@sebastienrousseau/dotfiles 0.2.469 → 0.2.499

package/{dist/scripts → scripts}/dotfiles.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.469) - <https://dotfiles.io>
+# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.471) - <https://dotfiles.io>
 # Made with ♥ in London, UK by Sebastien Rousseau
 # Copyright (c) 2015-2025. All rights reserved
 # License: MIT

package/{dist/scripts → scripts}/download.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.469) - <https://dotfiles.io>
+# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.471) - <https://dotfiles.io>
 # Made with ♥ in London, UK by Sebastien Rousseau
 # Copyright (c) 2015-2025. All rights reserved
 # License: MIT

package/{dist/scripts → scripts}/help.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.469) - <https://dotfiles.io>
+# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.471) - <https://dotfiles.io>
 # Made with ♥ in London, UK by Sebastien Rousseau
 # Copyright (c) 2015-2025. All rights reserved
 # License: MIT

package/scripts/lock-configs.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# MIT License
+# Copyright (c) 2026 Sebastien Rousseau
+# See LICENSE file for details.
+
+# Script: lock-configs.sh
+# Description: Toggles immutability flags on critical configuration files.
+# Usage: lock-configs [lock|unlock]
+
+set -e
+
+ACTION="${1:-lock}"
+CRITICAL_FILES=(
+    "$HOME/.zshrc"
+    "$HOME/.bashrc"
+    "$HOME/.profile"
+)
+
+# Determine OS command for immutability
+if [[ "$OSTYPE" == "darwin"* ]]; then
+    LOCK_CMD="chflags uchg"
+    UNLOCK_CMD="chflags nouchg"
+    CHECK_CMD="ls -lO"
+else
+    # Linux (requires root usually, but we'll try)
+    if command -v chattr >/dev/null; then
+        LOCK_CMD="sudo chattr +i"
+        UNLOCK_CMD="sudo chattr -i"
+        CHECK_CMD="lsattr"
+    else
+        echo "❌ 'chattr' not found. Cannot set immutability on Linux without it."
+        exit 1
+    fi
+fi
+
+if [[ "$ACTION" == "lock" ]]; then
+    echo "🔒 Locking critical configuration files..."
+    CMD="$LOCK_CMD"
+elif [[ "$ACTION" == "unlock" ]]; then
+    echo "🔓 Unlocking critical configuration files..."
+    CMD="$UNLOCK_CMD"
+else
+    echo "Usage: $0 [lock|unlock]"
+    exit 1
+fi
+
+for file in "${CRITICAL_FILES[@]}"; do
+    if [[ -f "$file" ]]; then
+        echo "Processing: $file"
+        $CMD "$file" || echo "⚠️ Failed to modify flags for $file (permission denied?)"
+    fi
+done
+
+echo "Done. Environment state:"
+for file in "${CRITICAL_FILES[@]}"; do
+    [[ -f "$file" ]] && $CHECK_CMD "$file"
+done

package/scripts/package.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# Script: package.sh
+# Description: Bundles the dotfiles for distribution or backup.
+# Generates a standard .tar.gz archive and validates structure.
+
+set -e
+
+VERSION="${1:-v0.2.471}"
+DIST_DIR="dist"
+ARCHIVE_NAME="dotfiles-${VERSION}.tar.gz"
+
+echo "📦 Packaging Dotfiles (${VERSION})..."
+
+# Create dist directory
+mkdir -p "$DIST_DIR"
+
+# Create artifact manifest
+echo "Manifest generated at $(date)" > "$DIST_DIR/MANIFEST.txt"
+echo "Version: ${VERSION}" >> "$DIST_DIR/MANIFEST.txt"
+echo "Commit: $(git rev-parse HEAD)" >> "$DIST_DIR/MANIFEST.txt"
+
+# Archive core files (excluding sensitive data/git)
+# Using git archive for clean export if possible, fallback to tar
+if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    echo "   -> EXPORT: Using git archive..."
+    git archive --format=tar.gz \
+        --output="$DIST_DIR/$ARCHIVE_NAME" \
+        --prefix="dotfiles-${VERSION}/" \
+        HEAD
+else
+    echo "   -> EXPORT: Using tar (fallback)..."
+    tar --exclude='.git' \
+        --exclude='dist' \
+        --exclude='secrets' \
+        -czf "$DIST_DIR/$ARCHIVE_NAME" .
+fi
+
+echo "   -> CHECKSUM: Generating sha256..."
+if command -v shasum >/dev/null; then
+    shasum -a 256 "$DIST_DIR/$ARCHIVE_NAME" > "$DIST_DIR/${ARCHIVE_NAME}.sha256"
+else
+    sha256sum "$DIST_DIR/$ARCHIVE_NAME" > "$DIST_DIR/${ARCHIVE_NAME}.sha256"
+fi
+
+echo "✅ Package created at ${DIST_DIR}/${ARCHIVE_NAME}"
+echo "   Size: $(du -h "$DIST_DIR/$ARCHIVE_NAME" | cut -f1)"

package/{dist/scripts → scripts}/ssh.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.469) - <https://dotfiles.io>
+# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.471) - <https://dotfiles.io>
 # Made with ♥ in London, UK by Sebastien Rousseau
 # Copyright (c) 2015-2025. All rights reserved
 # License: MIT

package/scripts/teleport.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# Script: teleport.sh
+# Description: Deploys dotfiles to a remote host ephemerally.
+# Usage: ./teleport.sh user@hostname
+
+set -e
+
+TARGET="$1"
+
+if [[ -z "$TARGET" ]]; then
+    echo "Usage: $0 user@host"
+    exit 1
+fi
+
+echo "🚀 Teleporting dotfiles to ${TARGET}..."
+
+# 1. Archive the current state
+# 2. Pipe to SSH
+# 3. Extract in remote home directory
+chezmoi archive | ssh "$TARGET" "tar xz -C ~"
+
+echo "✅ Teleport successful!"
+echo "   Note: Changes are applied to files, but shell may need restart or sourcing."

package/scripts/test-aliases.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+# MIT License
+# Copyright (c) 2026 Sebastien Rousseau
+# See LICENSE file for details.
+
+# Script: test-aliases.sh
+# Description: Verifies disjoint alias files for syntax errors.
+
+set -e
+
+echo "Testing alias syntax..."
+
+ALIAS_DIR="$HOME/.local/share/chezmoi/.chezmoitemplates/aliases"
+
+find "$ALIAS_DIR" -name "*.aliases.sh" | while read -r file; do
+  # Check for syntax errors using bash -n
+  if bash -n "$file"; then
+    echo "✅ Checked: $(basename "$file")"
+  else
+    echo "❌ Syntax Error: $(basename "$file")"
+    exit 1
+  fi
+done
+
+echo "All alias files passed syntax check."

package/scripts/test_smoke.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+# Colors for output
+GREEN='\033[0;32m'
+RED='\033[0;31m'
+NC='\033[0m' # No Color
+
+echo "----------------------------------------------------------------"
+echo "🔥 Running Dotfiles Smoke Tests..."
+echo "----------------------------------------------------------------"
+
+failed=0
+
+check_cmd() {
+    local cmd=$1
+    if command -v "$cmd" >/dev/null 2>&1; then
+        if [ "$cmd" = "tmux" ]; then
+             local version
+             version=$($cmd -V 2>/dev/null || echo "v?")
+        else
+             local version
+             version=$($cmd --version 2>/dev/null || echo "v?")
+        fi
+        echo -e "${GREEN}✔ Found: $cmd ($version)${NC}"
+    else
+        echo -e "${RED}✘ Missing: $cmd${NC}"
+        failed=1
+    fi
+}
+
+check_cask() {
+    local app=$1
+    # Skip GUI checks in CI or on Linux
+    if [[ "${CI:-}" == "true" ]] || [[ "$(uname -s)" == "Linux" ]]; then
+        echo -e "${GREEN}○ Skipping GUI App: $app (CI/Linux detected)${NC}"
+        return 0
+    fi
+
+    if [ -d "/Applications/$app.app" ] || [ -d "${HOME}/Applications/$app.app" ]; then
+        echo -e "${GREEN}✔ Found App: $app${NC}"
+    else
+        # Fallback check for CLI tools installed via cask (e.g. ghostty might be CLI accessible)
+        if command -v "$app" >/dev/null 2>&1; then
+            echo -e "${GREEN}✔ Found App (CLI): $app${NC}"
+        else
+            echo -e "${RED}✘ Missing App: $app${NC}"
+            failed=1
+        fi
+    fi
+}
+
+echo "Testing Core Toolchain..."
+check_cmd git
+check_cmd chezmoi
+check_cmd age
+check_cmd zsh
+
+if [ -n "${DOTFILES_CI_SKIP_EXTRAS:-}" ]; then
+    echo "Skipping optional tool checks (CI mode detected)"
+else
+    echo "Testing Modern Replacements..."
+    check_cmd rg
+    check_cmd eza
+    check_cmd bat
+    check_cmd fzf
+    check_cmd zoxide
+
+    echo "Testing Roadmap Additions..."
+    check_cmd gh
+    check_cmd nvim
+    check_cmd tmux
+    check_cmd yazi
+    check_cmd zellij
+fi
+
+echo "Testing GUI Apps (Casks)..."
+check_cask "Ghostty"
+check_cask "Zed"
+
+echo "----------------------------------------------------------------"
+if [ $failed -eq 0 ]; then
+    echo -e "${GREEN}✅ All Smoke Tests Passed!${NC}"
+    exit 0
+else
+    echo -e "${RED}❌ Some tests failed.${NC}"
+    exit 1
+fi

package/{dist/scripts → scripts}/unpack.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.469) - <https://dotfiles.io>
+# 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.471) - <https://dotfiles.io>
 # Made with ♥ in London, UK by Sebastien Rousseau
 # Copyright (c) 2015-2025. All rights reserved
 # License: MIT

package/scripts/verify_state.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# MIT License
+# Copyright (c) 2026 Sebastien Rousseau
+# See LICENSE file for details.
+
+# Script: verify_state.sh
+# Description: Final verification of the dotfiles environment state.
+
+set -e
+
+echo "🔍 Starting Final Environment Verification..."
+
+Errors=0
+
+check_file() {
+    if [[ ! -f "$1" ]]; then
+        echo "❌ Missing file: $1"
+        Errors=$((Errors + 1))
+    else
+        echo "✅ Found file: $1"
+    fi
+}
+
+check_alias_in_config() {
+    if ! grep -q "$1" "$HOME/.config/shell/aliases.sh"; then
+        echo "❌ Missing alias definition '$1' in built config"
+        Errors=$((Errors + 1))
+    else
+        echo "✅ Verified alias: $1"
+    fi
+}
+
+# 1. Verify Docs
+check_file ".chezmoitemplates/aliases/security/README.md"
+check_file ".chezmoitemplates/aliases/legal/README.md"
+
+# 2. Verify Scripts
+check_file "scripts/lock-configs.sh"
+check_file "scripts/detect-collisions.py"
+check_file "scripts/test-aliases.sh"
+
+# 3. Verify Generated Config Content (Key Features)
+# Security
+check_alias_in_config "lock-configs"
+check_alias_in_config "unlock-configs"
+check_alias_in_config "enable-signing"
+# Legal
+check_alias_in_config "scan-licenses"
+check_alias_in_config "add-headers"
+
+# 4. Verify Workflows
+check_file ".github/workflows/security-release.yml"
+
+if [[ $Errors -eq 0 ]]; then
+    echo "🎉 Verification Passed! All systems nominal."
+    exit 0
+else
+    echo "⚠️  Verification Failed with $Errors errors."
+    exit 1
+fi

package/templates/projects/go/README.md

@@ -0,0 +1,3 @@
+# __PROJECT_NAME__
+
+Minimal Go project scaffold.

package/templates/projects/go/cmd/__PROJECT_NAME__/main.go

@@ -0,0 +1,7 @@
+package main
+
+import "fmt"
+
+func main() {
+	fmt.Println("__PROJECT_NAME__")
+}

package/templates/projects/go/go.mod

@@ -0,0 +1,3 @@
+module __PROJECT_NAME__
+
+go 1.22

package/templates/projects/node/README.md

@@ -0,0 +1,3 @@
+# __PROJECT_NAME__
+
+Minimal Node project scaffold.

package/templates/projects/node/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "__PROJECT_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "node src/index.js",
+    "test": "node -e \"console.log('ok')\""
+  }
+}

package/templates/projects/node/src/index.js

@@ -0,0 +1,2 @@
+// eslint-disable-next-line no-console
+console.log("__PROJECT_NAME__");

package/templates/projects/python/README.md

@@ -0,0 +1,3 @@
+# __PROJECT_NAME__
+
+Minimal Python project scaffold.

package/templates/projects/python/pyproject.toml

@@ -0,0 +1,10 @@
+[project]
+name = "__PROJECT_NAME__"
+version = "0.1.0"
+requires-python = ">=3.10"
+
+dependencies = []
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"

package/templates/projects/python/src/__PROJECT_NAME__/__init__.py

@@ -0,0 +1 @@
+"""__PROJECT_NAME__ package."""

package/templates/projects/python/tests/test_basic.py

@@ -0,0 +1,2 @@
+def test_smoke():
+    assert True