@sebastienrousseau/dotfiles 0.2.499 → 0.2.500

package/dot_local/share/zsh/completions/_dot

@@ -0,0 +1,283 @@
+#compdef dot
+
+# Zsh completion for the dot CLI (dotfiles manager)
+# Installed to: ~/.local/share/zsh/completions/_dot
+
+_dot() {
+  local -a commands
+
+  commands=(
+    # Core
+    'apply:Apply dotfiles via chezmoi'
+    'sync:Apply dotfiles (alias of apply)'
+    'update:Pull latest changes and apply them'
+    'clean-cache:Clear shell initialization caches'
+    'prewarm:Regenerate shell caches for ultra-fast startup'
+    'cl:Claude CLI with context patterns'
+    'copilot:GitHub Copilot CLI with context patterns'
+    'gemini:Gemini CLI with context patterns'
+    'kiro:Kiro CLI with context patterns'
+    'sgpt:Shell-GPT with context patterns'
+    'ollama:Ollama with context patterns'
+    'opencode:OpenCode with context patterns'
+    'aider:Aider with context patterns'
+    'add:Add a file to chezmoi source'
+    'diff:Show chezmoi diff with exclusions'
+    'status:Show configuration drift'
+    'remove:Safely remove a managed file'
+    'cd:Print source directory path'
+    'edit:Open chezmoi source in \$EDITOR'
+    'commit:AI-powered conventional commit'
+    'patterns:Manage AI steering patterns'
+
+    # Diagnostics
+    'doctor:Check system health and configuration'
+    'heal:Auto-repair common dotfiles issues'
+    'health:Run comprehensive health check'
+    'smoke-test:Run automated toolchain verification'
+    'chaos:Simulate config corruption to test self-healing'
+    'scorecard:Unified health/security/performance scorecard'
+    'security-score:Analyze infrastructure security score'
+    'intelligence:Show Dotfiles Intelligence Surface'
+    'rollback:Rollback dotfiles to a previous state'
+    'drift:Drift dashboard (detailed chezmoi status)'
+    'history:Shell history analysis'
+    'benchmark:Run shell startup benchmark'
+    'perf:Show performance mode and timing'
+    'load:Preload heavy shell layers'
+    'load-bench:Measure time to heavy-layer readiness'
+    'load-bench-pty:Measure background prewarm via PTY'
+    'ai:Show AI helper status'
+    'ai-setup:Interactive setup for all AI CLI tools'
+    'ai-query:Context-aware RAG query over your dotfiles'
+    'conflicts:Report alias/command conflicts'
+    'locks:Show version locks for key tools'
+    'snapshot:Capture baseline system snapshot'
+    'verify:Run post-merge verification checks'
+
+    # Tools
+    'tools:Show or install nix packages'
+    'new:Create a new project from a template'
+    'sandbox:Launch a safe sandbox preview'
+    'keys:Show keybindings catalog'
+    'aliases:List/search/explain aliases and tiers'
+    'learn:Start the interactive tour'
+    'docs:Show repo README'
+    'log-rotate:Rotate dotfiles log'
+    'setup:Interactive setup (profile, features, secrets)'
+
+    # Appearance
+    'theme:Switch terminal theme'
+    'wallpaper:Apply a wallpaper'
+    'fonts:Install Nerd Fonts'
+    'tune:Apply OS tuning'
+
+    # Secrets
+    'secrets-init:Initialize age key for secrets'
+    'secrets:Manage secrets (edit|set|get|list|load|provider)'
+    'secrets-create:Create an encrypted secrets file'
+    'ssh-key:Encrypt an SSH key with age'
+    'ssh-cert:Manage short-lived SSH certificates'
+    'env:Load environment buckets from managed secrets'
+
+    # Security
+    'backup:Create a compressed backup of home'
+    'bundle:Create offline archive of dotfiles environment'
+    'encrypt-check:Check disk encryption status'
+    'firewall:Apply firewall hardening'
+    'telemetry:Disable OS telemetry'
+    'dns-doh:Enable DNS-over-HTTPS'
+    'lock-screen:Enforce lock screen idle settings'
+    'usb-safety:Disable automount for removable media'
+
+    # Meta
+    'upgrade:Update flake, plugins, and dotfiles'
+    'packages:List installed packages'
+    'version:Show version information'
+    '--version:Show version information'
+    'help:Show help message'
+  )
+
+  _arguments -C \
+    '1:command:->cmds' \
+    '*::arg:->args'
+
+  case "$state" in
+    cmds)
+      _describe -t commands 'dot command' commands
+      ;;
+    args)
+      case "$words[1]" in
+        new)
+          if ((CURRENT == 2)); then
+            local -a templates=(python go node packer molecule)
+            _describe -t templates 'project template' templates
+          else
+            _files
+          fi
+          ;;
+        add | remove)
+          _files
+          ;;
+        keys)
+          _message 'search pattern (optional)'
+          ;;
+        perf)
+          local -a perf_opts=(
+            '--json:Output as JSON'
+            '-j:Output as JSON'
+            '--profile:Include profile output'
+            '-p:Include profile output'
+            '--runs:Set the number of runs'
+            '-r:Set the number of runs'
+            '--target:Set the timing target in milliseconds'
+            '-t:Set the timing target in milliseconds'
+          )
+          _describe -t options 'perf option' perf_opts
+          ;;
+        doctor)
+          local -a doctor_opts=(
+            '--heal:Auto-repair common issues'
+            '-H:Auto-repair common issues'
+            '--score:Show score output'
+            '-s:Show score output'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+            '--ai:Include AI diagnostics'
+            '-A:Include AI diagnostics'
+          )
+          _describe -t options 'doctor option' doctor_opts
+          ;;
+        attest)
+          local -a attest_opts=(
+            '--json:Emit JSON output'
+            '-j:Emit JSON output'
+            '--write:Write attestation to a file'
+            '-w:Write attestation to a file'
+          )
+          _describe -t options 'attest option' attest_opts
+          ;;
+        lint)
+          local -a lint_opts=(
+            '--check:Run check-only mode'
+            '-c:Run check-only mode'
+            '--fix:Apply safe fixes'
+            '-f:Apply safe fixes'
+          )
+          _describe -t options 'lint option' lint_opts
+          ;;
+        mcp)
+          local -a mcp_opts=(
+            'registry:Show the MCP registry'
+            '--strict:Treat policy warnings as errors'
+            '-s:Treat policy warnings as errors'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+          )
+          _describe -t options 'mcp option' mcp_opts
+          ;;
+        health)
+          local -a health_opts=(
+            '--verbose:Show detailed checks'
+            '-v:Show detailed checks'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+            '--fix:Apply common fixes'
+            '-f:Apply common fixes'
+            '--force:Apply fixes without prompts'
+            '-F:Apply fixes without prompts'
+          )
+          _describe -t options 'health option' health_opts
+          ;;
+        security-score)
+          local -a security_opts=(
+            '--verbose:Show detailed scoring'
+            '-v:Show detailed scoring'
+            '--quiet:Reduce output noise'
+            '-q:Reduce output noise'
+            '--json:Emit JSON summary'
+            '-j:Emit JSON summary'
+          )
+          _describe -t options 'security-score option' security_opts
+          ;;
+        snapshot)
+          local -a snapshot_opts=(
+            '--baseline:Capture the baseline snapshot'
+            '-b:Capture the baseline snapshot'
+            '--force:Overwrite an existing snapshot'
+            '-f:Overwrite an existing snapshot'
+          )
+          _describe -t options 'snapshot option' snapshot_opts
+          ;;
+        verify)
+          local -a verify_opts=(
+            '--security:Run security verification'
+            '-s:Run security verification'
+          )
+          _describe -t options 'verify option' verify_opts
+          ;;
+        restore)
+          local -a restore_opts=(
+            '--list:List available backups'
+            '-l:List available backups'
+            '--latest:Restore the latest backup'
+            '-L:Restore the latest backup'
+            '--git:Restore from a git ref'
+            '-g:Restore from a git ref'
+            '--diff:Show a diff for a git ref'
+            '-d:Show a diff for a git ref'
+            '--dry-run:Preview the restore'
+            '-n:Preview the restore'
+          )
+          _describe -t options 'restore option' restore_opts
+          ;;
+        load)
+          local -a load_opts=('--background:Load in background' '--status:Show load status')
+          _describe -t options 'load option' load_opts
+          ;;
+        tools)
+          local -a tool_cmds=('install:Enter Nix development shell')
+          _describe -t subcommands 'tools subcommand' tool_cmds
+          ;;
+        theme)
+          local -a themes=(dark light)
+          _describe -t themes 'theme mode' themes
+          ;;
+        ssh-cert)
+          local -a cert_cmds=(
+            'issue:Request a short-lived SSH certificate'
+            'status:Show current certificate status'
+            'revoke:Revoke an active certificate'
+          )
+          _describe -t subcommands 'ssh-cert subcommand' cert_cmds
+          ;;
+        secrets)
+          local -a secrets_cmds=(
+            'edit:Edit encrypted secrets'
+            'set:Set a secret value'
+            'get:Get a secret value'
+            'list:List secret keys'
+            'load:Load secrets into environment'
+            'provider:Show/switch secrets provider'
+          )
+          _describe -t subcommands 'secrets subcommand' secrets_cmds
+          ;;
+        cl | copilot | gemini | kiro | sgpt | ollama | opencode | aider)
+          _arguments -C \
+            '(--pattern -p)'{--pattern,-p}'[Specify steering pattern]:pattern:->patterns' \
+            '*:prompt: '
+          if [[ "$state" == "patterns" ]]; then
+            local -a patterns
+            patterns=($(ls -1 "${XDG_CONFIG_HOME:-$HOME/.config}/ai/patterns" 2>/dev/null | sed 's/\.md$//'))
+            _describe -t patterns 'AI pattern' patterns
+          fi
+          ;;
+        *)
+          _default
+          ;;
+      esac
+      ;;
+  esac
+}
+
+_dot "$@"

package/install.sh

@@ -0,0 +1,342 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Universal Dotfiles Installer (Zero-Dependency)
+# Usage: bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/master/install.sh)"
+# (or ./install.sh locally)
+
+set -euo pipefail
+
+# ANSI Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+BLUE='\033[0;34m'
+CYAN='\033[0;36m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+# Paths
+SOURCE_DIR="${SOURCE_DIR:-$HOME/.dotfiles}"
+LEGACY_SOURCE_DIR="$HOME/.local/share/chezmoi"
+CHEZMOI_CONFIG_DIR="$HOME/.config/chezmoi"
+CHEZMOI_CONFIG_FILE="$CHEZMOI_CONFIG_DIR/chezmoi.toml"
+
+# Utility Functions
+step() {
+  if [[ "${DOTFILES_SILENT:-0}" != "1" ]]; then
+    printf '%b\n' "${BOLD}${BLUE}==>${NC} ${BOLD}$1${NC}"
+  fi
+}
+
+error() {
+  printf '%b\n' "${RED}Error:${NC} $1" >&2
+  exit 1
+}
+
+success() {
+  if [[ "${DOTFILES_SILENT:-0}" != "1" ]]; then
+    printf '%b\n' "${GREEN}Success!${NC} $1"
+  fi
+}
+
+# Cross-platform sed in-place (BSD vs GNU)
+sed_in_place() {
+  if sed --version >/dev/null 2>&1; then
+    sed -i "$@" # GNU
+  else
+    sed -i '' "$@" # BSD (macOS)
+  fi
+}
+
+show_help() {
+  cat <<EOF
+Usage: install.sh [version] [options]
+
+Arguments:
+  version       The version (tag or branch) to install (default: v0.2.500)
+
+Options:
+  --help        Show this help message
+  --force       Non-interactive mode (sets DOTFILES_NONINTERACTIVE=1)
+  --silent      Quiet mode (sets DOTFILES_SILENT=1)
+  --minimal     Minimal profile (disable nvim, tmux, zellij)
+
+EOF
+}
+
+main() {
+  local version="v0.2.500"
+  local version_set=0
+  local minimal=0
+  local _cleanup_files=()
+  trap 'set +u; rm -f "${_cleanup_files[@]}" 2>/dev/null; set -u' EXIT
+
+  for arg in "$@"; do
+    case "$arg" in
+      --help)
+        show_help
+        exit 0
+        ;;
+      --silent) export DOTFILES_SILENT=1 ;;
+      --force) export DOTFILES_NONINTERACTIVE=1 ;;
+      --minimal) minimal=1 ;;
+      --*)
+        error "Unknown option: $arg"
+        ;;
+      *)
+        if [[ $version_set -eq 1 ]]; then
+          error "Multiple versions specified: $version and $arg"
+        fi
+        version="$arg"
+        version_set=1
+        ;;
+    esac
+  done
+
+  # 2. Check Prerequisites & Bootstrap Package Managers
+  step "Checking Prerequisites..."
+
+  # Detect Operating System
+  OS="$(uname -s)"
+  case "$OS" in
+    Darwin) target_os="macos" ;;
+    Linux)
+      if grep -qi microsoft /proc/version 2>/dev/null; then
+        target_os="wsl2"
+      elif [ -f /etc/debian_version ]; then
+        target_os="debian"
+      elif [ -f /etc/fedora-release ]; then
+        target_os="fedora"
+      elif [ -f /etc/arch-release ]; then
+        target_os="arch"
+      else
+        target_os="linux"
+      fi
+      ;;
+    *) target_os="unknown" ;;
+  esac
+
+  # Bootstrap gum for a better UI if available or install it
+  bootstrap_gum() {
+    if command -v gum >/dev/null 2>&1; then return 0; fi
+    if [[ "${DOTFILES_SILENT:-0}" == "1" ]]; then return 0; fi
+
+    echo "   Bootstrapping UI components (gum)..."
+    if [[ "$OS" == "Darwin" ]] && command -v brew >/dev/null; then
+      brew install gum >/dev/null 2>&1
+    elif [[ "$target_os" == "debian" || "$target_os" == "wsl2" ]]; then
+      sudo mkdir -p /etc/apt/keyrings
+      curl -fsSL https://repo.charm.sh/apt/gpg.key |
+        sudo gpg --batch --yes --dearmor -o /etc/apt/keyrings/charm.gpg
+      # Verify Charm GPG key fingerprint
+      if ! gpg --no-default-keyring --keyring /etc/apt/keyrings/charm.gpg \
+        --list-keys --with-colons 2>/dev/null | grep -q "fid:"; then
+        echo "Warning: Could not verify Charm GPG key" >&2
+      fi
+      echo "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *" | sudo tee /etc/apt/sources.list.d/charm.list
+      sudo apt-get update && sudo apt-get install gum -y >/dev/null 2>&1
+    fi
+  }
+
+  # 3. Install Chezmoi (in parallel with other checks where possible)
+  install_chezmoi() {
+    if command -v chezmoi >/dev/null; then
+      echo "   chezmoi already installed: $(chezmoi --version)"
+      return 0
+    fi
+
+    if command -v brew >/dev/null; then
+      echo "   Installing chezmoi via Homebrew..."
+      brew install chezmoi >/dev/null 2>&1
+    else
+      bin_dir="$HOME/.local/bin"
+      mkdir -p "$bin_dir"
+      echo "   Installing chezmoi via binary download..."
+
+      # Prefer verified installer with SHA256 checksum when available
+      local verified_installer
+      verified_installer="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/scripts/ci/install-chezmoi-verified.sh"
+      if [[ -x "$verified_installer" ]] || [[ -f "$verified_installer" ]]; then
+        echo "   Using checksum-verified installer..."
+        if ! bash "$verified_installer" "${CHEZMOI_VERSION:-2.47.1}" "$bin_dir"; then
+          echo "   Verified installer failed, falling back to get.chezmoi.io" >&2
+        else
+          return 0
+        fi
+      fi
+
+      # Fallback: download installer with size/shebang validation
+      local installer
+      installer=$(umask 077 && mktemp)
+      if ! curl -fsSL -o "$installer" https://get.chezmoi.io; then
+        rm -f "$installer"
+        echo "   Failed to download chezmoi installer" >&2
+        return 1
+      fi
+      # Validate: must be a shell script and not suspiciously large
+      if [[ "$(wc -c <"$installer")" -gt 102400 ]]; then
+        rm -f "$installer"
+        echo "   Chezmoi installer suspiciously large. Aborting." >&2
+        return 1
+      fi
+      if ! head -1 "$installer" | grep -q '^#!/'; then
+        rm -f "$installer"
+        echo "   Chezmoi installer doesn't look like a shell script. Aborting." >&2
+        return 1
+      fi
+      if ! BINDIR="$bin_dir" sh "$installer"; then
+        rm -f "$installer"
+        echo "   chezmoi binary installer failed" >&2
+        return 1
+      fi
+      rm -f "$installer"
+    fi
+  }
+
+  # Parallel execution of bootstrapping components
+  local pid_gum pid_cm
+  (bootstrap_gum) &
+  pid_gum=$!
+  (install_chezmoi) &
+  pid_cm=$!
+
+  # Wait and check exit codes
+  wait "$pid_gum" || true # gum is optional
+  wait "$pid_cm" || error "chezmoi installation failed"
+
+  # Critical: Add to PATH for the rest of the script to see it
+  bin_dir="$HOME/.local/bin"
+  export PATH="$bin_dir:$PATH"
+
+  # 4. Prepare source directory
+  step "Preparing source directory..."
+
+  # VERSION pinning for supply-chain security
+  VERSION="$version"
+
+  ensure_chezmoi_source() {
+    local dir="$1"
+    mkdir -p "$CHEZMOI_CONFIG_DIR"
+    # Escape sed metacharacters in replacement string
+    local escaped_dir
+    escaped_dir=$(printf '%s\n' "$dir" | sed -e 's/[\/&]/\\&/g')
+    if [[ -f "$CHEZMOI_CONFIG_FILE" ]] && grep -q '^sourceDir' "$CHEZMOI_CONFIG_FILE"; then
+      sed_in_place "s,^sourceDir.*$,sourceDir = \"$escaped_dir\"," "$CHEZMOI_CONFIG_FILE"
+    else
+      printf 'sourceDir = "%s"\n' "$dir" >"$CHEZMOI_CONFIG_FILE"
+    fi
+  }
+
+  apply_minimal_profile_overrides() {
+    local data_file="$1"
+    [[ -f "$data_file" ]] || return 0
+    sed_in_place 's/^profile = ".*"/profile = "minimal"/' "$data_file"
+    sed_in_place 's/^nvim = true/nvim = false/' "$data_file"
+    sed_in_place 's/^tmux = true/tmux = false/' "$data_file"
+    sed_in_place 's/^zellij = true/zellij = false/' "$data_file"
+  }
+
+  # 5. Backup existing dotfiles that chezmoi will overwrite
+  step "Backing up existing dotfiles..."
+  BACKUP_DIR="$HOME/.dotfiles.bak.$(date +"%Y%m%d_%H%M%S")"
+  backup_count=0
+
+  # Determine the source directory for chezmoi to diff against
+  if [[ -d "$SOURCE_DIR/.git" ]]; then
+    ensure_chezmoi_source "$SOURCE_DIR"
+  elif [[ -d "$LEGACY_SOURCE_DIR/.git" ]]; then
+    ensure_chezmoi_source "$LEGACY_SOURCE_DIR"
+  fi
+
+  # Back up any existing files that chezmoi would overwrite
+  if command -v chezmoi >/dev/null && [[ -f "$CHEZMOI_CONFIG_FILE" ]]; then
+    while IFS= read -r file; do
+      [[ -z "$file" ]] && continue
+      if [[ -e "$file" ]]; then
+        rel="${file#"$HOME"/}"
+        mkdir -p "$BACKUP_DIR/$(dirname "$rel")"
+        cp -a "$file" "$BACKUP_DIR/$rel"
+        backup_count=$((backup_count + 1))
+      fi
+    done < <(chezmoi managed --path-style=absolute 2>/dev/null || true)
+  fi
+
+  if [[ "$backup_count" -gt 0 ]]; then
+    echo "   Backed up $backup_count files to $BACKUP_DIR"
+  else
+    echo "   No existing dotfiles to back up."
+    rm -rf "$BACKUP_DIR" 2>/dev/null || true
+  fi
+
+  # Detect devcontainer/Codespaces environment
+  if [[ -f /.dockerenv ]] || [[ -n "${CODESPACES:-}" ]] || [[ -n "${REMOTE_CONTAINERS:-}" ]]; then
+    DOTFILES_MINIMAL=1
+    step "Detected container environment — using minimal profile"
+  fi
+
+  # Apply --minimal overrides if requested
+  if [[ $minimal -eq 1 ]] || [[ "${DOTFILES_MINIMAL:-0}" = "1" ]]; then
+    step "Applying minimal profile overrides..."
+    apply_minimal_profile_overrides "$SOURCE_DIR/.chezmoidata.toml"
+  fi
+
+  # 6. Initialize & Apply
+  step "Applying Configuration..."
+
+  # If we are running from a local source, just apply
+  if [[ -d "$SOURCE_DIR/.git" ]]; then
+    echo "   Applying from local source: $SOURCE_DIR"
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  elif [[ -d "$LEGACY_SOURCE_DIR/.git" ]]; then
+    echo "   Migrating from legacy source: $LEGACY_SOURCE_DIR"
+    mv "$LEGACY_SOURCE_DIR" "$SOURCE_DIR"
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  else
+    echo "   Initializing from GitHub (Branch/Tag: $VERSION)..."
+    printf '%b\n' "${CYAN}   SECURITY NOTE: Cloning pinned version $VERSION for supply-chain safety${NC}"
+
+    # STRICT MODE: We pin to the specific tag to avoid 'main' branch drift
+    git clone --depth 1 --branch "$VERSION" https://github.com/sebastienrousseau/dotfiles.git "$SOURCE_DIR" 2>/dev/null ||
+      { git clone https://github.com/sebastienrousseau/dotfiles.git "$SOURCE_DIR" && (cd "$SOURCE_DIR" && git checkout "$VERSION"); }
+
+    # Verify the checkout succeeded and we're on the expected version
+    ACTUAL_REF=$(
+      cd "$SOURCE_DIR" || exit 1
+      if ! git describe --tags --exact-match 2>/dev/null; then
+        git rev-parse --short HEAD
+      fi
+    )
+    if [[ "$ACTUAL_REF" != "$VERSION" ]] && [[ "${ACTUAL_REF#v}" != "${VERSION#v}" ]]; then
+      printf '%b\n' "${RED}   WARNING: Checked out ref $ACTUAL_REF (requested: $VERSION) — version mismatch${NC}" >&2
+    fi
+
+    if [[ $minimal -eq 1 ]]; then
+      step "Applying minimal profile overrides..."
+      apply_minimal_profile_overrides "$SOURCE_DIR/.chezmoidata.toml"
+    fi
+
+    ensure_chezmoi_source "$SOURCE_DIR"
+    APPLY_FLAGS=()
+    if [[ "${DOTFILES_NONINTERACTIVE:-0}" = "1" ]]; then
+      APPLY_FLAGS=(--force --no-tty)
+    fi
+    chezmoi apply "${APPLY_FLAGS[@]}"
+  fi
+
+  success "Configuration loaded. Please restart your shell."
+  step "Run 'dot learn' for an interactive tour of your new dotfiles."
+}
+
+# Run main if executed directly (or via bash -c where BASH_SOURCE is unset)
+if [[ "${BASH_SOURCE[0]:-}" == "${0:-}" ]] || [[ -z "${BASH_SOURCE[0]:-}" ]]; then
+  main "$@"
+fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebastienrousseau/dotfiles",
-  "version": "0.2.499",
+  "version": "0.2.500",
   "description": "The Trusted Shell Platform — Universal dotfiles managed by Chezmoi. Features Bash & Zsh for macOS, Linux & WSL. Rust modern tooling & enterprise-grade security.",
   "main": "install.sh",
   "bin": {