@sebastienrousseau/dotfiles 0.2.481 → 0.2.500

package/dot_local/share/man/man1/dot.1

@@ -0,0 +1,149 @@
+.TH DOT 1 "April 2026" "dotfiles v0.2.500" "User Commands"
+.SH NAME
+dot \- dotfiles management CLI
+.SH SYNOPSIS
+.B dot
+.RI [ command ]
+.RI [ options ]
+.SH DESCRIPTION
+.B dot
+is the control plane for a chezmoi-managed dotfiles system. It provides
+commands for applying configuration, diagnostics, repair, security, and
+AI-assisted development workflows.
+.SH COMMANDS
+.SS Core
+.TP
+.B apply
+Converge the machine onto the tracked configuration.
+.TP
+.B update
+Pull the latest state and pre-warm slow paths.
+.TP
+.B sync
+Alias for apply.
+.TP
+.B diff
+Show chezmoi diff with exclusions.
+.TP
+.B status
+Show configuration drift.
+.TP
+.B add \fIfile\fR
+Add a file to chezmoi source.
+.TP
+.B remove \fIfile\fR
+Safely remove a managed file.
+.TP
+.B edit
+Open chezmoi source in $EDITOR.
+.TP
+.B cd
+Print source directory path.
+.SS Diagnostics
+.TP
+.B doctor
+Audit tools, paths, portability, and security posture.
+.TP
+.B health
+Run health dashboard.
+.TP
+.B heal
+Auto-repair tools, chezmoi drift, broken symlinks, and missing files.
+.TP
+.B smoke\-test
+Exercise critical toolchains and integrations.
+.TP
+.B benchmark
+Run shell startup performance benchmarks.
+.TP
+.B score
+Compute overall system health score.
+.SS Recovery
+.TP
+.B rollback
+Manage backups and rollback to previous states.
+.TP
+.B bundle
+Produce a portable support or recovery archive.
+.TP
+.B snapshot
+Create a baseline snapshot.
+.SS Security
+.TP
+.B attest
+Export machine-readable workstation evidence.
+.TP
+.B secrets \fIsubcommand\fR
+Manage encrypted secrets (load, edit, provider).
+.TP
+.B mcp
+MCP policy validation and server management.
+.SS AI
+.TP
+.B ai
+AI CLI status dashboard and interactive launcher.
+.TP
+.B ai\-setup
+Bootstrap and authenticate AI CLIs.
+.TP
+.B cl, copilot, gemini, kiro, sgpt, ollama, opencode, aider
+AI bridge commands with context pattern injection.
+.TP
+.B autohand, vibe, qwen, zai
+Additional AI coding CLI bridges.
+.SS Tools
+.TP
+.B env
+Inspect or modify environment variables.
+.TP
+.B profile
+Show or switch active profile.
+.TP
+.B prewarm
+Regenerate shell caches for fast startup.
+.TP
+.B clean\-cache
+Clear shell initialization caches.
+.TP
+.B learn
+Interactive tour of dotfiles features.
+.SH ENVIRONMENT
+.TP
+.B DOTFILES_FAST=1
+Skip heavy layers (zinit, completions) for fast startup.
+.TP
+.B DOTFILES_ULTRA_FAST=1
+Bare minimum shell (aliases + prompt only).
+.TP
+.B DOTFILES_AI=1
+Enable AI helper scripts.
+.TP
+.B DOTFILES_NONINTERACTIVE=1
+Force non-interactive mode (for CI/scripts).
+.TP
+.B DOTFILES_PREWARM_ON_APPLY=1
+Auto-prewarm caches after dot apply (default: enabled).
+.SH FILES
+.TP
+.I ~/.dotfiles/
+Repository root (chezmoi source).
+.TP
+.I ~/.config/chezmoi/chezmoi.toml
+Per-machine overrides.
+.TP
+.I ~/.config/dotfiles/commands/
+User-provided custom dot commands.
+.TP
+.I ~/.config/dotfiles/modules.d/
+User-provided aliases and functions.
+.TP
+.I ~/.config/zsh/rc.d.local/
+User-provided zsh initialization scripts.
+.SH SEE ALSO
+.BR chezmoi (1),
+.BR mise (1),
+.BR zsh (1)
+.SH AUTHORS
+Sebastien Rousseau <sebastian.rousseau@gmail.com>
+.SH BUGS
+Report issues at https://github.com/sebastienrousseau/dotfiles/issues

package/dot_local/share/mise/plugins/kiro-cli/bin/executable_download

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+set -euo pipefail
+
+OS="$(uname -s)"
+ARCH="$(uname -m)"
+
+case "$OS" in
+  Darwin) target_os="darwin" ;;
+  Linux) target_os="linux" ;;
+  *)
+    echo "Unsupported OS: $OS" >&2
+    exit 1
+    ;;
+esac
+
+case "$ARCH" in
+  x86_64 | amd64) target_arch="x86_64" ;;
+  arm64 | aarch64) target_arch="aarch64" ;;
+  *)
+    echo "Unsupported arch: $ARCH" >&2
+    exit 1
+    ;;
+esac
+
+BASE_URL="https://desktop-release.q.us-east-1.amazonaws.com"
+
+if [[ "$target_os" == "darwin" ]]; then
+  app_path="/Applications/Kiro CLI.app/Contents/MacOS"
+
+  if [[ ! -x "$app_path/kiro-cli" ]]; then
+    if ! command -v brew >/dev/null 2>&1; then
+      echo "Kiro CLI.app not found and Homebrew is unavailable." >&2
+      exit 1
+    fi
+
+    if brew list --cask kiro-cli >/dev/null 2>&1; then
+      brew upgrade --cask kiro-cli
+    else
+      brew install --cask kiro-cli
+    fi
+  fi
+
+  mkdir -p "$ASDF_DOWNLOAD_PATH/kirocli/bin"
+  cp "$app_path/kiro-cli" "$ASDF_DOWNLOAD_PATH/kirocli/bin/"
+  cp "$app_path/kiro-cli-chat" "$ASDF_DOWNLOAD_PATH/kirocli/bin/"
+  cp "$app_path/kiro-cli-term" "$ASDF_DOWNLOAD_PATH/kirocli/bin/"
+  exit 0
+fi
+
+# Linux
+# Check for musl (simplified check)
+if ldd /bin/ls 2>&1 | grep -q musl; then
+  filename="kirocli-${target_arch}-linux-musl.zip"
+else
+  filename="kirocli-${target_arch}-linux.zip"
+fi
+
+download_url="${BASE_URL}/latest/$filename"
+
+echo "Downloading Kiro CLI from $download_url..."
+curl -fsSL -o "$ASDF_DOWNLOAD_PATH/kiro-cli.zip" "$download_url"
+unzip -q "$ASDF_DOWNLOAD_PATH/kiro-cli.zip" -d "$ASDF_DOWNLOAD_PATH"
+rm "$ASDF_DOWNLOAD_PATH/kiro-cli.zip"

package/dot_local/share/mise/plugins/kiro-cli/bin/executable_install

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+set -euo pipefail
+
+install_path="$ASDF_INSTALL_PATH"
+download_path="$ASDF_DOWNLOAD_PATH"
+
+mkdir -p "$install_path/bin"
+
+# The zip contains a 'kirocli/bin' directory
+cp "$download_path/kirocli/bin/kiro-cli" "$install_path/bin/"
+cp "$download_path/kirocli/bin/kiro-cli-chat" "$install_path/bin/"
+cp "$download_path/kirocli/bin/kiro-cli-term" "$install_path/bin/"
+
+# Create symlink for 'kiro'
+ln -sf "kiro-cli" "$install_path/bin/kiro"
+
+echo "Kiro CLI installed to $install_path"

package/dot_local/share/mise/plugins/kiro-cli/bin/executable_list-all

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+set -euo pipefail
+
+if [[ "$(uname -s)" == "Darwin" ]] && command -v brew >/dev/null 2>&1; then
+  version="$(brew info --cask --json=v2 kiro-cli 2>/dev/null | sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1)"
+  if [[ -n "${version:-}" ]]; then
+    printf '%s\n' "$version"
+    exit 0
+  fi
+fi
+
+echo "1.27.0 1.27.1"

package/dot_local/share/wayland-sessions/niri.desktop.tmpl

@@ -0,0 +1,6 @@
+[Desktop Entry]
+Name=Niri
+Comment=Scrollable Wayland compositor
+Exec={{ .chezmoi.homeDir }}/.local/bin/start-niri
+Type=Application
+DesktopNames=niri

package/dot_local/share/zsh/completions/_dot

@@ -0,0 +1,283 @@
+#compdef dot
+
+# Zsh completion for the dot CLI (dotfiles manager)
+# Installed to: ~/.local/share/zsh/completions/_dot
+
+_dot() {
+  local -a commands
+
+  commands=(
+    # Core
+    'apply:Apply dotfiles via chezmoi'
+    'sync:Apply dotfiles (alias of apply)'
+    'update:Pull latest changes and apply them'
+    'clean-cache:Clear shell initialization caches'
+    'prewarm:Regenerate shell caches for ultra-fast startup'
+    'cl:Claude CLI with context patterns'
+    'copilot:GitHub Copilot CLI with context patterns'
+    'gemini:Gemini CLI with context patterns'
+    'kiro:Kiro CLI with context patterns'
+    'sgpt:Shell-GPT with context patterns'
+    'ollama:Ollama with context patterns'
+    'opencode:OpenCode with context patterns'
+    'aider:Aider with context patterns'
+    'add:Add a file to chezmoi source'
+    'diff:Show chezmoi diff with exclusions'
+    'status:Show configuration drift'
+    'remove:Safely remove a managed file'
+    'cd:Print source directory path'
+    'edit:Open chezmoi source in \$EDITOR'
+    'commit:AI-powered conventional commit'
+    'patterns:Manage AI steering patterns'
+
+    # Diagnostics
+    'doctor:Check system health and configuration'
+    'heal:Auto-repair common dotfiles issues'
+    'health:Run comprehensive health check'
+    'smoke-test:Run automated toolchain verification'
+    'chaos:Simulate config corruption to test self-healing'
+    'scorecard:Unified health/security/performance scorecard'
+    'security-score:Analyze infrastructure security score'
+    'intelligence:Show Dotfiles Intelligence Surface'
+    'rollback:Rollback dotfiles to a previous state'
+    'drift:Drift dashboard (detailed chezmoi status)'
+    'history:Shell history analysis'
+    'benchmark:Run shell startup benchmark'
+    'perf:Show performance mode and timing'
+    'load:Preload heavy shell layers'
+    'load-bench:Measure time to heavy-layer readiness'
+    'load-bench-pty:Measure background prewarm via PTY'
+    'ai:Show AI helper status'
+    'ai-setup:Interactive setup for all AI CLI tools'
+    'ai-query:Context-aware RAG query over your dotfiles'
+    'conflicts:Report alias/command conflicts'
+    'locks:Show version locks for key tools'
+    'snapshot:Capture baseline system snapshot'
+    'verify:Run post-merge verification checks'
+
+    # Tools
+    'tools:Show or install nix packages'
+    'new:Create a new project from a template'
+    'sandbox:Launch a safe sandbox preview'
+    'keys:Show keybindings catalog'
+    'aliases:List/search/explain aliases and tiers'
+    'learn:Start the interactive tour'
+    'docs:Show repo README'
+    'log-rotate:Rotate dotfiles log'
+    'setup:Interactive setup (profile, features, secrets)'
+
+    # Appearance
+    'theme:Switch terminal theme'
+    'wallpaper:Apply a wallpaper'
+    'fonts:Install Nerd Fonts'
+    'tune:Apply OS tuning'
+
+    # Secrets
+    'secrets-init:Initialize age key for secrets'
+    'secrets:Manage secrets (edit|set|get|list|load|provider)'
+    'secrets-create:Create an encrypted secrets file'
+    'ssh-key:Encrypt an SSH key with age'
+    'ssh-cert:Manage short-lived SSH certificates'
+    'env:Load environment buckets from managed secrets'
+
+    # Security
+    'backup:Create a compressed backup of home'
+    'bundle:Create offline archive of dotfiles environment'
+    'encrypt-check:Check disk encryption status'
+    'firewall:Apply firewall hardening'
+    'telemetry:Disable OS telemetry'
+    'dns-doh:Enable DNS-over-HTTPS'
+    'lock-screen:Enforce lock screen idle settings'
+    'usb-safety:Disable automount for removable media'
+
+    # Meta
+    'upgrade:Update flake, plugins, and dotfiles'
+    'packages:List installed packages'
+    'version:Show version information'
+    '--version:Show version information'
+    'help:Show help message'
+  )
+
+  _arguments -C \
+    '1:command:->cmds' \
+    '*::arg:->args'
+
+  case "$state" in
+    cmds)
+      _describe -t commands 'dot command' commands
+      ;;
+    args)
+      case "$words[1]" in
+        new)
+          if ((CURRENT == 2)); then
+            local -a templates=(python go node packer molecule)
+            _describe -t templates 'project template' templates
+          else
+            _files
+          fi
+          ;;
+        add | remove)
+          _files
+          ;;
+        keys)
+          _message 'search pattern (optional)'
+          ;;
+        perf)
+          local -a perf_opts=(
+            '--json:Output as JSON'
+            '-j:Output as JSON'
+            '--profile:Include profile output'
+            '-p:Include profile output'
+            '--runs:Set the number of runs'
+            '-r:Set the number of runs'
+            '--target:Set the timing target in milliseconds'
+            '-t:Set the timing target in milliseconds'
+          )
+          _describe -t options 'perf option' perf_opts
+          ;;
+        doctor)
+          local -a doctor_opts=(
+            '--heal:Auto-repair common issues'
+            '-H:Auto-repair common issues'
+            '--score:Show score output'
+            '-s:Show score output'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+            '--ai:Include AI diagnostics'
+            '-A:Include AI diagnostics'
+          )
+          _describe -t options 'doctor option' doctor_opts
+          ;;
+        attest)
+          local -a attest_opts=(
+            '--json:Emit JSON output'
+            '-j:Emit JSON output'
+            '--write:Write attestation to a file'
+            '-w:Write attestation to a file'
+          )
+          _describe -t options 'attest option' attest_opts
+          ;;
+        lint)
+          local -a lint_opts=(
+            '--check:Run check-only mode'
+            '-c:Run check-only mode'
+            '--fix:Apply safe fixes'
+            '-f:Apply safe fixes'
+          )
+          _describe -t options 'lint option' lint_opts
+          ;;
+        mcp)
+          local -a mcp_opts=(
+            'registry:Show the MCP registry'
+            '--strict:Treat policy warnings as errors'
+            '-s:Treat policy warnings as errors'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+          )
+          _describe -t options 'mcp option' mcp_opts
+          ;;
+        health)
+          local -a health_opts=(
+            '--verbose:Show detailed checks'
+            '-v:Show detailed checks'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+            '--fix:Apply common fixes'
+            '-f:Apply common fixes'
+            '--force:Apply fixes without prompts'
+            '-F:Apply fixes without prompts'
+          )
+          _describe -t options 'health option' health_opts
+          ;;
+        security-score)
+          local -a security_opts=(
+            '--verbose:Show detailed scoring'
+            '-v:Show detailed scoring'
+            '--quiet:Reduce output noise'
+            '-q:Reduce output noise'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+          )
+          _describe -t options 'security-score option' security_opts
+          ;;
+        snapshot)
+          local -a snapshot_opts=(
+            '--baseline:Capture the baseline snapshot'
+            '-b:Capture the baseline snapshot'
+            '--force:Overwrite an existing snapshot'
+            '-f:Overwrite an existing snapshot'
+          )
+          _describe -t options 'snapshot option' snapshot_opts
+          ;;
+        verify)
+          local -a verify_opts=(
+            '--security:Run security verification'
+            '-s:Run security verification'
+          )
+          _describe -t options 'verify option' verify_opts
+          ;;
+        restore)
+          local -a restore_opts=(
+            '--list:List available backups'
+            '-l:List available backups'
+            '--latest:Restore the latest backup'
+            '-L:Restore the latest backup'
+            '--git:Restore from a git ref'
+            '-g:Restore from a git ref'
+            '--diff:Show a diff for a git ref'
+            '-d:Show a diff for a git ref'
+            '--dry-run:Preview the restore'
+            '-n:Preview the restore'
+          )
+          _describe -t options 'restore option' restore_opts
+          ;;
+        load)
+          local -a load_opts=('--background:Load in background' '--status:Show load status')
+          _describe -t options 'load option' load_opts
+          ;;
+        tools)
+          local -a tool_cmds=('install:Enter Nix development shell')
+          _describe -t subcommands 'tools subcommand' tool_cmds
+          ;;
+        theme)
+          local -a themes=(dark light)
+          _describe -t themes 'theme mode' themes
+          ;;
+        ssh-cert)
+          local -a cert_cmds=(
+            'issue:Request a short-lived SSH certificate'
+            'status:Show current certificate status'
+            'revoke:Revoke an active certificate'
+          )
+          _describe -t subcommands 'ssh-cert subcommand' cert_cmds
+          ;;
+        secrets)
+          local -a secrets_cmds=(
+            'edit:Edit encrypted secrets'
+            'set:Set a secret value'
+            'get:Get a secret value'
+            'list:List secret keys'
+            'load:Load secrets into environment'
+            'provider:Show/switch secrets provider'
+          )
+          _describe -t subcommands 'secrets subcommand' secrets_cmds
+          ;;
+        cl | copilot | gemini | kiro | sgpt | ollama | opencode | aider)
+          _arguments -C \
+            '(--pattern -p)'{--pattern,-p}'[Specify steering pattern]:pattern:->patterns' \
+            '*:prompt: '
+          if [[ "$state" == "patterns" ]]; then
+            local -a patterns
+            patterns=($(ls -1 "${XDG_CONFIG_HOME:-$HOME/.config}/ai/patterns" 2>/dev/null | sed 's/\.md$//'))
+            _describe -t patterns 'AI pattern' patterns
+          fi
+          ;;
+        *)
+          _default
+          ;;
+      esac
+      ;;
+  esac
+}
+
+_dot "$@"