@sebastienrousseau/dotfiles 0.2.499 → 0.2.501

package/scripts/demo/record.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+set -euo pipefail
+
+OUT="${1:-$HOME/.dotfiles/docs/demo/demo.gif}"
+DURATION="${DURATION:-30}"
+FPS="${FPS:-15}"
+
+record_ffmpeg() {
+  if command -v ffmpeg >/dev/null; then
+    echo "Recording with ffmpeg for ${DURATION}s..."
+    if [ "$(uname -s)" = "Darwin" ]; then
+      # macOS (AVFoundation)
+      ffmpeg -y -t "$DURATION" -f avfoundation -i "1:none" -vf "fps=$FPS,scale=1024:-1:flags=lanczos" "$OUT"
+    else
+      # Linux (X11)
+      ffmpeg -y -t "$DURATION" -f x11grab -i :0.0 -vf "fps=$FPS,scale=1024:-1:flags=lanczos" "$OUT"
+    fi
+  else
+    echo "ffmpeg not found. Install it and retry."
+    exit 1
+  fi
+}
+
+record_wf_recorder() {
+  if command -v wf-recorder >/dev/null; then
+    echo "Recording with wf-recorder for ${DURATION}s..."
+    wf-recorder -f "$OUT" -t "$DURATION"
+  else
+    return 1
+  fi
+}
+
+if [ "$(uname -s)" = "Linux" ]; then
+  if record_wf_recorder; then
+    exit 0
+  fi
+fi
+
+record_ffmpeg
+
+printf "Saved demo to %s\n" "$OUT"

package/scripts/diagnostics/a2a-conformance.sh

@@ -0,0 +1,162 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+## A2A v0.3 and agent card conformance validation.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
+
+# shellcheck source=../dot/lib/ui.sh
+source "$SCRIPT_DIR/../dot/lib/ui.sh"
+
+JSON_MODE=0
+STRICT_MODE=0
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --json | -j)
+      JSON_MODE=1
+      shift
+      ;;
+    --strict | -s)
+      STRICT_MODE=1
+      shift
+      ;;
+    *)
+      shift
+      ;;
+  esac
+done
+
+command -v jq >/dev/null 2>&1 || {
+  echo "jq is required for A2A conformance checks." >&2
+  exit 1
+}
+
+a2a_card="$REPO_ROOT/.well-known/agent-card.json"
+legacy_doc="$REPO_ROOT/.well-known/agent.json"
+internal_card="$REPO_ROOT/dot_config/dotfiles/agent-card.json"
+agent_profiles="$REPO_ROOT/dot_config/dotfiles/agent-profiles.json"
+status="healthy"
+issues=()
+
+# Check primary A2A v0.3 card
+if [[ ! -f "$a2a_card" ]]; then
+  issues+=("missing:.well-known/agent-card.json")
+fi
+
+# Check legacy agent.json
+if [[ ! -f "$legacy_doc" ]]; then
+  issues+=("missing:.well-known/agent.json")
+fi
+
+# Check internal card
+if [[ ! -f "$internal_card" ]]; then
+  issues+=("missing:agent-card.json")
+fi
+
+# Check agent profiles
+if [[ ! -f "$agent_profiles" ]]; then
+  issues+=("missing:agent-profiles.json")
+fi
+
+if [[ "${#issues[@]}" -eq 0 ]]; then
+  # Validate A2A v0.3 card
+  spec_version="$(jq -r '.specVersion // empty' "$a2a_card")"
+  [[ "$spec_version" == "0.3" ]] || issues+=("specVersion:expected 0.3, got $spec_version")
+
+  # Skills array
+  jq -e '.skills | type == "array"' "$a2a_card" >/dev/null 2>&1 || issues+=("skills:missing or not array")
+  skills_count="$(jq '.skills | length' "$a2a_card" 2>/dev/null || echo 0)"
+  [[ "$skills_count" -gt 0 ]] || issues+=("skills:empty array")
+
+  # Authentication block
+  jq -e '.authentication' "$a2a_card" >/dev/null 2>&1 || issues+=("authentication:missing")
+
+  # Signing metadata
+  signing_method="$(jq -r '.signing.method // empty' "$a2a_card")"
+  [[ -n "$signing_method" ]] || issues+=("signing:missing method")
+
+  # Capabilities
+  jq -e '.capabilities' "$a2a_card" >/dev/null 2>&1 || issues+=("capabilities:missing")
+
+  # Protocol must be "a2a" not "a2a-ready"
+  if jq -e '.protocols | index("a2a-ready")' "$a2a_card" >/dev/null 2>&1; then
+    issues+=("protocols:should use 'a2a' not 'a2a-ready'")
+  fi
+  jq -e '.protocols | index("a2a")' "$a2a_card" >/dev/null 2>&1 || issues+=("protocols:missing 'a2a'")
+
+  # Validate internal card also uses v0.3 and "a2a"
+  internal_spec="$(jq -r '.specVersion // empty' "$internal_card")"
+  [[ "$internal_spec" == "0.3" ]] || issues+=("internal-card:specVersion expected 0.3")
+  if jq -e '.protocols | index("a2a-ready")' "$internal_card" >/dev/null 2>&1; then
+    issues+=("internal-card:should use 'a2a' not 'a2a-ready'")
+  fi
+
+  # Validate legacy doc points to new card
+  jq -e '.a2aCard' "$legacy_doc" >/dev/null 2>&1 || issues+=("legacy:missing a2aCard pointer")
+  if jq -e '.protocols | index("a2a-ready")' "$legacy_doc" >/dev/null 2>&1; then
+    issues+=("legacy:should use 'a2a' not 'a2a-ready'")
+  fi
+
+  # Name consistency
+  a2a_name="$(jq -r '.name // empty' "$a2a_card")"
+  internal_name="$(jq -r '.name // empty' "$internal_card")"
+  legacy_name="$(jq -r '.name // empty' "$legacy_doc")"
+  [[ "$a2a_name" == "$internal_name" ]] || issues+=("name:mismatch between a2a-card and internal card")
+  [[ "$a2a_name" == "$legacy_name" ]] || issues+=("name:mismatch between a2a-card and legacy doc")
+
+  # Default profile validation
+  default_profile="$(jq -r '.defaultProfile // empty' "$internal_card")"
+  if [[ -n "$default_profile" ]]; then
+    jq -e --arg profile "$default_profile" '.profiles[$profile]' "$agent_profiles" >/dev/null 2>&1 || issues+=("default-profile:missing in agent-profiles.json")
+  fi
+
+  # Card signing in internal card
+  jq -e '.security.cardSigning' "$internal_card" >/dev/null 2>&1 || issues+=("internal-card:missing cardSigning in security")
+fi
+
+if [[ "${#issues[@]}" -gt 0 ]]; then
+  status="issues"
+fi
+
+# Build issues JSON safely
+if [[ "${#issues[@]}" -gt 0 ]]; then
+  issues_json="$(printf '%s\n' "${issues[@]}" | jq -R . | jq -s .)"
+else
+  issues_json="[]"
+fi
+
+payload="$(jq -n \
+  --arg status "$status" \
+  --arg a2a_card "$a2a_card" \
+  --arg legacy_doc "$legacy_doc" \
+  --arg internal_card "$internal_card" \
+  --arg agent_profiles "$agent_profiles" \
+  --argjson strict "$([[ "$STRICT_MODE" -eq 1 ]] && echo true || echo false)" \
+  --argjson issues "$issues_json" \
+  '{status: $status, strict: $strict, specVersion: "0.3", files: {a2a_card: $a2a_card, legacy_doc: $legacy_doc, internal_card: $internal_card, agent_profiles: $agent_profiles}, issues: $issues}')"
+
+if [[ "$JSON_MODE" -eq 1 ]]; then
+  printf '%s\n' "$payload"
+else
+  ui_dot_banner "AI and Agents"
+  ui_header "A2A v0.3 Conformance"
+  if [[ "$status" == "healthy" ]]; then
+    ui_ok "Status" "healthy"
+    ui_ok "Spec version" "0.3"
+    ui_ok "A2A card" "$a2a_card"
+    ui_ok "Legacy doc" "$legacy_doc"
+    ui_ok "Internal card" "$internal_card"
+  else
+    ui_warn "Status" "issues"
+    while IFS= read -r issue; do
+      [[ -n "$issue" ]] || continue
+      ui_warn "Issue" "$issue"
+    done < <(printf '%s' "$payload" | jq -r '.issues[]')
+  fi
+fi
+
+if [[ "$STRICT_MODE" -eq 1 && "$status" != "healthy" ]]; then
+  exit 1
+fi

package/scripts/diagnostics/alias-governance.sh

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Alias governance checks:
+# - duplicate alias names
+# - risky overrides must be gated
+# - no hardcoded /Users paths
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+manifest_script="$SCRIPT_DIR/aliases-manifest.sh"
+deprecations_file="$SCRIPT_DIR/../dot/data/alias-deprecations.tsv"
+policy="${DOTFILES_ALIAS_POLICY:-standard}"
+if [[ -n "${CI:-}" && "${DOTFILES_ALIAS_POLICY:-}" == "" ]]; then
+  policy="strict"
+fi
+
+if [[ ! -x "$manifest_script" ]]; then
+  echo "ERROR: aliases-manifest.sh not found or not executable" >&2
+  exit 1
+fi
+
+tmp_manifest="$(umask 077 && mktemp)"
+trap 'rm -f "$tmp_manifest"' EXIT
+
+bash "$manifest_script" >"$tmp_manifest"
+
+errors=0
+
+echo "Alias Governance"
+echo ""
+echo "Policy: $policy"
+echo ""
+
+version_ge() {
+  local a="${1#v}" b="${2#v}"
+  local IFS=.
+  local i
+  read -r -a av <<<"$a"
+  read -r -a bv <<<"$b"
+  for i in 0 1 2; do
+    local ai="${av[$i]:-0}"
+    local bi="${bv[$i]:-0}"
+    ((10#$ai > 10#$bi)) && return 0
+    ((10#$ai < 10#$bi)) && return 1
+  done
+  return 0
+}
+
+repo_version="0.0.0"
+if [[ -f "$SCRIPT_DIR/../../package.json" ]]; then
+  repo_version="$(sed -n 's/^[[:space:]]*"version"[[:space:]]*:[[:space:]]*"\([0-9][0-9.]*\)".*/\1/p' "$SCRIPT_DIR/../../package.json" | head -1)"
+fi
+repo_version="${repo_version:-0.0.0}"
+
+# 1) Duplicate alias names
+dupes="$(awk -F'\t' '{count[$1]++} END {for (k in count) if (count[k] > 1) print k}' "$tmp_manifest" | sort)"
+if [[ -n "$dupes" ]]; then
+  if [[ "$policy" == "strict" ]]; then
+    echo "ERROR: duplicate alias names detected:"
+    printf "%s\n" "$dupes" | sed 's/^/  - /'
+    errors=$((errors + 1))
+  else
+    echo "WARN: duplicate alias names detected (review recommended):"
+    printf "%s\n" "$dupes" | sed 's/^/  - /'
+  fi
+else
+  echo "OK: no duplicate alias names"
+fi
+
+# 2) Risky overrides must be gated
+while IFS=$'\t' read -r name _value file _line; do
+  case "$name" in
+    cd | sudo | su | cp | mv | rm | mkdir | alias)
+      # GNU coreutils aliases are intentionally centralized overrides.
+      if [[ "$file" == *"/aliases/gnu/"* ]]; then
+        continue
+      fi
+      if ! rg -q 'DOTFILES_(ENABLE|SAFE|ALIAS)' "$file"; then
+        echo "ERROR: risky override '$name' in $file is not gated by a DOTFILES_* flag"
+        errors=$((errors + 1))
+      fi
+      ;;
+  esac
+done <"$tmp_manifest"
+
+if [[ $errors -eq 0 ]]; then
+  echo "OK: risky overrides are gated"
+fi
+
+# 3) Hardcoded /Users path check (alias value only)
+hardcoded="$(awk -F'\t' '$2 ~ /\/Users\// {print $1 "\t" $2 "\t" $3 ":" $4}' "$tmp_manifest")"
+if [[ -n "$hardcoded" ]]; then
+  echo "ERROR: hardcoded /Users paths detected in aliases:"
+  printf "%s\n" "$hardcoded" | sed 's/^/  - /'
+  errors=$((errors + 1))
+else
+  echo "OK: no hardcoded /Users paths in aliases"
+fi
+
+# 4) Deprecation window enforcement
+if [[ -f "$deprecations_file" ]]; then
+  expired_hits=0
+  while IFS=$'\t' read -r alias_name replacement remove_in; do
+    [[ -z "${alias_name:-}" ]] && continue
+    [[ "${alias_name:0:1}" == "#" ]] && continue
+    if version_ge "$repo_version" "$remove_in"; then
+      alias_found=0
+      if awk -F'\t' -v n="$alias_name" '$1==n{found=1} END{exit(found?0:1)}' "$tmp_manifest"; then
+        alias_found=1
+      fi
+      function_found=0
+      if rg -q --glob '*.sh' --glob '*.aliases.sh' --glob '*.tmpl' "^[[:space:]]*(function[[:space:]]+)?${alias_name}[[:space:]]*\\(\\)" "$SCRIPT_DIR/../../.chezmoitemplates/aliases" "$SCRIPT_DIR/../../scripts/dot"; then
+        function_found=1
+      fi
+      if [[ $alias_found -eq 1 || $function_found -eq 1 ]]; then
+        [[ $expired_hits -eq 0 ]] && echo "ERROR: expired deprecated aliases still present:"
+        echo "  - $alias_name (remove_in=$remove_in, replacement=$replacement)"
+        expired_hits=$((expired_hits + 1))
+      fi
+    fi
+  done < <(cut -f1-3 "$deprecations_file")
+  if [[ $expired_hits -gt 0 ]]; then
+    errors=$((errors + 1))
+  else
+    echo "OK: no expired deprecated aliases (repo version: v$repo_version)"
+  fi
+fi
+
+echo ""
+if [[ $errors -eq 0 ]]; then
+  echo "Alias governance checks passed."
+  exit 0
+fi
+
+echo "Alias governance checks failed: $errors issue(s)." >&2
+exit 1

package/scripts/diagnostics/aliases-cheatsheet.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=../dot/lib/utils.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../dot/lib/utils.sh"
+
+src_dir="$(require_source_dir)"
+manifest="$src_dir/scripts/diagnostics/aliases-manifest.sh"
+if [[ ! -x "$manifest" ]]; then
+  echo "Alias manifest not found: $manifest" >&2
+  exit 1
+fi
+
+cat <<'HEADER'
+# Alias Cheatsheet
+
+Auto-generated from alias manifest.
+
+## Core shortcuts
+HEADER
+
+# Core list we care about (preserve ordering).
+core_aliases=(c q e h _ i l ll la lr lra lt lta a d)
+
+tmp_manifest="$(umask 077 && mktemp)"
+trap 'rm -f "$tmp_manifest"' EXIT
+bash "$manifest" >"$tmp_manifest"
+
+pick_alias() {
+  local name="$1"
+  shift
+  local value=""
+  local pattern
+  while [[ $# -gt 0 ]]; do
+    pattern="$1"
+    value="$(awk -F$'\t' -v key="$name" -v pat="$pattern" '$1==key && $3 ~ pat {print $2; exit}' "$tmp_manifest")"
+    [[ -n "$value" ]] && {
+      printf '%s\n' "$value"
+      return 0
+    }
+    shift
+  done
+  value="$(awk -F$'\t' -v key="$name" '$1==key {print $2; exit}' "$tmp_manifest")"
+  [[ -n "$value" ]] && printf '%s\n' "$value"
+}
+
+for a in "${core_aliases[@]}"; do
+  case "$a" in
+    a)
+      line="$(pick_alias "$a" "/ai/")"
+      ;;
+    d)
+      line="$(pick_alias "$a" "/system/" "/configuration/" "/docker/")"
+      ;;
+    *)
+      line="$(pick_alias "$a")"
+      ;;
+  esac
+  if [[ -n "$line" ]]; then
+    printf '%s\n' "- \`$a\` $line"
+  fi
+done
+
+cat <<'FOOTER'
+
+## Notes
+
+- Regenerate: `dot aliases cheatsheet`
+- Apply changes: `chezmoi apply`
+FOOTER

package/scripts/diagnostics/aliases-manifest.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Emit alias manifest as TSV:
+# name<TAB>value<TAB>file<TAB>line
+
+set -euo pipefail
+
+resolve_source_dir() {
+  if [[ -n "${CHEZMOI_SOURCE_DIR:-}" && -d "${CHEZMOI_SOURCE_DIR}" ]]; then
+    printf "%s\n" "${CHEZMOI_SOURCE_DIR}"
+    return
+  fi
+  if [[ -d "$HOME/.dotfiles" ]]; then
+    printf "%s\n" "$HOME/.dotfiles"
+    return
+  fi
+  if [[ -d "$HOME/.local/share/chezmoi" ]]; then
+    printf "%s\n" "$HOME/.local/share/chezmoi"
+    return
+  fi
+  return 1
+}
+
+src_dir="${1:-$(resolve_source_dir)}"
+
+rg -n \
+  -e '^[[:space:]]*alias[[:space:]]+[A-Za-z0-9_.:-]+=' \
+  -e '^[[:space:]]*[^#"'\'']*&&[[:space:]]*alias[[:space:]]+[A-Za-z0-9_.:-]+=' \
+  "$src_dir/.chezmoitemplates/aliases" \
+  "$src_dir/.chezmoitemplates/functions" |
+  sed -E 's#^([^:]+):([0-9]+):.*alias[[:space:]]+([A-Za-z0-9_.:-]+)=(.*)$#\3\t\4\t\1\t\2#'