@sebastienrousseau/dotfiles 0.2.481 → 0.2.500

package/docs/FONTS.md

@@ -1,147 +0,0 @@
-# Font configuration
-
-Learn about font setup, rendering, and the fonts included with these dotfiles.
-
-## Recommended fonts
-
-### Primary: JetBrains Mono Nerd Font
-
-Your default font is JetBrains Mono with Nerd Font patches.
-
-Features:
-- Designed for code readability
-- Ligature support
-- Powerline/Nerd Font glyphs
-- Clear distinction between similar characters (0/O, 1/l/I)
-
-### Alternatives
-
-| Font | Style | Best for |
-|------|-------|----------|
-| Fira Code | Modern | People who enjoy ligatures |
-| Cascadia Code | Microsoft | People who use VS Code |
-| Hack | Classic | People who prefer a classic look |
-| Source Code Pro | Adobe | Clean aesthetic |
-| Iosevka | Narrow | Small screens |
-
-## Installation
-
-### macOS (Homebrew)
-
-```bash
-# Install via Homebrew
-brew tap homebrew/cask-fonts
-brew install --cask font-jetbrains-mono-nerd-font
-
-# Or use dot CLI
-dot fonts install
-```
-
-### Linux (manual)
-
-```bash
-# Download from Nerd Fonts
-wget https://github.com/ryanoasis/nerd-fonts/releases/download/v3.4.0/JetBrainsMono.zip
-
-# Extract to fonts directory
-unzip JetBrainsMono.zip -d ~/.local/share/fonts/
-
-# Update font cache
-fc-cache -fv
-```
-
-### Using the font patcher
-
-To patch your own fonts with Nerd Font glyphs:
-
-```bash
-# Use the included script
-~/.dotfiles/scripts/fonts/patch-fonts.sh /path/to/font.ttf
-```
-
-## Font rendering
-
-### Sample characters
-
-```
-ABCDEFGHIJKLMNOPQRSTUVWXYZ
-abcdefghijklmnopqrstuvwxyz
-0123456789
-!@#$%^&*()_+-=[]{}|;':",.<>?/
-
-Ligatures: -> => == != <= >= && || :: ...
-Powerline:
-Nerd Font:
-```
-
-### Ambiguous characters
-
-The font configuration provides clear distinction between:
-
-```
-0 vs O (zero vs capital O)
-1 vs l vs I (one vs lowercase L vs capital I)
-` vs ' (backtick vs single quote)
-" vs " (straight vs curly quotes)
-```
-
-## Terminal configuration
-
-### Ghostty
-
-```
-font-family = JetBrains Mono Nerd Font
-font-size = 14
-```
-
-### WezTerm
-
-```lua
-config.font = wezterm.font("JetBrains Mono Nerd Font")
-config.font_size = 14.0
-```
-
-### Alacritty
-
-```yaml
-font:
-  normal:
-    family: JetBrains Mono Nerd Font
-  size: 14.0
-```
-
-### Kitty
-
-```
-font_family JetBrains Mono Nerd Font
-font_size 14.0
-```
-
-## Font size recommendations
-
-| Display | Size |
-|---------|------|
-| 13" laptop | 12-13pt |
-| 15" laptop | 13-14pt |
-| 24" monitor | 14-15pt |
-| 27" 4K monitor | 15-16pt |
-
-## Troubleshooting
-
-### Fonts not displaying correctly
-
-1. Verify font is installed: `fc-list | grep JetBrains`
-2. Restart terminal application
-3. Check terminal font settings
-
-### Nerd Font icons missing
-
-1. Verify you are using a Nerd Font variant
-2. Confirm the terminal supports the Unicode range
-3. Try a different Nerd Font
-
-### Ligatures not working
-
-1. Enable ligatures in terminal settings
-2. Some terminals do not support ligatures (for example, Terminal.app)
-3. Try Ghostty, WezTerm, or Kitty

package/docs/INSTALL.md

@@ -1,119 +0,0 @@
-# Get started
-
-This guide covers supported platforms, prerequisites, and the standard install path.
-
-## Supported platforms
-
-- macOS (Homebrew)
-- Ubuntu/Debian (apt)
-- WSL2 (Ubuntu/Debian)
-
-## Prerequisites
-
-Required:
-- `git`
-- `curl`
-
-Optional (feature-dependent):
-- Homebrew (macOS)
-- `apt-get` (Linux)
-- Docker or Podman (sandbox)
-- Nix (optional toolchain)
-- gum (required for `dot learn`)
-
-## Install
-
-### One-liner (recommended)
-
-```bash
-sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.480/install.sh)"
-exec zsh
-```
-
-### Manual installation
-
-```bash
-# Clone the repository
-git clone https://github.com/sebastienrousseau/dotfiles.git ~/.dotfiles
-
-# Install chezmoi and apply
-sh -c "$(curl -fsLS get.chezmoi.io)" -- init --apply sebastienrousseau/dotfiles
-
-# Restart shell
-exec zsh
-```
-
-### Using Nix (alternative)
-
-If you have Nix with flakes enabled:
-
-```bash
-# Enter development shell with all tools
-nix develop ~/.dotfiles/nix
-
-# Or install the dot-utils meta-package
-nix profile install ~/.dotfiles/nix#dot-utils
-```
-
-## What happens
-
-1. The installer downloads a pinned Chezmoi bootstrap and applies this repo.
-2. Chezmoi hooks install OS packages, fonts, and optional apps.
-3. The `dot` CLI becomes available in `~/.local/bin`.
-4. Chezmoi symlinks shell configuration to your home directory.
-
-## Post-install verification
-
-```bash
-# Check dot CLI is available
-dot --version
-
-# Run health checks
-dot doctor
-
-# View available commands
-dot help
-```
-
-## Optional: gum
-
-`gum` is required for interactive features like `dot learn`.
-
-macOS:
-```bash
-brew install gum
-```
-
-Linux (snap):
-```bash
-sudo snap install gum --classic
-```
-
-Linux (Go toolchain):
-```bash
-go install github.com/charmbracelet/gum@latest
-```
-
-## Update
-
-```bash
-dot update
-```
-
-## Uninstall
-
-```bash
-# Remove chezmoi-managed files
-chezmoi purge
-
-# Remove the dotfiles repository
-rm -rf ~/.dotfiles
-
-# Remove local data
-rm -rf ~/.local/share/chezmoi
-rm -rf ~/.local/share/dotfiles.log
-```
-
-## Troubleshooting
-
-If install hooks fail, check `~/.local/share/dotfiles.log` and review `docs/TROUBLESHOOTING.md`.

package/docs/KEYS.md

@@ -1,40 +0,0 @@
-# Keybindings
-
-This is the single source of truth for navigation and muscle-memory shortcuts
-across the dotfiles stack. Keep this concise and consistent.
-
-## Zsh
-- Ctrl+R: History search (fzf/atuin if enabled)
-- Ctrl+P / Ctrl+N: History prefix search (up/down)
-
-## Tmux (prefix = `Ctrl-a`)
-- Prefix + r: Reload config
-- Prefix + N: New window
-- Prefix + a / Tab: Last window
-- Prefix + %: Split vertical (current path)
-- Prefix + ": Split horizontal (current path)
-- Prefix + \\: Split vertical (alt)
-- Prefix + |: Split horizontal (alt)
-- Prefix + h/j/k/l: Move between panes (vim-style)
-- Prefix + z: Toggle zoom pane
-- Prefix + H/J/K/L: Resize pane (left/down/up/right)
-
-## Neovim (leader = `Space`)
-- Ctrl-h/j/k/l: Move between splits
-- Ctrl-s: Save file
-- Leader + ff: Find files (Telescope)
-- Leader + fg: Live grep (Telescope)
-- Leader + q: Quit
-
-## Shell Tools
-- z <dir>: Jump to a directory (zoxide)
-- lg: Open lazygit
-
-## Terminal
-- Ctrl+Shift+C: Copy
-- Ctrl+Shift+V: Paste
-
----
-
-Update this file when bindings change. If you add a new tool, add its shortcuts
-here and keep them aligned with the global conventions.

package/docs/OPERATIONS.md

@@ -1,130 +0,0 @@
-# Discover operations
-
-This guide covers the core workflows to keep your dotfiles running well across platforms.
-
----
-
-## Platforms
-
-### macOS
-**Primary manager**: `Homebrew`
-
-- **Update system**:
-  ```bash
-  # Updates Dotfiles AND Homebrew packages
-  chezmoi update
-  ```
-  *Behind the scenes, this runs `brew bundle install` to match the `Brewfile.lock.json`.*
-
-- **Troubleshooting**:
-  - **Permission issues**: `sudo chown -R $(whoami) $(brew --prefix)/*`
-  - **Drift**: Run `brew bundle cleanup` to remove unmanaged packages.
-
-### Linux (Debian, Ubuntu, ZorinOS, Kali)
-**Primary manager**: `apt-get` / `snap`
-
-- **Update system**:
-  ```bash
-  # 1. Update OS packages
-  sudo apt update && sudo apt upgrade -y
-  
-  # 2. Update Dotfiles
-  chezmoi update
-  ```
-  > [!NOTE]
-  > On Linux, `chezmoi` focuses on configuration. Package updates work best with the OS package manager to avoid `sudo` conflicts.
-
-- **Troubleshooting**:
-  - **Font issues**: If icons are missing, run `./install/provision/run_onchange_50-install-fonts.sh` manually.
-  - **ZorinOS/GNOME**: Custom keybindings may require `dconf load` if Chezmoi does not apply them automatically.
-
-### Windows (WSL2)
-**Primary manager**: `apt-get` (inside WSL)
-
-- **Update system**: Same as **Linux**.
-
-- **WSL specifics**:
-  - **Access Windows files**: WSL mounts Windows drives at `/mnt/c/`.
-  - **Clipboard**: Dotfiles configures `win32yank.exe` automatically for clipboard sharing.
-  - **Performance**: Keep project files inside the Linux filesystem (`~/projects`), NOT in `/mnt/c/`, for 100x better IO performance.
-
----
-
-## Workflows
-
-### Apply changes
-After editing any config file:
-```bash
-dot apply
-```
-*Triggers: `dot_zshrc` reload, audit logging.*
-
-### Roll back
-If an update breaks your setup, revert:
-```bash
-cd ~/.dotfiles
-git reset --hard HEAD@{1}  # Go back 1 operation
-chezmoi apply
-```
-
-### Debug
-If something runs slow or appears broken:
-
-1. **Check health**:
-   ```bash
-   dot doctor
-   ```
-2. **Verbose mode**:
-   ```bash
-   DOTFILES_DEBUG=1 dot apply
-   ```
-
----
-
-## Tools
-
-### Make it yours
-- **Wallpaper rotation**:
-  ```bash
-  ~/.dotfiles/scripts/theme/wallpaper-rotate.sh --interval 300
-  ```
-- **Cursor theme (Linux)**:
-  ```bash
-  DOTFILES_CURSOR_THEME=Papirus ~/.dotfiles/scripts/theme/install-cursors.sh
-  ```
-- **File icons (Linux/macOS)**:
-  ```bash
-  DOTFILES_ICON_THEME=Papirus ~/.dotfiles/scripts/theme/install-file-icons.sh
-  ```
-- **Lock icon (Linux)**:
-  ```bash
-  DOTFILES_LOCK_ICON=~/.config/dotfiles/lock/icon.png ~/.dotfiles/scripts/theme/install-lock-icon.sh
-  ```
-- **GRUB theme (Linux)**:
-  ```bash
-  sudo ~/.dotfiles/scripts/theme/install-grub-theme.sh --apply
-  ```
-- **Boot logo (Linux)**:
-  ```bash
-  sudo ~/.dotfiles/scripts/theme/install-boot-logo.sh --apply
-  ```
-
-### Atuin
-- **Login**: `atuin login`
-- **Sync**: `atuin sync`
-- **Search**: `Ctrl-r` (Global history search)
-
-### Zoxide
-- **Jump**: `z project` matches `~/dev/project`
-- **Query**: `zi` (Interactive selection)
-
-### Yazi
-- **Open**: Type `y`
-- **Preview**: Spacebar to preview files
-- **Quit**: `q`
-
----
-
-## Security policy
-- **GPG/SSH**: All commits use SSH signing.
-- **Audit log**: Review `~/.local/share/dotfiles.log` for a timeline of all changes that Dotfiles applied.

package/docs/PR_DESCRIPTION.md

@@ -1,149 +0,0 @@
-# Release notes — v0.2.480
-
-## Release overview
-
-This release transforms the dotfiles into a high-performance, cross-platform system managed by **chezmoi**.
-
-### Architecture
-v0.2.480 is a portable **shell distribution** managed by `chezmoi` (source of truth in `~/.dotfiles`).
-
-- **XDG-first**: Configs strictly mapped to `~/.config/` (no `~/.foo` sprawl).
-- **Single entrypoint**: `dot_zshenv` acts as an XDG bootloader for instant environment setup.
-- **Modern toolchain**: Replaces classic Unix tools with high-performance Rust alternatives:
-  - `ls` → `eza`
-  - `cat` → `bat`
-  - `grep` → `ripgrep`
-  - `cd` → `zoxide` (smart directory jumping)
-  - `history` → `atuin` (syncable, encrypted SQLite history)
-- **Predictive shell**:
-  - **AI strategy**: Context-aware autosuggestions coupled with optional local LLM integration (`ai_core`).
-  - **Error analysis**: Wrappers analyze command failures through `gh copilot` or local models.
-
-### Non-goals
-- **Not a framework**: This is a curated distribution, not a plugin manager like Oh-My-Zsh.
-- **Not POSIX-pure**: Prioritizes modern Zsh/Rust features over strict POSIX compliance.
-- **Not minimal**: Optimizes for functionality and speed, not line-count minimalism.
-
-### Security
-- **Hardened by default**: Scripts run with `set -euo pipefail` to fail fast on errors.
-- **Supply chain safety**:
-  - **Pinned install**: Installation commands pin to the specific release tag (`v0.2.480`) to prevent drift.
-  - **Zero-trust**: No implicit reliance on `main` branch code in production.
-- **Threat model**: This project assumes a **trusted local machine** and focuses on supply-chain (pinned versions) and configuration safety (immutable history).
-- **Audit logging**: Dotfiles logs all `chezmoi` mutations to `~/.local/share/dotfiles.log` for day-2 operations review.
-
-### Changes
-- **Migrated**:
-  - Shell: `~/.zshrc` now sources generated templates from `~/.config/shell`.
-  - Neovim: `~/.config/nvim` fully managed through Lua/Lazy.nvim.
-  - Tmux: Modular config consolidated to `~/.dotfiles/dot_tmux.conf`.
-- **Packaging**:
-  - `Brewfile` (macOS) and `apt-get` (Linux) handled automatically.
-- **Structural**:
-  - **Renamed**: `dot_config/dotfiles` → `dot_config/shell` for semantic clarity.
-  - **Moved**: `bin/` → `dot_local/bin/` for automatic path integration.
-  - **Separated**: Install scripts split by OS (Darwin/Linux) for cleaner logic.
-- **Layered architecture**: Refactored shell config into explicit layers:
-  - `00-core`: Safety/Paths
-  - `50-logic`: Functions/Toolchain
-  - `90-ux`: Aliases/Theme
-- **Trust and reproducibility**:
-  - **Pinned formulae**: Generated `Brewfile.lock.json` for strictly reproducible macOS builds.
-  - **Binary pinning**: `install.sh` now enforces specific version tags for initial bootstrap.
-### Quality
-- **Conflict resolution**: Detected and resolved **46 namespace collisions** across all alias modules (Git, Go, Archives, etc.) to ensure zero overlap.
-- **Git safety**: Renamed colliding Go aliases (for example, `gr` -> `gor`) to protect core Git commands.
-- **Modernization**: Merged `list` into `modern` for a cohesive Rust-based toolchain experience (`eza`, `bat`).
-- **Standardization**: Removed duplicate logging functions in favor of a shared utility.
-- **Documentation**: All 30+ component READMEs now reflect current functionality.
-
-### Toolchain
-- **Kubernetes**: Added `kubectl`, `helm`, `k9s` aliases.
-- **IaC**: Added `terraform`, `opentofu`, `ansible`.
-- **Languages**: Added ecosystem support for `go`, `yarn`, `uv` (modern Python).
-- **AI integration**: Added wrappers for `gh copilot`, `fabric`, and local LLMs.
-- **Smart help**: Added `dothelp` to search and index custom functions.
-
-### Testing
-
-- **Automated testing**
-  - Docker CI (`ci-docker.yml`) runs on Ubuntu/Fedora/Arch.
-  - Integration tests validate alias syntax (`test-aliases.sh`).
-
-- **Enterprise core and security (the trust layer)**
-  - **SLSA and SBOM**: `security-release.yml` generates SPDX SBOMs and SLSA Level 3 Provenance.
-  - **Signing**: `enable-signing` wizard for GPG/SSH git signing.
-  - **Immutability**: `lock-configs` / `unlock-configs` protect critical dotfiles (`chflags`/`chattr`).
-
-- **Legal and licensing**
-  - **Compliance**: `scan-licenses` (FOSSology/Trivy), `check-cla` (GitHub checks).
-  - **Attribution**: `add-headers` automation and `gen-notice` generation.
-
-- **Self-healing and diagnostics**
-  - **Health**: `dot doctor` diagnoses environment (dependencies, XDG, paths).
-  - **Repair**: `dot heal` / `dot drift` aliases for auto-repair and drift detection.
-
-- **Regulatory compliance**
-  - **Documentation**: `COMPLIANCE.md` maps features to **SOC2 Type II** and **ISO 27001**.
-  - **Privacy**: `privacy-mode` alias disables CLI telemetry for 7+ frameworks.
-
-- **macOS deep integration**
-  - **Hardening**: `defaults` script hardens screensaver, firewall, and Finder settings.
-  - **Optimization**: Configures Safari for development, removes Dock clutter.
-
-- **Font typography**
-  - **Fonts**: Auto-installs `JetBrainsMono Nerd Font` and `Symbols Nerd Font`.
-  - **Rendering**: Linux `fontconfig` XML for sub-pixel antialiasing.
-
-- **Phase 58: Editor unification** (implemented)
-  - **Neovim IDE**: Full VS Code feature parity (Noice, Lualine, Gitsigns, Indent-Blankline).
-  - **Language support**: Optimized for Rust (Rustaceanvim) and Python (BasedPyright/Ruff).
-  - **Performance**: Lazy-loading architecture with `<30ms` startup.
-  - **CI/CD fixes**: Resolved CodeQL alerts (removed legacy Node.js) and fixed Docker builds.
-
-- **OS bundling and compliance**
-  - **Packaging**: `scripts/package.sh` generates versioned distribution tarballs.
-  - **Enterprise**: `/etc/dotfiles/defaults.d` hooks for site-local config overrides.
-  - **Standards**: Strict **XDG Base Directory** enforcement in `paths.sh`.
-
-- **The universal installer (zero-dep)**
-  - **Bootstrap**: `install.sh` runs through `curl | sh` with no dependencies.
-  - **Teleport**: `dot teleport user@host` deploys configs ephemerally through SSH.
-
-### Verification
-- **Performance**: Benchmark script `scripts/benchmark.sh` confirms <20ms startup.
-- **Integration**: `test-aliases.sh` validates syntax of all 32 alias modules.
-- **Security**: **Zero critical vulnerabilities** (CodeQL and Dependabot clean).
-- **Functionality**: Local migration tested on macOS, Linux, and WSL.
-
-
-### Install and migrate
-
-#### Option A: Fresh install (new machines)
-To set up a new machine, run the universal installer:
-```bash
-sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.480/install.sh)"
-```
-
-#### Option B: Migration (upgrade from earlier versions)
-
-> [!IMPORTANT]
-> This release changes the architecture from direct symlinks to `chezmoi` templates. Back up your configuration first.
-
-Existing `chezmoi` users can run `chezmoi apply` to upgrade, but the full installer works better for major version jumps.
-
-1. **Back up legacy configs**:
-   ```bash
-   mv ~/.zshrc ~/.zshrc.bak
-   mv ~/.config/nvim ~/.config/nvim.bak
-   ```
-2. **Run the installer**:
-   ```bash
-   sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.480/install.sh)"
-   ```
-3. **Resolve conflicts**:
-   - If `chezmoi` prompts you to overwrite files (for example, `.zshrc`), select **overwrite** (or diff to check) because this release uses a new sourcing strategy.
-4. **Restart shell**:
-   ```bash
-   exec zsh
-   ```

package/docs/SECRETS.md

@@ -1,76 +0,0 @@
-# Secrets
-
-You can encrypt secrets using `age` with `chezmoi`.
-
-## Get started
-
-```bash
-dot secrets-init
-```
-
-The command creates `~/.config/chezmoi/key.txt` and prints your public key. It also updates `~/.config/chezmoi/chezmoi.toml` with the `age` backend settings.
-
-> [!IMPORTANT]
-> Verify that `age` is installed before running this command. You can install it through `brew`, `apt`, or your preferred toolchain.
-
-## Enable encryption
-
-Edit `~/.config/chezmoi/chezmoi.toml` (local only):
-
-```toml
-encryption = "age"
-
-[age]
-identity = "~/.config/chezmoi/key.txt"
-recipient = "age1..."
-```
-
-You can also re-run:
-
-```bash
-chezmoi init --apply --promptDefaults
-```
-
-## Edit secrets
-
-```bash
-dot secrets
-```
-
-The command opens `~/.config/chezmoi/encrypted_secrets.age` for editing and applies changes when you save.
-
-## Create secrets
-
-```bash
-dot secrets-create
-```
-
-Then edit:
-
-```bash
-dot secrets
-```
-
-## Encrypt an SSH key
-
-```bash
-dot ssh-key ~/.ssh/id_ed25519
-```
-
-The command creates a local encrypted file at:
-`~/.config/chezmoi/encrypted_id_ed25519.age`
-
-If you want it tracked (encrypted) in your dotfiles, run:
-
-```bash
-chezmoi add --encrypt ~/.config/chezmoi/encrypted_id_ed25519.age
-```
-
-## Important notes
-
-> [!WARNING]
-> Keep `~/.config/chezmoi/key.txt` private. Never commit this file to a public repository.
-
-- You can share the public key freely for encrypting data.
-- Consider rotating keys yearly (or after any potential leak).
-  To rotate: generate a new key, update `chezmoi.toml`, re-encrypt your secrets, and delete the old key.

package/docs/SECURITY.md

@@ -1,30 +0,0 @@
-# Security
-
-Learn how Dotfiles handles security and system modifications.
-
-## Principles
-
-- **Opt-In Only**: No hardening is applied unless the `DOTFILES_` variables are set to `1`.
-- **Local Logging**: Actions are logged to `~/.local/share/dotfiles.log`. No telemetry.
-- **No Hidden Sudo**: Sudo is only requested for system managers (apt, etc) and never cached indefinitely.
-
-## Hardening
-
-| Feature | Env Var | Action (macOS) | Action (Linux) |
-|---|---|---|---|
-| Firewall | `DOTFILES_FIREWALL` | Enables `socketfilterfw` + Stealth Mode | Configures UFW |
-| Telemetry | `DOTFILES_TELEMETRY` | Disables Diagnostic plists | Disables `whoopsie`/`apport` |
-| DNS-over-HTTPS | `DOTFILES_DOH` | Browser-level settings | Configures `resolvectl` |
-| Idle Security | `DOTFILES_LOCK` | Sets screensaver idle time | Sets GNOME/KDE idle-delay |
-
-## Secrets
-
-Dotfiles uses **age** for encryption.
-
-- **Initialization**: `dot secrets-init` creates a key at `~/.config/chezmoi/key.txt`.
-- **Storage**: Secrets are stored as `.age` encrypted files.
-- **Protection**: Private keys are never committed to the repo.
-
-## Report an issue
-
-If you discover a security vulnerability, please do not open a public issue. Follow the instructions in the Security Policy.