace |
+| `klog` | `stern` | Multi-pod logs |
+| `klint` | `kube-linter lint` | Lint manifests |
+| `ksec` | `kubesec scan` | Security scan |
+| `mk` | `minikube` | Minikube shorthand |
+| `k9` | `k9s` | Open k9s |
+
+### Modern replacements
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `ls` | `eza` | Modern ls |
+| `ll` | `eza -la` | Long list |
+| `la` | `eza -a` | List all |
+| `lt` | `eza --tree` | Tree view |
+| `cat` | `bat` | Syntax highlighted cat |
+
+### File operations
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `cp` | `cp -iv` | Interactive verbose copy |
+| `mv` | `mv -iv` | Interactive verbose move |
+| `rm` | `rm -iv` | Interactive verbose remove |
+| `mkdir` | `mkdir -pv` | Create dirs with parents |
+
+### System
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `ports` | `netstat -tulanp` | Show open ports |
+| `myip` | `curl ifconfig.me` | Show public IP |
+| `path` | `echo $PATH \| tr ':' '\n'` | Show PATH entries |
+
+### Dotfiles
+
+| Alias | Command | Description |
+|-------|---------|-------------|
+| `dot` | `~/.local/bin/dot` | Dotfiles CLI |
+| `dotcd` | `cd ~/.dotfiles` | Go to dotfiles |
+| `dotedit` | `$EDITOR ~/.dotfiles` | Edit dotfiles |
+
+## Adding custom aliases
+
+1. Create a new file in the appropriate category:
+   ```bash
+   vim ~/.dotfiles/.chezmoitemplates/aliases/mycategory/mycategory.aliases.sh
+   ```
+
+2. Define your aliases:
+   ```bash
+   # shellcheck shell=bash
+   # My Custom Aliases
+   alias myalias='my-command'
+   ```
+
+3. Apply changes:
+   ```bash
+   chezmoi apply
+   ```

package/docs/ARCHITECTURE.md

@@ -0,0 +1,229 @@
+# How it works
+
+v0.2.480 constitutes a portable **shell distribution** that `chezmoi` manages. This document outlines the core architectural decisions and system design.
+
+## Core philosophy
+
+- **XDG-first**: Configuration strictly maps to `~/.config/` (XDG Base Directory specification). This approach avoids `~/.foo` file sprawl in the home directory.
+- **Single entrypoint**: `dot_zshenv` acts as the bootloader. Zsh loads it immediately and sets up the environment (XDG variables, PATH) before any other initialization runs.
+- **Zero-dependency bootstrap**: The installation process relies only on `curl` and `git` (and `chezmoi`, which the installer fetches automatically).
+- **Lazy-by-default**: Heavy tooling (fnm, nvm, SDKMAN, tool-specific aliases) is deferred until first use or after the first prompt to keep shell startup fast.
+
+## Architecture diagram
+
+```
+                                    DOTFILES ARCHITECTURE
+    ================================================================================
+
+    ┌─────────────────────────────────────────────────────────────────────────────┐
+    │                              INSTALLATION                                     │
+    │  ┌──────────┐    ┌──────────┐    ┌──────────┐    ┌──────────┐              │
+    │  │  curl    │───▶│ install  │───▶│ chezmoi  │───▶│  apply   │              │
+    │  │          │    │   .sh    │    │  init    │    │          │              │
+    │  └──────────┘    └──────────┘    └──────────┘    └──────────┘              │
+    └─────────────────────────────────────────────────────────────────────────────┘
+                                         │
+                                         ▼
+    ┌─────────────────────────────────────────────────────────────────────────────┐
+    │                              SHELL STARTUP                                    │
+    │                                                                               │
+    │  ┌──────────┐    ┌──────────┐    ┌──────────┐    ┌──────────┐              │
+    │  │ .zshenv  │───▶│ .zshrc   │───▶│ aliases  │───▶│functions │              │
+    │  │(bootload)│    │          │    │          │    │          │              │
+    │  └──────────┘    └──────────┘    └──────────┘    └──────────┘              │
+    │       │                                                                       │
+    │       ▼                                                                       │
+    │  ┌──────────┐                                                                │
+    │  │ XDG vars │                                                                │
+    │  │  PATH    │                                                                │
+    │  └──────────┘                                                                │
+    └─────────────────────────────────────────────────────────────────────────────┘
+                                         │
+                                         ▼
+    ┌─────────────────────────────────────────────────────────────────────────────┐
+    │                           CONFIGURATION LAYERS                               │
+    │                                                                               │
+    │  ┌─────────────────────────────────────────────────────────────────────┐    │
+    │  │                         ~/.config/                                    │    │
+    │  │  ┌────────┐ ┌────────┐ ┌────────┐ ┌────────┐ ┌────────┐           │    │
+    │  │  │  nvim  │ │  git   │ │ shell  │ │ghostty │ │  tmux  │           │    │
+    │  │  └────────┘ └────────┘ └────────┘ └────────┘ └────────┘           │    │
+    │  └─────────────────────────────────────────────────────────────────────┘    │
+    │                                                                               │
+    │  ┌─────────────────────────────────────────────────────────────────────┐    │
+    │  │                         ~/.local/bin/                                │    │
+    │  │  ┌────────┐ ┌────────┐ ┌────────┐                                  │    │
+    │  │  │  dot   │ │scripts │ │ utils  │                                  │    │
+    │  │  └────────┘ └────────┘ └────────┘                                  │    │
+    │  └─────────────────────────────────────────────────────────────────────┘    │
+    └─────────────────────────────────────────────────────────────────────────────┘
+
+```
+
+## Directory structure
+
+The repository follows standard `chezmoi` conventions.
+
+```text
+~/.dotfiles/
+├── dot_config/          # Maps to ~/.config/
+│   ├── atuin/           # Shell history
+│   ├── ghostty/         # Terminal emulator
+│   ├── shell/           # Core shell logic (aliases, functions)
+│   ├── nvim/            # Neovim IDE configuration
+│   ├── tmux/            # Terminal multiplexer
+│   ├── git/             # Git configuration
+│   ├── lazygit/         # Lazygit TUI
+│   ├── mycli/           # MySQL CLI
+│   ├── mongosh/         # MongoDB Shell
+│   ├── redis/           # Redis CLI
+│   ├── minikube/        # Minikube config
+│   └── zsh/             # Zsh-specific config
+├── dot_local/           # Maps to ~/.local/
+│   └── bin/             # Scripts added to PATH
+├── dot_zshenv           # The environment bootloader
+├── dot_psqlrc           # PostgreSQL CLI config
+├── dot_sqliterc         # SQLite CLI config
+├── .chezmoitemplates/   # Reusable logic blocks
+│   ├── aliases/         # Alias definitions by category
+│   ├── functions/       # Shell functions
+│   └── paths/           # PATH configurations
+├── nix/                 # Nix flake for optional toolchain
+│   └── flake.nix
+├── install/             # Installation scripts
+│   ├── helpers/         # Helper scripts
+│   └── provision/       # OS-specific provisioning
+└── install.sh           # Universal bootstrapping script
+```
+
+## Data flow
+
+```
+┌──────────────┐     ┌──────────────┐     ┌──────────────┐
+│   chezmoi    │────▶│   templates  │────▶│  target dir  │
+│    source    │     │   (.tmpl)    │     │   (~/.*)     │
+└──────────────┘     └──────────────┘     └──────────────┘
+       │                    │                    │
+       │                    ▼                    │
+       │             ┌──────────────┐            │
+       │             │ .chezmoidata │            │
+       │             │   (data)     │            │
+       │             └──────────────┘            │
+       │                                         │
+       └───────────────────┬─────────────────────┘
+                           │
+                           ▼
+                    ┌──────────────┐
+                    │   hooks      │
+                    │  (scripts)   │
+                    └──────────────┘
+```
+
+## Shell startup flow
+
+Zsh loads files in a specific order. Dotfiles uses this to layer configuration predictably.
+
+```
+dot_zshenv                          # Phase 0: XDG vars, essential PATH (~/.local/bin, Homebrew)
+  └─▶ dot_config/zsh/dot_zshrc     # Phase 1: Main orchestrator
+        ├─▶ rc.d/10-env.zsh        # Phase 2: Environment variables
+        ├─▶ rc.d/20-zinit.zsh      # Phase 3: Plugin manager (Zinit)
+        ├─▶ rc.d/30-options.zsh    # Phase 4: History, keybindings, lazy-loaders (fnm, nvm, SDKMAN)
+        ├─▶ rc.d/40-plugins.zsh    # Phase 5: Zinit plugins
+        ├─▶ rc.d/50-vi-mode.zsh   # Phase 6: Vi-mode configuration
+        │
+        ├─▶ shell/00-core-paths    # Phase 7: Full PATH construction
+        ├─▶ shell/05-core-safety   # Phase 8: Safety defaults (umask, etc.)
+        ├─▶ shell/40-ls-colors     # Phase 9: LS_COLORS
+        ├─▶ shell/50-logic-funcs   # Phase 10: Shell functions (60+)
+        ├─▶ shell/90-ux-aliases    # Phase 11: Core aliases (eager, ~40KB)
+        │
+        ├─▶ [precmd hook]          # Phase 12: Lazy-load tool aliases (~137KB, after first prompt)
+        │     └─▶ shell/91-ux-aliases-lazy
+        │
+        ├─▶ atuin init             # Phase 13: Shell history
+        ├─▶ starship init          # Phase 14: Prompt
+        ├─▶ zoxide init            # Phase 15: Smart cd
+        └─▶ fzf init               # Phase 16: Fuzzy finder
+```
+
+### rc.d load order
+
+Files under `~/.config/zsh/rc.d/` are sourced in **glob order** (alphabetical by filename). The numeric prefix controls execution order:
+
+| Range | Purpose | Examples |
+|-------|---------|---------|
+| `10-*` | Environment variables, exports | `10-env.zsh` |
+| `20-*` | Plugin manager bootstrap | `20-zinit.zsh` |
+| `30-*` | Shell options, lazy-loaders | `30-options.zsh` |
+| `40-*` | Plugin declarations | `40-plugins.zsh` |
+| `50-*` | Input mode (vi-mode) | `50-vi-mode.zsh` |
+
+### shell/ load order
+
+Files under `~/.config/shell/` are sourced explicitly by `dot_zshrc` in lexical order:
+
+| Range | Purpose | Examples |
+|-------|---------|---------|
+| `00-19` | Core: PATH, safety | `00-core-paths.sh`, `05-core-safety.sh` |
+| `40-49` | Middleware: colors, exports | `40-ls-colors.sh` |
+| `50-89` | Toolchain: functions | `50-logic-functions.sh` |
+| `90-99` | UX: aliases, prompts | `90-ux-aliases.sh` (eager), `91-ux-aliases-lazy.sh` (deferred) |
+
+### Alias system
+
+Aliases are defined in `.chezmoitemplates/aliases/` with one directory per category:
+
+```text
+.chezmoitemplates/aliases/
+├── cd/cd.aliases.sh             # Directory navigation
+├── git/git.aliases.sh           # Git shortcuts
+├── docker/docker.aliases.sh     # Container management
+├── kubernetes/kubernetes.aliases.sh
+├── python/python.aliases.sh
+├── rust/rust.aliases.sh
+└── ... (50+ categories, each with README.md)
+```
+
+At `chezmoi apply` time, Chezmoi's `glob` function discovers all `*.aliases.sh` files and aggregates them into two output files:
+
+- **`90-ux-aliases.sh`** — 14 core categories (cd, git, editor, sudo, etc.) loaded eagerly at startup.
+- **`91-ux-aliases-lazy.sh`** — 35+ tool-specific categories (docker, kubernetes, terraform, etc.) loaded after the first prompt via a `precmd` hook.
+
+**Ordering convention:** Templates are included in **alphabetical order** by their file path. This is implicit — renaming a file changes its load position. At current scale (~50 categories) this is acceptable; if the count exceeds ~100, consider introducing an explicit manifest.
+
+## Modern toolchain
+
+Dotfiles replaces legacy Unix tools with high-performance Rust alternatives:
+
+| Legacy | Modern replacement | Purpose |
+| :--- | :--- | :--- |
+| `ls` | `eza` | Modern file listing with git integration |
+| `cat` | `bat` | Syntax highlighted file viewing |
+| `grep` | `ripgrep` (`rg`) | High-performance search |
+| `cd` | `zoxide` | Smart directory jumping |
+| `history` | `atuin` | Syncable, encrypted SQLite history |
+| `find` | `fd` | Developer-friendly filesystem search |
+| `vim` | `neovim` | Lua-extensible IDE |
+| `diff` | `delta` | Syntax-highlighted diffs |
+
+## Predictive shell strategy
+
+- **AI integration**: The shell integrates AI features through the `ai_core` wrapper.
+- **Autosuggestions**: Context-aware completion based on shell history.
+- **Error analysis**: Hooks send failed command context to local LLMs or GitHub Copilot for explanation.
+
+## Security posture
+
+- **Hardened defaults**: Shell scripts run with `set -euo pipefail` to fail fast.
+- **Supply chain safety**:
+  - **Pinned installation**: Installers reference specific Git tags (for example, `v0.2.480`), not `main`.
+  - **Immutable history**: All logic stays version-controlled and reviewable through `chezmoi diff`.
+- **Audit logging**: Dotfiles logs all mutations to `~/.local/share/dotfiles.log`.
+- **Encryption**: `age` encrypts all sensitive data.
+
+## Compatibility
+
+- **macOS**: Full support (Homebrew, defaults).
+- **Linux**: Debian/Ubuntu support (apt-get).
+- **Windows**: WSL2 support.

package/docs/COMPLIANCE.md

@@ -0,0 +1,47 @@
+# Compliance
+
+This document maps the dotfiles configuration and tooling to standard regulatory frameworks (SOC 2, ISO 27001, GDPR).
+
+## Controls
+
+### SOC 2 Type II
+
+| Control | Description | Dotfiles Implementation |
+| :--- | :--- | :--- |
+| **CC6.1** | Logical Access Security | `zsh` restricted permissions, SSH key management via `1Password`/Agents. |
+| **CC6.8** | Unauthorized Code Protection | `enable-signing` enforces GPG/SSH signed commits. `slsa-framework` workflow. |
+| **CC8.1** | Change Management | All changes managed via git (Infrastructure as Code). `lock-configs` for immutability. |
+| **A1.2** | Audit Logs | `~/.local/share/dotfiles.log` tracks all configuration applications (`chezmoi apply`). |
+
+### ISO 27001
+
+| Control | Description | Dotfiles Implementation |
+| :--- | :--- | :--- |
+| **A.9.1.1** | Access Control Policy | Principle of Least Privilege in filesystem permissions (umask 022/077). |
+| **A.12.1.2** | Change Management | Git-based version control with CI/CD verification (`ci.yml`, `security-release.yml`). |
+| **A.14.2.5** | Secure Engineering | `scan-licenses` (FOSSology) and `check-cla` ensure legal/security compliance. |
+
+### GDPR / HIPAA (Privacy)
+
+| Requirement | Description | Dotfiles Implementation |
+| :--- | :--- | :--- |
+| **Data minimization** | Limit data collection | `privacy-mode` disables CLI telemetry (Dotnet, Brew, Functions). |
+| **Integrity** | Protect against tampering | `lock-configs` prevents unauthorized modification of shell history/config. |
+
+## Security
+
+### Immutability
+Lock critical configuration files to prevent tampering:
+```bash
+lock-configs  # Sets chflags uchg (macOS) or chattr +i (Linux)
+```
+
+### Forensic audit
+Dotfiles logs all `chezmoi` operations. To view audit trails, run:
+```bash
+dot audit
+```
+
+### Supply chain security
+- **SBOM**: The CI pipeline generates an SBOM for every release (SPDX format).
+- **Provenance**: SLSA Level 3 build attestation.

package/docs/COPYRIGHT

@@ -0,0 +1,7 @@
+/*
+* 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.480) - <https://dotfiles.io>
+* Made With ❤️ in London, United Kingdom
+* Designed by Sebastien Rousseau
+* Copyright (c) 2015-2026. All rights reserved.
+* License: MIT
+*/

package/docs/FEATURES.md

@@ -0,0 +1,166 @@
+# Feature Flags
+
+Feature flags control which components and configurations are enabled in your dotfiles setup. They are defined in `.chezmoidata.toml` and used throughout template files to conditionally include or exclude functionality.
+
+## Configuration
+
+Feature flags are configured in the `.chezmoidata.toml` file:
+
+```toml
+[features]
+zsh = true
+nvim = true
+tmux = true
+gui = true
+secrets = true
+```
+
+## Available Feature Flags
+
+| Flag | Default | Purpose | Dependencies | Impact |
+|------|---------|---------|--------------|---------|
+| `zsh` | `true` | Enable Zsh shell configuration and optimizations | - | Controls Zsh-specific configs, aliases, and shell enhancements |
+| `nvim` | `true` | Enable Neovim editor configuration | - | Manages Neovim configs, plugins, and editor-specific settings |
+| `tmux` | `true` | Enable tmux terminal multiplexer configuration | - | Controls tmux configs, key bindings, and session management |
+| `gui` | `true` | Enable GUI application configurations | Desktop environment | Manages GUI app configs, window managers, and desktop settings |
+| `secrets` | `true` | Enable secrets management and encryption tools | GPG, Age, SSH keys | Controls access to encrypted configs and secure credential storage |
+
+## How Feature Flags Work
+
+### Template Processing
+
+Feature flags are processed in the Zsh configuration template (`dot_config/zsh/dot_zshrc.tmpl`) where they:
+
+1. **Set defaults**: If not explicitly defined, all features default to `true`
+2. **Export environment variables**: Active features are exported as `DOTFILES_FEATURES`
+3. **Enable conditional loading**: Allow selective inclusion of shell configurations
+
+### Example Usage
+
+```bash
+# In template files, feature flags are referenced as:
+{{- $features := default (dict "zsh" true "nvim" true "tmux" true "gui" true "secrets" true) .features -}}
+
+# Export enabled features to environment
+export DOTFILES_FEATURES="{{ join "," $enabled }}"
+```
+
+### Runtime Access
+
+Once processed, you can check active features in your shell:
+
+```bash
+# View all enabled features
+echo $DOTFILES_FEATURES
+
+# Check if a specific feature is enabled
+if [[ "$DOTFILES_FEATURES" == *"nvim"* ]]; then
+    echo "Neovim configuration is active"
+fi
+```
+
+## Modifying Feature Flags
+
+### Enable/Disable Features
+
+Edit `.chezmoidata.toml`:
+
+```toml
+[features]
+zsh = true
+nvim = true
+tmux = false    # Disable tmux configuration
+gui = false     # Disable GUI configurations
+secrets = true
+```
+
+### Apply Changes
+
+After modifying feature flags, apply the changes:
+
+```bash
+chezmoi apply
+```
+
+### Profile-Specific Overrides
+
+For machine-specific configurations, you can override feature flags in your local chezmoi config (`~/.config/chezmoi/chezmoi.toml`):
+
+```toml
+[data.features]
+gui = false  # Override: disable GUI on this machine
+```
+
+## Feature Flag Dependencies
+
+### Core Dependencies
+
+- **zsh**: Core shell functionality - recommended to keep enabled
+- **nvim**: Independent - can be disabled if using alternative editors
+- **tmux**: Independent - can be disabled if not using terminal multiplexer
+
+### Conditional Dependencies
+
+- **gui**: Requires desktop environment; automatically ignored on headless systems
+- **secrets**: Required for encrypted configurations; disable only if not using secure storage
+
+## Architecture Notes
+
+### Default Behavior
+
+The feature flag system uses a **fail-safe default** approach:
+- If `.chezmoidata.toml` is missing features, all flags default to `true`
+- This ensures the dotfiles work out-of-the-box without configuration
+
+### Performance Impact
+
+- **Enabled features**: Include additional configurations and may load more shell plugins
+- **Disabled features**: Reduce startup time and memory usage by excluding unnecessary components
+
+### Template Resolution
+
+Feature flags are resolved during chezmoi template processing, not at runtime. This means:
+- Changes require `chezmoi apply` to take effect
+- No runtime performance penalty for checking feature status
+- Configurations are pre-compiled based on active features
+
+## Troubleshooting
+
+### Check Current Features
+
+```bash
+# View active features
+echo $DOTFILES_FEATURES
+
+# View profile and theme
+echo "Profile: $DOTFILES_PROFILE"
+echo "Theme: $DOTFILES_THEME"
+```
+
+### Verify Configuration
+
+```bash
+# Check chezmoi data
+chezmoi data
+
+# Test template processing
+chezmoi execute-template '{{ .features.zsh }}'
+```
+
+### Reset to Defaults
+
+If you encounter issues, reset to default configuration:
+
+```toml
+[features]
+zsh = true
+nvim = true
+tmux = true
+gui = true
+secrets = true
+```
+
+---
+
+**Last Updated**: 2026-01-31
+**Dotfiles Version**: v0.2.480