@sebastienrousseau/dotfiles 0.2.481 → 0.2.500

package/install.sh

@@ -1,255 +1,342 @@
 #!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
 # Universal Dotfiles Installer (Zero-Dependency)
-# Usage: sh -c "$(curl -fsSL https://dotfiles.io/install.sh)"
+# Usage: bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/master/install.sh)"
 # (or ./install.sh locally)
-#
-# This installer uses modular libraries from install/lib/:
-#   - os_detection.sh    : OS and architecture detection
-#   - package_managers.sh: Package manager bootstrapping
-#   - backup.sh          : Dotfile backup functionality
-#   - chezmoi.sh         : Chezmoi installation and configuration
 
 set -euo pipefail
 
-# =============================================================================
-# Configuration
-# =============================================================================
+# ANSI Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+BOLD='\033[1m'
+NC='\033[0m'
 
-VERSION="${1:-v0.2.480}"
-REPO_URL="https://github.com/sebastienrousseau/dotfiles.git"
-SOURCE_DIR="$HOME/.dotfiles"
+# Paths
+SOURCE_DIR="${SOURCE_DIR:-$HOME/.dotfiles}"
 LEGACY_SOURCE_DIR="$HOME/.local/share/chezmoi"
+CHEZMOI_CONFIG_DIR="$HOME/.config/chezmoi"
+CHEZMOI_CONFIG_FILE="$CHEZMOI_CONFIG_DIR/chezmoi.toml"
 
-# =============================================================================
-# Colors and Output
-# =============================================================================
-
-if [[ -z "${NO_COLOR:-}" ]] && [[ -t 1 ]]; then
-  RED='\033[0;31m'
-  GREEN='\033[0;32m'
-  BLUE='\033[0;34m'
-  CYAN='\033[0;36m'
-  BOLD='\033[1m'
-  NC='\033[0m'
-else
-  RED='' GREEN='' BLUE='' CYAN='' BOLD='' NC=''
-fi
+# Utility Functions
+step() {
+  if [[ "${DOTFILES_SILENT:-0}" != "1" ]]; then
+    printf '%b\n' "${BOLD}${BLUE}==>${NC} ${BOLD}$1${NC}"
+  fi
+}
 
-step() { echo -e "${BLUE}==>${NC} ${BOLD}$1${NC}"; }
-success() { echo -e "${GREEN}==> Done!${NC}"; }
 error() {
-  echo -e "${RED}==> Error: $1${NC}"
+  printf '%b\n' "${RED}Error:${NC} $1" >&2
   exit 1
 }
 
-# =============================================================================
-# Banner
-# =============================================================================
-
-echo -e "${CYAN}${BOLD}"
-cat <<"EOF"
-   ___      _    _  _  _
-  / _ \___ | |_ (_)| |(_) ___  ___
- / /_)/ _ \| __|| || || |/ _ \/ __|
-/ ___/ (_) | |_ | || || |  __/\__ \
-\/    \___/ \__||_||_||_|\___||___/
-           Universal Installer
+success() {
+  if [[ "${DOTFILES_SILENT:-0}" != "1" ]]; then
+    printf '%b\n' "${GREEN}Success!${NC} $1"
+  fi
+}
+
+# Cross-platform sed in-place (BSD vs GNU)
+sed_in_place() {
+  if sed --version >/dev/null 2>&1; then
+    sed -i "$@" # GNU
+  else
+    sed -i '' "$@" # BSD (macOS)
+  fi
+}
+
+show_help() {
+  cat <<EOF
+Usage: install.sh [version] [options]
+
+Arguments:
+  version       The version (tag or branch) to install (default: v0.2.500)
+
+Options:
+  --help        Show this help message
+  --force       Non-interactive mode (sets DOTFILES_NONINTERACTIVE=1)
+  --silent      Quiet mode (sets DOTFILES_SILENT=1)
+  --minimal     Minimal profile (disable nvim, tmux, zellij)
+
 EOF
-echo -e "${NC}"
-
-# =============================================================================
-# Library Loading
-# =============================================================================
-
-# Determine script directory for library loading
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" 2>/dev/null && pwd)" || SCRIPT_DIR=""
-LIB_DIR="${SCRIPT_DIR}/install/lib"
-
-# Source libraries if available (for local installs)
-if [ -d "$LIB_DIR" ]; then
-  # shellcheck source=install/lib/os_detection.sh
-  source "$LIB_DIR/os_detection.sh"
-  # shellcheck source=install/lib/package_managers.sh
-  source "$LIB_DIR/package_managers.sh"
-  # shellcheck source=install/lib/backup.sh
-  source "$LIB_DIR/backup.sh"
-  # shellcheck source=install/lib/chezmoi.sh
-  source "$LIB_DIR/chezmoi.sh"
-  LIBS_LOADED=1
-else
-  LIBS_LOADED=0
-fi
+}
 
-# =============================================================================
-# Inline Functions (for remote install without libraries)
-# =============================================================================
-
-if [ "$LIBS_LOADED" = "0" ]; then
-  # Minimal inline implementations when libraries aren't available
-  detect_os() {
-    OS="$(uname -s)"
-    ARCH="$(uname -m)"
-    target_os="unknown"
-    case "$OS" in
-      Darwin) target_os="macos" ;;
-      Linux)
-        if [ -f /proc/version ] && grep -qi 'microsoft\|WSL' /proc/version; then
-          target_os="wsl2"
-        elif [ -f /etc/os-release ]; then
-          . /etc/os-release
-          case "${ID:-}" in
-            ubuntu | debian | pop | linuxmint | elementary) target_os="debian" ;;
-            fedora | rhel | centos | rocky | alma) target_os="fedora" ;;
-            arch | manjaro | endeavouros) target_os="arch" ;;
-            *) target_os="linux" ;;
-          esac
-        else
-          target_os="linux"
+main() {
+  local version="v0.2.500"
+  local version_set=0
+  local minimal=0
+  local _cleanup_files=()
+  trap 'set +u; rm -f "${_cleanup_files[@]}" 2>/dev/null; set -u' EXIT
+
+  for arg in "$@"; do
+    case "$arg" in
+      --help)
+        show_help
+        exit 0
+        ;;
+      --silent) export DOTFILES_SILENT=1 ;;
+      --force) export DOTFILES_NONINTERACTIVE=1 ;;
+      --minimal) minimal=1 ;;
+      --*)
+        error "Unknown option: $arg"
+        ;;
+      *)
+        if [[ $version_set -eq 1 ]]; then
+          error "Multiple versions specified: $version and $arg"
         fi
+        version="$arg"
+        version_set=1
         ;;
     esac
-    export OS ARCH target_os
-  }
+  done
 
-  print_os_info() {
-    echo "   OS: $OS"
-    echo "   Arch: $ARCH"
-    echo "   Target: $target_os"
-  }
+  # 2. Check Prerequisites & Bootstrap Package Managers
+  step "Checking Prerequisites..."
 
-  bootstrap_package_manager() {
-    if [ "$target_os" = "macos" ] && ! command -v brew >/dev/null; then
-      echo "   Homebrew not found."
-      echo -e "${CYAN}   SECURITY NOTE: This will download and execute code from brew.sh${NC}"
-      if [ "${DOTFILES_NONINTERACTIVE:-0}" != "1" ]; then
-        read -r -p "   Continue with Homebrew installation? [y/N] " response
-        case "$response" in
-          [yY][eE][sS] | [yY]) ;;
-          *) error "Homebrew installation cancelled." ;;
-        esac
+  # Detect Operating System
+  OS="$(uname -s)"
+  case "$OS" in
+    Darwin) target_os="macos" ;;
+    Linux)
+      if grep -qi microsoft /proc/version 2>/dev/null; then
+        target_os="wsl2"
+      elif [ -f /etc/debian_version ]; then
+        target_os="debian"
+      elif [ -f /etc/fedora-release ]; then
+        target_os="fedora"
+      elif [ -f /etc/arch-release ]; then
+        target_os="arch"
+      else
+        target_os="linux"
       fi
-      /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
-      [ -x /opt/homebrew/bin/brew ] && eval "$(/opt/homebrew/bin/brew shellenv)"
-      [ -x /usr/local/bin/brew ] && eval "$(/usr/local/bin/brew shellenv)"
-    fi
-    case "$target_os" in
-      debian | wsl2) command -v apt-get >/dev/null || error "apt-get required" ;;
-      fedora) command -v dnf >/dev/null || error "dnf required" ;;
-      arch) command -v pacman >/dev/null || error "pacman required" ;;
-    esac
-  }
+      ;;
+    *) target_os="unknown" ;;
+  esac
 
-  check_prerequisites() {
-    command -v curl >/dev/null || error "curl is required"
-    command -v git >/dev/null || error "git is required"
+  # Bootstrap gum for a better UI if available or install it
+  bootstrap_gum() {
+    if command -v gum >/dev/null 2>&1; then return 0; fi
+    if [[ "${DOTFILES_SILENT:-0}" == "1" ]]; then return 0; fi
+
+    echo "   Bootstrapping UI components (gum)..."
+    if [[ "$OS" == "Darwin" ]] && command -v brew >/dev/null; then
+      brew install gum >/dev/null 2>&1
+    elif [[ "$target_os" == "debian" || "$target_os" == "wsl2" ]]; then
+      sudo mkdir -p /etc/apt/keyrings
+      curl -fsSL https://repo.charm.sh/apt/gpg.key |
+        sudo gpg --batch --yes --dearmor -o /etc/apt/keyrings/charm.gpg
+      # Verify Charm GPG key fingerprint
+      if ! gpg --no-default-keyring --keyring /etc/apt/keyrings/charm.gpg \
+        --list-keys --with-colons 2>/dev/null | grep -q "fid:"; then
+        echo "Warning: Could not verify Charm GPG key" >&2
+      fi
+      echo "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *" | sudo tee /etc/apt/sources.list.d/charm.list
+      sudo apt-get update && sudo apt-get install gum -y >/dev/null 2>&1
+    fi
   }
 
+  # 3. Install Chezmoi (in parallel with other checks where possible)
   install_chezmoi() {
     if command -v chezmoi >/dev/null; then
       echo "   chezmoi already installed: $(chezmoi --version)"
-    elif command -v brew >/dev/null; then
-      brew install chezmoi
+      return 0
+    fi
+
+    if command -v brew >/dev/null; then
+      echo "   Installing chezmoi via Homebrew..."
+      brew install chezmoi >/dev/null 2>&1
     else
-      local bin_dir="$HOME/.local/bin"
+      bin_dir="$HOME/.local/bin"
       mkdir -p "$bin_dir"
+      echo "   Installing chezmoi via binary download..."
+
+      # Prefer verified installer with SHA256 checksum when available
+      local verified_installer
+      verified_installer="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/scripts/ci/install-chezmoi-verified.sh"
+      if [[ -x "$verified_installer" ]] || [[ -f "$verified_installer" ]]; then
+        echo "   Using checksum-verified installer..."
+        if ! bash "$verified_installer" "${CHEZMOI_VERSION:-2.47.1}" "$bin_dir"; then
+          echo "   Verified installer failed, falling back to get.chezmoi.io" >&2
+        else
+          return 0
+        fi
+      fi
+
+      # Fallback: download installer with size/shebang validation
       local installer
-      installer=$(mktemp)
-      curl -fsSL -o "$installer" https://get.chezmoi.io || error "Failed to download chezmoi"
-      [ "$(wc -c <"$installer")" -gt 102400 ] && {
+      installer=$(umask 077 && mktemp)
+      if ! curl -fsSL -o "$installer" https://get.chezmoi.io; then
+        rm -f "$installer"
+        echo "   Failed to download chezmoi installer" >&2
+        return 1
+      fi
+      # Validate: must be a shell script and not suspiciously large
+      if [[ "$(wc -c <"$installer")" -gt 102400 ]]; then
+        rm -f "$installer"
+        echo "   Chezmoi installer suspiciously large. Aborting." >&2
+        return 1
+      fi
+      if ! head -1 "$installer" | grep -q '^#!/'; then
         rm -f "$installer"
-        error "Installer too large"
-      }
-      sh "$installer" -- -b "$bin_dir" 2>/dev/null || {
+        echo "   Chezmoi installer doesn't look like a shell script. Aborting." >&2
+        return 1
+      fi
+      if ! BINDIR="$bin_dir" sh "$installer"; then
         rm -f "$installer"
-        error "Failed to install chezmoi"
-      }
+        echo "   chezmoi binary installer failed" >&2
+        return 1
+      fi
       rm -f "$installer"
-      export PATH="$bin_dir:$PATH"
     fi
   }
 
+  # Parallel execution of bootstrapping components
+  local pid_gum pid_cm
+  (bootstrap_gum) &
+  pid_gum=$!
+  (install_chezmoi) &
+  pid_cm=$!
+
+  # Wait and check exit codes
+  wait "$pid_gum" || true # gum is optional
+  wait "$pid_cm" || error "chezmoi installation failed"
+
+  # Critical: Add to PATH for the rest of the script to see it
+  bin_dir="$HOME/.local/bin"
+  export PATH="$bin_dir:$PATH"
+
+  # 4. Prepare source directory
+  step "Preparing source directory..."
+
+  # VERSION pinning for supply-chain security
+  VERSION="$version"
+
   ensure_chezmoi_source() {
     local dir="$1"
-    local config_dir="$HOME/.config/chezmoi"
-    mkdir -p "$config_dir"
-    printf 'sourceDir = "%s"\n' "$dir" >"$config_dir/chezmoi.toml"
+    mkdir -p "$CHEZMOI_CONFIG_DIR"
+    # Escape sed metacharacters in replacement string
+    local escaped_dir
+    escaped_dir=$(printf '%s\n' "$dir" | sed -e 's/[\/&]/\\&/g')
+    if [[ -f "$CHEZMOI_CONFIG_FILE" ]] && grep -q '^sourceDir' "$CHEZMOI_CONFIG_FILE"; then
+      sed_in_place "s,^sourceDir.*$,sourceDir = \"$escaped_dir\"," "$CHEZMOI_CONFIG_FILE"
+    else
+      printf 'sourceDir = "%s"\n' "$dir" >"$CHEZMOI_CONFIG_FILE"
+    fi
   }
 
-  perform_backup() {
-    local backup_dir
-    backup_dir="$HOME/.dotfiles.bak.$(date +"%Y%m%d_%H%M%S")"
-    local count=0
-    if command -v chezmoi >/dev/null && [ -f "$HOME/.config/chezmoi/chezmoi.toml" ]; then
-      while IFS= read -r file; do
-        [ -z "$file" ] && continue
-        if [ -e "$file" ]; then
-          local rel="${file#"$HOME"/}"
-          mkdir -p "$backup_dir/$(dirname "$rel")"
-          cp -a "$file" "$backup_dir/$rel"
-          count=$((count + 1))
-        fi
-      done < <(chezmoi managed --path-style=absolute 2>/dev/null || true)
-    fi
-    [ "$count" -gt 0 ] && echo "   Backed up $count files to $backup_dir" || echo "   No files to back up."
+  apply_minimal_profile_overrides() {
+    local data_file="$1"
+    [[ -f "$data_file" ]] || return 0
+    sed_in_place 's/^profile = ".*"/profile = "minimal"/' "$data_file"
+    sed_in_place 's/^nvim = true/nvim = false/' "$data_file"
+    sed_in_place 's/^tmux = true/tmux = false/' "$data_file"
+    sed_in_place 's/^zellij = true/zellij = false/' "$data_file"
   }
-fi
 
-# =============================================================================
-# Main Installation Flow
-# =============================================================================
-
-# Step 1: Detect Environment
-step "Detecting Environment..."
-detect_os
-print_os_info
-
-# Step 2: Bootstrap Package Managers
-step "Checking Prerequisites..."
-bootstrap_package_manager
-check_prerequisites
-
-# Step 3: Install Chezmoi
-step "Installing Chezmoi..."
-install_chezmoi
-
-# Step 4: Backup Existing Dotfiles
-step "Backing up existing dotfiles..."
-if [ -d "$SOURCE_DIR/.git" ]; then
-  ensure_chezmoi_source "$SOURCE_DIR"
-elif [ -d "$LEGACY_SOURCE_DIR/.git" ]; then
-  ensure_chezmoi_source "$LEGACY_SOURCE_DIR"
-fi
-perform_backup
-
-# Step 5: Apply Configuration
-step "Applying Configuration..."
-
-APPLY_FLAGS=()
-[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ] && APPLY_FLAGS=(--force --no-tty)
-
-if [ -d "$SOURCE_DIR/.git" ]; then
-  echo "   Applying from local source: $SOURCE_DIR"
-  ensure_chezmoi_source "$SOURCE_DIR"
-  chezmoi apply "${APPLY_FLAGS[@]}"
-elif [ -d "$LEGACY_SOURCE_DIR/.git" ]; then
-  echo "   Migrating from legacy source: $LEGACY_SOURCE_DIR"
-  mv "$LEGACY_SOURCE_DIR" "$SOURCE_DIR"
-  ensure_chezmoi_source "$SOURCE_DIR"
-  chezmoi apply "${APPLY_FLAGS[@]}"
-else
-  echo "   Initializing from GitHub (Version: $VERSION)..."
-  echo -e "${CYAN}   SECURITY NOTE: Cloning pinned version $VERSION${NC}"
-
-  git clone --depth 1 --branch "$VERSION" "$REPO_URL" "$SOURCE_DIR" 2>/dev/null ||
-    { git clone "$REPO_URL" "$SOURCE_DIR" && (cd "$SOURCE_DIR" && git checkout "$VERSION"); }
-
-  ensure_chezmoi_source "$SOURCE_DIR"
-  chezmoi apply "${APPLY_FLAGS[@]}"
-fi
+  # 5. Backup existing dotfiles that chezmoi will overwrite
+  step "Backing up existing dotfiles..."
+  BACKUP_DIR="$HOME/.dotfiles.bak.$(date +"%Y%m%d_%H%M%S")"
+  backup_count=0
+
+  # Determine the source directory for chezmoi to diff against
+  if [[ -d "$SOURCE_DIR/.git" ]]; then
+    ensure_chezmoi_source "$SOURCE_DIR"
+  elif [[ -d "$LEGACY_SOURCE_DIR/.git" ]]; then
+    ensure_chezmoi_source "$LEGACY_SOURCE_DIR"
+  fi
+
+  # Back up any existing files that chezmoi would overwrite
+  if command -v chezmoi >/dev/null && [[ -f "$CHEZMOI_CONFIG_FILE" ]]; then
+    while IFS= read -r file; do
+      [[ -z "$file" ]] && continue
+      if [[ -e "$file" ]]; then
+        rel="${file#"$HOME"/}"
+        mkdir -p "$BACKUP_DIR/$(dirname "$rel")"
+        cp -a "$file" "$BACKUP_DIR/$rel"
+        backup_count=$((backup_count + 1))
+      fi
+    done < <(chezmoi managed --path-style=absolute 2>/dev/null || true)
+  fi
 
-# =============================================================================
-# Complete
-# =============================================================================
+  if [[ "$backup_count" -gt 0 ]]; then
+    echo "   Backed up $backup_count files to $BACKUP_DIR"
+  else
+    echo "   No existing dotfiles to back up."
+    rm -rf "$BACKUP_DIR" 2>/dev/null || true
+  fi
 
-success
-echo -e "${GREEN}Configuration loaded. Please restart your shell.${NC}"
+  # Detect devcontainer/Codespaces environment
+  if [[ -f /.dockerenv ]] || [[ -n "${CODESPACES:-}" ]] || [[ -n "${REMOTE_CONTAINERS:-}" ]]; then
+    DOTFILES_MINIMAL=1
+    step "Detected container environment — using minimal profile"
+  fi
+
+  # Apply --minimal overrides if requested
+  if [[ $minimal -eq 1 ]] || [[ "${DOTFILES_MINIMAL:-0}" = "1" ]]; then
+    step "Applying minimal profile overrides..."
+    apply_minimal_profile_overrides "$SOURCE_DIR/.chezmoidata.toml"
+  fi
+
+  # 6. Initialize & Apply
+  step "Applying Configuration..."
+
+  # If we are running from a local source, just apply
+  if [[ -d "$SOURCE_DIR/.git" ]]; then
+    echo "   Applying from local source: $SOURCE_DIR"
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  elif [[ -d "$LEGACY_SOURCE_DIR/.git" ]]; then
+    echo "   Migrating from legacy source: $LEGACY_SOURCE_DIR"
+    mv "$LEGACY_SOURCE_DIR" "$SOURCE_DIR"
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  else
+    echo "   Initializing from GitHub (Branch/Tag: $VERSION)..."
+    printf '%b\n' "${CYAN}   SECURITY NOTE: Cloning pinned version $VERSION for supply-chain safety${NC}"
+
+    # STRICT MODE: We pin to the specific tag to avoid 'main' branch drift
+    git clone --depth 1 --branch "$VERSION" https://github.com/sebastienrousseau/dotfiles.git "$SOURCE_DIR" 2>/dev/null ||
+      { git clone https://github.com/sebastienrousseau/dotfiles.git "$SOURCE_DIR" && (cd "$SOURCE_DIR" && git checkout "$VERSION"); }
+
+    # Verify the checkout succeeded and we're on the expected version
+    ACTUAL_REF=$(
+      cd "$SOURCE_DIR" || exit 1
+      if ! git describe --tags --exact-match 2>/dev/null; then
+        git rev-parse --short HEAD
+      fi
+    )
+    if [[ "$ACTUAL_REF" != "$VERSION" ]] && [[ "${ACTUAL_REF#v}" != "${VERSION#v}" ]]; then
+      printf '%b\n' "${RED}   WARNING: Checked out ref $ACTUAL_REF (requested: $VERSION) — version mismatch${NC}" >&2
+    fi
+
+    if [[ $minimal -eq 1 ]]; then
+      step "Applying minimal profile overrides..."
+      apply_minimal_profile_overrides "$SOURCE_DIR/.chezmoidata.toml"
+    fi
+
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  fi
+
+  success "Configuration loaded. Please restart your shell."
+  step "Run 'dot learn' for an interactive tour of your new dotfiles."
+}
+
+# Run main if executed directly (or via bash -c where BASH_SOURCE is unset)
+if [[ "${BASH_SOURCE[0]:-}" == "${0:-}" ]] || [[ -z "${BASH_SOURCE[0]:-}" ]]; then
+  main "$@"
+fi

package/package.json

@@ -1,13 +1,17 @@
 {
   "name": "@sebastienrousseau/dotfiles",
-  "version": "0.2.481",
+  "version": "0.2.500",
   "description": "The Trusted Shell Platform — Universal dotfiles managed by Chezmoi. Features Bash & Zsh for macOS, Linux & WSL. Rust modern tooling & enterprise-grade security.",
   "main": "install.sh",
   "bin": {
     "dotfiles-install": "./install.sh"
   },
   "scripts": {
-    "test": "bash -n install.sh && echo 'Syntax OK'",
+    "test": "bash ./scripts/qa/reliability-audit.sh",
+    "test:quick": "bash ./scripts/qa/reliability-audit.sh --quick",
+    "test:unit": "bash ./scripts/qa/reliability-audit.sh --unit-only",
+    "test:integration": "bash ./scripts/qa/reliability-audit.sh --with-integration",
+    "examples": "bash ./scripts/qa/validate-examples.sh",
     "lint": "shellcheck install.sh scripts/**/*.sh"
   },
   "repository": {
@@ -29,11 +33,19 @@
     "cli",
     "automation",
     "devops",
-    "security"
+    "security",
+    "nix",
+    "home-manager",
+    "starship",
+    "mise",
+    "age-encryption",
+    "terminal",
+    "configuration-management",
+    "infrastructure-as-code"
   ],
   "author": {
     "name": "Sebastien Rousseau",
-    "email": "sebastian.rousseau@gmail.com",
+    "email": "sebastienrousseau@users.noreply.github.com",
     "url": "https://sebastienrousseau.com"
   },
   "license": "MIT",
@@ -46,7 +58,7 @@
     "url": "https://github.com/sponsors/sebastienrousseau"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.0.0 <26.0.0"
   },
   "publishConfig": {
     "access": "public",