@sebastienrousseau/dotfiles 0.2.481 → 0.2.500

package/CHANGELOG.md

@@ -2,61 +2,151 @@
 
 This file documents all notable changes to this project.
 
-## v0.2.480
+## v0.2.500
 
 ### Added
+- **Wallpaper-driven theme engine** — themes are no longer hand-crafted. `extract-theme.py` uses K-Means clustering in CIELAB color space to extract dominant colors from any wallpaper image and generate a full terminal palette (16 ANSI colors, accent, bg/fg, panel, border) with WCAG AAA contrast enforcement.
+- **Automatic wallpaper discovery** — `rebuild-themes.sh` scans system wallpapers (macOS `/System/Library/Desktop Pictures/`, Linux `/usr/share/backgrounds/`) and custom wallpapers (`~/Pictures/Wallpapers/`). Custom overrides system. Themes are cached and only regenerated when wallpapers change.
+- **`dot theme rebuild`** — new command to regenerate themes from discovered wallpapers. Supports `--force` (ignore cache) and `--list` (show wallpapers without rebuilding). Parallel processing (4 jobs).
+- **System wallpaper fallback** — when no custom wallpaper exists, `wallpaper-sync.sh` maps theme names to platform-native wallpapers before falling back to "skip gracefully".
+- **HEIC → PNG auto-conversion** on Linux via `magick`/`heif-convert`/`convert`.
+- **macOS accent from wallpaper** — `macos_accent` field in generated themes maps wallpaper dominant hue to macOS accent color. `dot-theme-sync` reads it from themes.toml instead of a hardcoded case statement.
+- **Build artifact redirection** — Cargo, Go, pip, uv, Zig caches → `/tmp/builds/`.
 
-- **Catppuccin theme support** — Added all four Catppuccin flavours (latte, frappe, macchiato, mocha) with comprehensive theming across VS Code, Neovim, GTK 3/4, GNOME Shell, and Nix home-manager integration.
-- **AI pair programming** — Added `aider-chat` CLI tool for AI-powered code editing and pair programming sessions.
-- **Enhanced Python AI tools** — Added `shell-gpt` and `posting` to Python tools provisioning for improved CLI AI assistance.
-- **Git workflow improvements** — Added `git-absorb` for automatic fixup commits and intelligent commit history management.
-- **Template helper functions** — Added comprehensive chezmoi template helpers for feature flags, git variables, OS detection, and path utilities.
+### Changed
+- **themes.toml is now auto-generated** — run `dot theme rebuild` after adding wallpapers. Do not edit manually.
+- **Theme family derived from themes.toml** — `get_theme_family()` in `switch.sh` reads the `family` field dynamically instead of hardcoded case patterns.
+- **macOS appearance refresh** — kills cfprefsd/SystemUIServer/Dock/System Settings after accent changes.
+- **Graceful wallpaper fallback** — theme switching works without custom wallpapers. Core changes (colors, accent, dark/light) always apply; wallpaper is optional.
+
+### Removed
+- **Static theme definitions** — all hand-crafted theme entries replaced by wallpaper-driven generation.
+
+## v0.2.497
+
+### Added
+- **Verified chezmoi installer** — `install.sh` prefers `scripts/ci/install-chezmoi-verified.sh` with SHA256 checksum validation before falling back to `get.chezmoi.io`.
+- **detect-secrets baseline** — `.secrets.baseline` for pre-commit secret scanning alongside gitleaks.
+- **Lua plugin module headers** — `@module` docstrings for ui.lua, coding.lua, lsp.lua, editor.lua, dap.lua explaining plugin selection rationale.
 
 ### Changed
+- **CI hardening** — Pinned `nix-installer` to SHA, removed `continue-on-error` from Home Manager build, replaced `mapfile` with portable `while read` loops.
+- **Plugin version pins** — toggleterm pinned to `^2`, venv-selector uses `version = false` instead of `branch = "main"`.
+- **DAP port configurable** — `DAP_DEV_SERVER_PORT` environment variable overrides default port 3000.
+- **SSH template hardening** — Added `hasKey` guard for `.chezmoi.kernel` in SSH config template.
+- **Test framework** — Restored `TESTS_PASSED`/`TESTS_FAILED` counter names for backward compatibility with 383 test files; fixed `mock_os` PATH restoration between test cases.
+- **Documentation** — Fixed default shell reference (Zsh → Fish) in INSTALL.md, added CI badge and test runner to README, added function docstrings to `utils.sh`.
+
+### Fixed
+- **Shell compatibility** — Replaced zsh-only `unfunction` with POSIX `unset -f` in shell templates.
+- **Quote nesting** — Fixed broken double-quote nesting in `run_onchange_after_fonts.sh.tmpl`.
+- **Quoted expansion** — Added missing quotes around `$ZINIT_HOME` in zinit bootstrap.
+- **JSON injection** — Escaped double quotes in `health.sh` JSON output fields.
+- **Arithmetic portability** — Replaced `$(seq ...)` with `((i=N; i>=1; i--))` in `log-rotate.sh`.
 
-- **Syntax highlighting performance** — Switched from `zsh-syntax-highlighting` to `fast-syntax-highlighting` for improved shell responsiveness.
-- **Technical debt reduction** — Achieved 10/10 technical debt score through modular installer refactoring with dedicated libraries for backup, chezmoi, OS detection, and package management.
-- **Documentation architecture** — Comprehensive documentation overhaul with centralized docs/README.md, helper function documentation, and improved template organization.
-- **Theme switching enhancement** — Enhanced `switch.sh` with family toggling between Tokyo Night and Catppuccin theme families.
+## v0.2.496
+
+### Added
+- **Startup budget tracking** — CI now captures per-component timing from `DOTFILES_DEBUG=1` and fails on regression.
+- **Behavioral unit tests** — 10 critical functions now have runtime behavior tests (extract, genpass, encode64, path_prepend, platform detection, lazy loaders).
+- **Property-based tests** — `property_testing.sh` framework wired up with roundtrip, idempotence, and length-invariant tests.
+- **git-cliff configuration** — Automated CHANGELOG generation from conventional commits.
+- **Nix CI gate** — Home Manager activation package built and validated in CI.
+
+### Changed
+- **Performance** — Lazy-loaded `thefuck` (~200ms saving) and cached `carapace` output via `_cached_eval` (~50ms saving).
+- **Starship timeout** — Reduced `command_timeout` from 2000ms to 500ms for snappier prompts in large repos.
+- **PATH consolidation** — All PATH mutations now originate from `00-core-paths.sh.tmpl`; removed scattered prepends from zshenv/zprofile stubs.
+- **heal.sh modular split** — Broken into domain modules (heal-shell, heal-tools, heal-perms, heal-cache) for testability.
+- **dot CLI modular split** — Subcommands dispatched to individual scripts in `scripts/dot/commands/` for maintainability.
 
 ### Fixed
+- **Security** — Replaced `curl|sh` pipes in `heal.sh` (starship, atuin) with download-to-temp + shebang validation. Pinned all heal.sh GitHub release versions with SHA256 checksums.
+- **Security** — `install.sh` now uses the secure `install/lib/chezmoi.sh` library instead of inline `curl|sh`.
+- **Security** — `dot-bootstrap` Nix installer now downloads to temp file with validation before execution.
+- **Security** — Extended `insecure-tls-check` pre-commit hook to cover `.tmpl` files.
+- **Security** — Added `sudo` availability guard in `heal.sh` before package manager calls.
+- **Documentation** — Fixed placeholder URLs in WSL2 troubleshooting guide.
+- **Documentation** — Added ADR-007 and ADR-008 to ADR index.
+- **Documentation** — Linked hero-shot.svg from README; updated hero-shot to show factual `dot doctor` output.
+- **Reliability** — `bench.sh` now uses `mktemp` instead of hardcoded `/tmp/bench.json`.
+
+## v0.2.495
 
-- **Template processing** — Fixed undefined `$name` variable in README.md template that was causing `chezmoi apply` failures.
-- **Code quality** — Resolved all remaining Codacy static analysis warnings for improved code maintainability.
-- **CI optimization** — Optimized GitHub Actions workflows to reduce usage and cost.
+### Fixed
+- **Installation failure (Issue #807)**: Resolved "unbound variable" errors in `install.sh` by correctly initializing color and path variables.
+- **Shell Compatibility**: Fixed syntax errors when running `install.sh` with `sh` by ensuring the script runs with `bash` and updating documentation accordingly.
+- **Broken Links**: Updated installation instructions in `README.md` and `docs/guides/INSTALL.md` to use the GitHub raw URL, bypassing issues with the `dotfiles.io` redirect.
+- **Documentation Sync**: Synchronized versioning and installation commands across all documentation and source files.
 
-### Documentation
+### Changed
+- **Repository Restructuring**: Reorganized non-deployed files for improved discoverability.
+  - Docs categorized into `architecture/`, `guides/`, `reference/`, `security/`, `operations/` subdirectories.
+  - Tests promoted to top-level `tests/` with domain-based unit test subdirectories.
+  - Function templates grouped into subdirectories matching `groups.json` groups.
+  - `install/helpers/` merged into `install/lib/`.
+  - Renamed `.chezmoitemplates/gnome/` to `.chezmoitemplates/desktop/`.
+  - Added `docs/NAMING_CONVENTIONS.md` standardization guide.
+  - Added `dot_config/.module-manifest.json` for logical grouping of flat config directories.
+
+## v0.2.493
+
+### Added
+- Implementation of `_cached_eval` for Zsh, Bash, and Fish for ultra-fast startup.
+- Full integration of `zoxide` and `atuin` in Nushell with caching.
+- Explicit management of `sgpt`, `poetry`, `fisher`, `micro`, and `pueue` configs.
+- Robust `target_os` detection for Arch/CachyOS in `install.sh`.
+
+### Changed
+- Refactored `install.sh` to use a modular `main()` function.
+- Moved XDG exports in `dot_bashrc` above interactive checks.
+- Optimized Zellij configuration with 2026-ready UX (rounded corners, compact layout).
+
+### Fixed
+- Resolved 100% of security alerts regarding `apt-get` recommendations.
+- Achieved 100.00% module test coverage with new maintenance tests.
+- Fixed Nix profile sourcing drift in `dot_zshenv`.
+- Resolved CI failures across linting, formatting, and unit test suites.
 
-- **ADR documentation** — Added comprehensive Architecture Decision Records (ADR-005 for chezmoi choice, ADR-006 for shell selection).
-- **Template validation** — Added comprehensive unit tests for template validation and processing.
-- **Theme documentation** — Added documentation for Catppuccin installation, GNOME theme application, and cross-platform theme switching.
 
-## v0.2.479
 
 ### Added
 
-- **Cross-platform Brewfile** — Unified Brewfile with OS.mac?/OS.linux? platform detection for seamless package management across macOS, Linux, and WSL.
-- **Enhanced WSL detection** — Added DOTFILES_OS variable in zprofile for improved Windows Subsystem for Linux compatibility.
-- **AI shell tooling** — Added generic ollama aliases (ol, olr, oll, olp, ollama-status, ollama-show) for cross-platform AI model interaction.
-- **Homebrew optimization** — Added performance settings disabling analytics and auto-update for faster package operations.
-- **Language-specific PATH setup** — Enhanced PATH configuration for Go, Rust, .NET, and Python development environments.
+- **2026 Frontier Stack** — Full support for Fish (Autoloading) and Nushell (Structured Data).
+- **Deterministic Portability** — Nix Flakes integration for bit-for-bit identical environments.
+- **Async Task Management** — Integrated Pueue daemon for non-blocking background operations.
+- **Local AI RAG** — `dot-ai` semantic search over your dotfiles configuration.
+- **Wasm Runtime** — Wasmtime support for ultra-fast, pre-compiled Rust/Zig tools.
+- **One-Command Provisioner** — `dot-bootstrap` for instant environment setup on clean servers.
+- **OS Theme Sync** — `dot theme sync` to match OS appearance (macOS/GNOME).
+- **Yazi Synergy** — `yy` wrapper for "cd-on-exit" directory navigation.
 
 ### Changed
 
-- **Platform-agnostic aliases** — Removed personal model-specific ollama functions, keeping only generic cross-platform aliases that work on any Ollama installation.
-- **Brewfile organization** — Reorganized Brewfile sections for clarity and removed platform-specific packages from cross-platform sections.
-- **Feature flags documentation** — Expanded FEATURES.md with comprehensive feature flag table, template processing examples, and troubleshooting guide.
+- **Fish Shell** — Transitioned from monolithic aliases to a dynamic function autoloading pipeline.
+- **Starship** — Added async indicators for background tasks and Nix environments.
+- **Diagnostics** — `dot doctor` and `dot heal` are now mise-aware and 2026-stack compatible.
+- **Neovim** — Migrated IDE toolchain (LSPs/Linters) into the Nix Flake.
 
-### Fixed
+## v0.2.491
+
+### Added
+
+- **Fast mode** — `DOTFILES_FAST=1` skips heavy startup work for the quickest first prompt.
+- **Runtime toggles** — `DOTFILES_DEFER_ZINIT` and `DOTFILES_ENABLE_COLORS` controls.
+- **Ultra-fast mode** — `DOTFILES_ULTRA_FAST=1` runs a minimal init path.
+- **Minimal prompt** — `DOTFILES_ULTRA_FAST_PROMPT=1` keeps the ultra-fast prompt lightweight.
+- **AI opt-in** — `DOTFILES_AI=1` enables AI helper scripts.
+
+### Changed
 
-- **Test framework reliability** — Resolved shellcheck warnings and mock export issues in unit test framework.
-- **CI compatibility** — Fixed alias tests to use proper `alias` command instead of `type`, enabled `shopt -s expand_aliases` in test subshells.
-- **PATH isolation** — Fixed unavailable command tests by using isolated PATH to ensure system commands aren't found during testing.
+- **Deferred tool init** — Atuin, Starship, Zoxide, and FZF now load after the first prompt.
+- **Zinit bootstrap** — Deferred by default to reduce first-prompt latency.
+- Updated all version references to v0.2.491.
 
 ### Documentation
 
-- **AI aliases documentation** — Updated documentation for ollama aliases and cross-platform AI tooling.
-- **Architecture notes** — Enhanced feature flag documentation with template processing explanation and runtime access patterns.
+- Added performance mode guidance and updated benchmark wording to reflect real-world variance.
 
 ## v0.2.478
 

package/LICENSE

@@ -4,7 +4,7 @@ Dotfiles uses the following under the MIT License
 
 The MIT License (MIT)
 
-Copyright (c) 2023 Sebastien Rousseau
+Copyright (c) 2015-2026
 
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the "Software