@sebastienrousseau/dotfiles 0.2.499 → 0.2.501

package/docs/themes/hero-shot.svg

@@ -0,0 +1,78 @@
+<svg width="800" height="450" viewBox="0 0 800 450" xmlns="http://www.w3.org/2000/svg">
+  <!-- Background Shadow -->
+  <rect x="10" y="10" width="780" height="430" rx="12" fill="rgba(0,0,0,0.3)" filter="blur(10px)" />
+
+  <!-- Terminal Window -->
+  <rect x="20" y="20" width="760" height="410" rx="10" fill="#1e1e2e" stroke="#313244" stroke-width="1" />
+
+  <!-- Window Title Bar -->
+  <path d="M20 30 a10 10 0 0 1 10 -10 h740 a10 10 0 0 1 10 10 v20 h-760 z" fill="#181825" />
+
+  <!-- macOS Buttons -->
+  <circle cx="40" cy="35" r="6" fill="#f38ba8" />
+  <circle cx="60" cy="35" r="6" fill="#fab387" />
+  <circle cx="80" cy="35" r="6" fill="#a6e3a1" />
+
+  <!-- Title -->
+  <text x="400" y="38" font-family="JetBrains Mono, monospace" font-size="12" fill="#bac2de" text-anchor="middle">~/.dotfiles — zsh</text>
+
+  <!-- Mock Terminal Content -->
+  <g font-family="JetBrains Mono, monospace" font-size="13">
+    <!-- Prompt + command -->
+    <text x="40" y="75" fill="#a6e3a1">&#10148;</text>
+    <text x="60" y="75" fill="#cdd6f4">dot doctor</text>
+
+    <!-- Section: Dotfiles Core -->
+    <text x="40" y="105" fill="#89b4fa" font-weight="bold">Dotfiles Core</text>
+    <text x="40" y="125" fill="#a6e3a1">  &#10003; chezmoi</text>
+    <text x="220" y="125" fill="#585b70">2.47.1 (mise)</text>
+    <text x="40" y="145" fill="#a6e3a1">  &#10003; git</text>
+    <text x="220" y="145" fill="#585b70">2.49.0 (system)</text>
+    <text x="40" y="165" fill="#a6e3a1">  &#10003; age encryption</text>
+    <text x="220" y="165" fill="#585b70">key present</text>
+
+    <!-- Section: Shell Environment -->
+    <text x="40" y="195" fill="#89b4fa" font-weight="bold">Shell Environment</text>
+    <text x="40" y="215" fill="#a6e3a1">  &#10003; zsh</text>
+    <text x="220" y="215" fill="#585b70">5.9.0 (system)</text>
+    <text x="40" y="235" fill="#a6e3a1">  &#10003; starship</text>
+    <text x="220" y="235" fill="#585b70">1.22.1 (mise)</text>
+    <text x="40" y="255" fill="#a6e3a1">  &#10003; zoxide</text>
+    <text x="220" y="255" fill="#585b70">0.9.7 (mise)</text>
+
+    <!-- Section: CLI Tools -->
+    <text x="420" y="105" fill="#89b4fa" font-weight="bold">CLI Tools</text>
+    <text x="420" y="125" fill="#a6e3a1">  &#10003; rg (ripgrep)</text>
+    <text x="600" y="125" fill="#585b70">14.1.1</text>
+    <text x="420" y="145" fill="#a6e3a1">  &#10003; bat</text>
+    <text x="600" y="145" fill="#585b70">0.25.0</text>
+    <text x="420" y="165" fill="#a6e3a1">  &#10003; fzf</text>
+    <text x="600" y="165" fill="#585b70">0.60.3</text>
+
+    <!-- Section: Security -->
+    <text x="420" y="195" fill="#89b4fa" font-weight="bold">Security</text>
+    <text x="420" y="215" fill="#a6e3a1">  &#10003; SSH keys</text>
+    <text x="600" y="215" fill="#585b70">ed25519</text>
+    <text x="420" y="235" fill="#a6e3a1">  &#10003; GPG signing</text>
+    <text x="600" y="235" fill="#585b70">configured</text>
+    <text x="420" y="255" fill="#a6e3a1">  &#10003; secrets (age)</text>
+    <text x="600" y="255" fill="#585b70">encrypted</text>
+
+    <!-- Performance line -->
+    <text x="40" y="290" fill="#89b4fa" font-weight="bold">Performance</text>
+    <text x="40" y="310" fill="#a6e3a1">  &#10003; zsh startup</text>
+    <text x="220" y="310" fill="#585b70">12ms</text>
+
+    <!-- Score -->
+    <text x="40" y="350" fill="#a6e3a1" font-weight="bold">Score: 95/100 — Excellent</text>
+    <text x="40" y="370" fill="#585b70">18 passed, 0 errors, 1 warning</text>
+
+    <!-- New prompt -->
+    <text x="40" y="405" fill="#a6e3a1">&#10148;</text>
+    <text x="60" y="405" fill="#cdd6f4">~/.dotfiles</text>
+    <text x="170" y="405" fill="#f5c2e7">on master</text>
+    <rect x="275" y="393" width="8" height="16" fill="#cdd6f4">
+      <animate attributeName="opacity" values="1;0;1" dur="1s" repeatCount="indefinite" />
+    </rect>
+  </g>
+</svg>

package/dot_config/.module-manifest.json

@@ -0,0 +1,69 @@
+{
+  "$schema": "Module manifest for dot_config/ — logical grouping of flat directories",
+  "groups": {
+    "shell": {
+      "description": "Shell environments and startup",
+      "modules": ["shell", "zsh", "fish", "nushell"]
+    },
+    "terminal": {
+      "description": "Terminal emulators",
+      "modules": ["alacritty", "ghostty", "kitty", "wezterm"]
+    },
+    "editor": {
+      "description": "Text editors and IDEs",
+      "modules": ["nvim", "vscode", "micro", "nano"]
+    },
+    "git": {
+      "description": "Version control",
+      "modules": ["git", "lazygit", "gh"]
+    },
+    "container": {
+      "description": "Containers and orchestration",
+      "modules": ["docker", "containers", "lazydocker", "k9s", "minikube"]
+    },
+    "ai": {
+      "description": "AI tools and assistants",
+      "modules": ["ai", "aider", "claude", "goose"]
+    },
+    "languages": {
+      "description": "Language toolchains",
+      "modules": ["go", "pip", "pypoetry", "gem", "bun", "yarn", "dlv"]
+    },
+    "system": {
+      "description": "System monitoring and management",
+      "modules": ["btop", "htop", "fastfetch", "topgrade", "systemd", "ncdu", "duf"]
+    },
+    "security": {
+      "description": "Security and secrets",
+      "modules": ["gnupg", "sops"]
+    },
+    "network": {
+      "description": "Network and HTTP tools",
+      "modules": ["curl", "wget"]
+    },
+    "data": {
+      "description": "Databases and data tools",
+      "modules": ["redis", "mongosh", "mycli", "ipython"]
+    },
+    "tools": {
+      "description": "CLI utilities",
+      "modules": ["bat", "fzf", "yazi", "just", "mise", "task", "tmux", "pueue", "atuin", "emoji"]
+    },
+    "desktop": {
+      "description": "Desktop environment and appearance",
+      "modules": ["gtk-3.0", "gtk-4.0", "fontconfig", "flatpak", "zellij"]
+    },
+    "macos": {
+      "description": "macOS-specific modules",
+      "modules": ["karabiner", "mas", "duti", "raycast"]
+    },
+    "infra": {
+      "description": "Infrastructure and cloud",
+      "modules": ["ansible", "tflint"]
+    },
+    "dotfiles": {
+      "description": "Dotfiles internal config",
+      "modules": ["dotfiles"]
+    }
+  }
+}

package/dot_config/ai/identity.md

@@ -0,0 +1,23 @@
+# AI Identity & Preferences
+
+## Profile
+
+- **User**:
+- **Role**: Senior Software Engineer / Architect
+- **Expertise**: Rust, TypeScript, Go, DevOps (Nix, Kubernetes), Shell Scripting.
+
+## Coding Style
+
+- **Principles**: Clean code, SOLID, DRY, KISS.
+- **Preferences**:
+  - Prefer TypeScript over JavaScript.
+  - Prefer functional programming patterns where appropriate.
+  - Use Vitest or Jest for testing.
+  - Use Prettier and ESLint for formatting/linting.
+- **Documentation**: Use JSDoc/TSDoc for code and GitHub-flavored Markdown for docs.
+
+## Workspace Context
+
+- **Environment**: Linux (CachyOS/Arch), macOS.
+- **Shells**: Zsh (primary), Fish, Nushell, Bash.
+- **Dotfiles**: Managed by Chezmoi, optimized for performance and security.

package/dot_config/ai/patterns/architect.md

@@ -0,0 +1,16 @@
+# Identity: Dotfiles Architect
+
+You are an expert Shell Infrastructure Architect specializing in the 2026 developer stack.
+
+## Core Directives
+
+- **Subtlety**: Propose changes that integrate seamlessly without adding unnecessary complexity.
+- **Performance**: Prioritize shell startup speed and binary efficiency (e.g., _cached_eval).
+- **Architecture**: Adhere to the modular "rc.d" structure and XDG Base Directory standards.
+- **Tools**: Leverage Mise for runtimes, Nix for declarative environments, and Chezmoi for state management.
+
+## Environment Context
+
+- OS: Arch/CachyOS (optimized for x86-64-v4) or macOS.
+- Shells: Zsh (primary), Fish, Nushell, Bash.
+- Security: Age/SOPS for secrets, GPG signing enforced.

package/dot_config/ai/patterns/hardener.md

@@ -0,0 +1,15 @@
+# Identity: Shell Security Hardener
+
+You are a security engineer specializing in high-compliance Fintech environments and Post-Quantum Cryptography (PQC).
+
+## Core Directives
+
+- **Zero Trust**: Assume all external scripts are compromised until verified.
+- **Encryption**: Enforce Age/SOPS for all sensitive data.
+- **Compliance**: Adhere to 2026 security baselines (GPG signing, SSH certificate authorities).
+- **Privacy**: Disable all non-essential telemetry at the OS and application level.
+
+## Verification Logic
+
+- Every proposal must include a "Verification" step (e.g., dot verify --security).
+- Prioritize hardware enclave (TPM/Secure Enclave) integrations.

package/dot_config/ai/patterns/refactor.md

@@ -0,0 +1,15 @@
+# Identity: POSIX & Shell Optimizer
+
+You are an expert in shell script optimization and POSIX compliance.
+
+## Core Directives
+
+- **Portability**: Ensure scripts work across Zsh, Bash, and Dash unless specifically optimized for a feature shell (like Fish/Nushell).
+- **Indempotency**: Scripts must be safe to run multiple times without side effects.
+- **Linting**: Adhere to ShellCheck best practices and strict error handling (set -euo pipefail).
+- **Latency**: Minimize subshell calls and external binary forks.
+
+## Optimization Strategy
+
+- Use built-in shell features over external commands where possible.
+- Implement caching mechanisms for heavy computations.

package/dot_config/aider/aider.conf.yml

@@ -0,0 +1,32 @@
+# Aider configuration
+# https://aider.chat/docs/config/options.html
+
+# Model settings
+model: claude-opus-4-6
+edit-format: diff
+
+# Git settings
+auto-commits: true
+dirty-commits: false
+attribute-author: true
+attribute-commit-message: true
+
+# UI settings
+dark-mode: true
+pretty: true
+stream: true
+
+# Code settings
+auto-lint: true
+lint-cmd: "npm run lint"
+auto-test: false
+
+# File handling
+gitignore: true
+aiderignore: true
+
+# History
+restore-chat-history: true
+
+# Voice (if enabled)
+# voice-language: en

package/dot_config/alacritty/alacritty.toml.tmpl

@@ -0,0 +1,55 @@
+{{- $fontFamily := default "JetBrainsMono Nerd Font" .terminal_font_family -}}
+{{- $fontSize := default 12 .terminal_font_size -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
+{{- $tt := $t -}}
+{{- $themeName := default "big-sur-dark" .theme -}}
+{{- if hasSuffix "-light" $themeName -}}
+  {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
+  {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}
+{{- end }}
+[window]
+padding = { x = 16, y = 12 }
+opacity = {{ if eq .chezmoi.os "darwin" }}0.92{{ else }}0.96{{ end }}
+option_as_alt = {{ if eq .chezmoi.os "darwin" }}"Both"{{ else }}"None"{{ end }}
+
+[font]
+size = {{ $fontSize }}
+normal = { family = "{{ $fontFamily }}" }
+{{- if eq .chezmoi.os "darwin" }}
+offset = { x = 0, y = 1 }
+{{- else }}
+offset = { x = 0, y = 0 }
+{{- end }}
+
+[colors.primary]
+background = "{{ $tt.term.bg }}"
+foreground = "{{ $tt.term.fg }}"
+
+[colors.cursor]
+cursor = "{{ $tt.term.cursor }}"
+text = "{{ $tt.term.cursor_text }}"
+
+[colors.selection]
+background = "{{ $tt.term.sel_bg }}"
+text = "{{ $tt.term.sel_fg }}"
+
+[colors.normal]
+black = "{{ $tt.term.c0 }}"
+red = "{{ $tt.term.c1 }}"
+green = "{{ $tt.term.c2 }}"
+yellow = "{{ $tt.term.c3 }}"
+blue = "{{ $tt.term.c4 }}"
+magenta = "{{ $tt.term.c5 }}"
+cyan = "{{ $tt.term.c6 }}"
+white = "{{ $tt.term.c7 }}"
+
+[colors.bright]
+black = "{{ $tt.term.c8 }}"
+red = "{{ $tt.term.c9 }}"
+green = "{{ $tt.term.c10 }}"
+yellow = "{{ $tt.term.c11 }}"
+blue = "{{ $tt.term.c12 }}"
+magenta = "{{ $tt.term.c13 }}"
+cyan = "{{ $tt.term.c14 }}"
+white = "{{ $tt.term.c15 }}"

package/dot_config/ansible/ansible.cfg

@@ -0,0 +1,11 @@
+[defaults]
+inventory = ./inventory
+retry_files_enabled = False
+host_key_checking = False
+stdout_callback = yaml
+nocows = 1
+
+[privilege_escalation]
+become = True
+become_method = sudo
+become_ask_pass = False

package/dot_config/atuin/config.toml.tmpl

@@ -0,0 +1,47 @@
+# Atuin Configuration (~/.config/atuin/config.toml)
+# https://atuin.sh/docs/config
+#
+# This file is templated by chezmoi. The `history_filter` block is sourced
+# from `.chezmoidata/secrets-patterns.toml` (see #872) so the same audited
+# defaults ship to every machine, with per-host extension via
+# `~/.config/chezmoi/chezmoi.toml` → `[data.atuin.history_filter] extra = [...]`.
+
+# Core
+update_check = false
+db_path = "~/.local/share/atuin/history.db"
+key_path = "~/.local/share/atuin/key"
+session_path = "~/.local/share/atuin/session"
+
+# Sync
+auto_sync = true
+sync_frequency = "10m"
+sync_address = "https://api.atuin.sh"
+
+# UI
+style = "compact"
+inline_height = 20
+show_preview = true
+enter_accept = true
+
+# Search
+search_mode = "fuzzy"
+filter_mode = "global"
+workspaces = true
+
+# Privacy: skip commands that may contain secrets.
+# Defaults come from .chezmoidata/secrets-patterns.toml; the `extra` slot
+# in chezmoi.toml allows per-host extension without editing this template.
+history_filter = [
+{{- range .atuin.history_filter.defaults }}
+  {{ . | quote }},
+{{- end }}
+{{- with .atuin.history_filter.extra }}
+{{- range . }}
+  {{ . | quote }},
+{{- end }}
+{{- end }}
+]
+
+# Skip ephemeral directories
+secrets_filter = true
+network_timeout = 30

package/dot_config/bat/config

@@ -0,0 +1,23 @@
+# Bat configuration (dotfiles)
+# See: https://github.com/sharkdp/bat
+
+# Theme
+--theme="TwoDark"
+
+# Style
+--style="numbers,changes,header,grid"
+
+# Paging
+--paging=auto
+--pager="less -FR"
+
+# Formatting
+--tabs=2
+--italic-text=always
+
+# Syntax mappings
+--map-syntax "*.conf:INI"
+--map-syntax ".gitignore:Git Ignore"
+--map-syntax "*.tmpl:Go HTML Template"
+--map-syntax "*.kdl:KDL"
+--map-syntax ".envrc:Bash"

package/dot_config/brave-flags.conf.tmpl

@@ -0,0 +1,7 @@
+{{- if eq .chezmoi.os "linux" -}}
+--enable-gpu-rasterization
+--enable-zero-copy
+--enable-features=VaapiVideoDecodeLinuxGL,VaapiVideoEncoder,CanvasOopRasterization
+--disable-features=UseChromeOSDirectVideoDecoder
+--max-old-space-size=4096
+{{- end -}}

package/dot_config/btop/btop.conf

@@ -0,0 +1,16 @@
+# btop configuration
+# Theme files live in ~/.config/btop/themes/
+color_theme = "tokyonight"
+
+# Basic UI preferences
+update_ms = 2000
+proc_sorting = "cpu lazy"
+proc_gradient = true
+net_auto = true
+
+# Hide top-level header when on small screens
+show_cpu_freq = true
+show_gpu_info = false
+
+# Enable mouse support
+mouse = true

package/dot_config/btop/themes/tokyonight.theme

@@ -0,0 +1,34 @@
+# Tokyonight (Night) theme for btop
+# Based on Tokyo Night palette
+
+# Main background
+bg = "#1a1b26"
+# Main text
+fg = "#c0caf5"
+
+# Titles and boxes
+title = "#7aa2f7"
+hi_fg = "#bb9af7"
+
+# Graphs
+selected_bg = "#24283b"
+selected_fg = "#c0caf5"
+
+# CPU
+cpu_box = "#7aa2f7"
+mem_box = "#9ece6a"
+net_box = "#7dcfff"
+proc_box = "#e0af68"
+
+# Graph colors
+cpu_graph = "#7aa2f7"
+mem_graph = "#9ece6a"
+net_graph = "#7dcfff"
+proc_graph = "#e0af68"
+
+# Status
+available = "#9ece6a"
+used = "#e0af68"
+free = "#7dcfff"
+warning = "#e0af68"
+critical = "#f7768e"

package/dot_config/bun/bunfig.toml.tmpl

@@ -0,0 +1,33 @@
+# Bun configuration
+# Managed by chezmoi - edit source at ~/.dotfiles/dot_config/bun/bunfig.toml.tmpl
+# Documentation: https://bun.sh/docs/runtime/bunfig
+
+[install]
+# Use a shared global cache
+globalBinDir = "{{ .chezmoi.homeDir }}/.bun/bin"
+
+# Prefer offline mode when possible
+prefer = "offline"
+
+# Auto-install peer dependencies
+peer = true
+
+# Registry (default)
+registry = "https://registry.npmjs.org/"
+
+# Scoped registries (uncomment and configure as needed)
+# [install.scopes]
+# "@mycompany" = { token = "$NPM_TOKEN", url = "https://npm.mycompany.com/" }
+
+[run]
+# Silence the bun install/update messages during bun run
+silent = false
+
+[test]
+# Test configuration
+coverage = false
+coverageDir = "coverage"
+
+[telemetry]
+# Disable telemetry
+enabled = false

package/dot_config/claude/mcp_servers.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://raw.githubusercontent.com/anthropics/claude-code/main/schemas/mcp-servers.json",
+  "mcpServers": {
+    "git": {
+      "command": "npx",
+      "args": ["-y", "mcp-server-git@2026.3.0"],
+      "env": {}
+    },
+    "memory": {
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-memory@2026.3.0"],
+      "env": {}
+    },
+    "sqlite": {
+      "command": "npx",
+      "args": ["-y", "mcp-server-sqlite@2026.3.0"],
+      "env": {}
+    }
+  }
+}

package/dot_config/containers/containers.conf

@@ -0,0 +1,14 @@
+# Podman/containers defaults
+[containers]
+netns = ""
+ipcns = ""
+utsns = ""
+
+[engine]
+# Use systemd cgroup driver when available
+cgroup_manager = "systemd"
+# Reduce noisy output
+events_logger = "journald"
+
+[network]
+# Default subnet and gateway can be overridden per user

package/dot_config/curl/dot_curlrc

@@ -0,0 +1,18 @@
+# cURL Configuration
+-w "\n"
+--anyauth
+--continue-at -
+--connect-timeout 60
+--compressed
+--ipv4
+--location
+--progress-bar
+--remote-time
+--referer ";auto"
+--show-error
+--ssl-reqd
+--trace-time
+--user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Edg/105.0.1343.53"
+-H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
+-H "Upgrade-Insecure-Requests: 1"
+-H "Accept-Language: en-US,en;q=0.8"

package/dot_config/dlv/config.yml

@@ -0,0 +1,39 @@
+# Delve debugger configuration
+# https://github.com/go-delve/delve/blob/master/Documentation/cli/README.md
+
+# Aliases for common commands
+aliases:
+  # Navigation
+  ll: "list"
+  bt: "stack"
+  # Breakpoints
+  bp: "breakpoints"
+  # Variables
+  lv: "locals"
+  av: "args"
+  # Execution
+  c: "continue"
+  n: "next"
+  s: "step"
+  so: "stepout"
+  # Info
+  gs: "goroutines"
+  gt: "goroutine"
+
+# Source list settings
+source-list-line-color: 34
+source-list-arrow-color: 33
+source-list-keyword-color: 31
+
+# Substitute source paths (useful for remote debugging)
+# substitute-path:
+#   - {from: "/build/path", to: "/local/path"}
+
+# Max string length to display
+max-string-len: 256
+
+# Max array values to display
+max-array-values: 128
+
+# Show goroutine current location
+show-location-expr: true

package/dot_config/docker/config.json

@@ -0,0 +1,15 @@
+{
+  "auths": {},
+  "credsStore": "",
+  "credHelpers": {},
+  "detachKeys": "ctrl-@",
+  "experimental": "disabled",
+  "plugins": {},
+  "proxies": {
+    "default": {
+      "httpProxy": "",
+      "httpsProxy": "",
+      "noProxy": ""
+    }
+  }
+}

package/dot_config/dotfiles/agent-card.json

@@ -0,0 +1,29 @@
+{
+  "specVersion": "0.3",
+  "name": "dotfiles-agent",
+  "version": "0.2.501",
+  "description": "Trusted workstation agent surface for local shell automation.",
+  "defaultProfile": "ask",
+  "protocols": ["mcp", "a2a"],
+  "platforms": ["macOS", "Linux", "WSL", "PowerShell"],
+  "entrypoints": {
+    "cli": "dot",
+    "mode": "dot mode",
+    "attestation": "dot attest --json",
+    "mcp": "dot mcp --strict --json",
+    "conformance": "dot agent conformance --strict --json",
+    "checkpoint": "dot agent checkpoint list",
+    "a2aCard": "dot agent a2a-card --json"
+  },
+  "profiles": ["ask", "plan", "apply", "audit"],
+  "security": {
+    "signedCommits": true,
+    "mcpRegistry": true,
+    "sessionLogging": true,
+    "workstationAttestation": true,
+    "replayableCheckpoints": true,
+    "fleetAttestationExport": true,
+    "policyBundleReleases": true,
+    "cardSigning": "ssh-ed25519"
+  }
+}