@sebastienrousseau/dotfiles 0.2.499 → 0.2.501

package/scripts/version-sync.sh

@@ -0,0 +1,487 @@
+#!/usr/bin/env bash
+# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Version Synchronization Script
+# Synchronizes version numbers across all markdown files with package.json
+# Used by CI/CD and available for local testing
+
+set -euo pipefail
+
+_cleanup_files=()
+trap 'rm -f "${_cleanup_files[@]}"' EXIT
+
+# Configuration
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+VERSION_PATTERN='[0-9]+\.[0-9]+\.[0-9]+'
+SED_VERSION_PATTERN='[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*'
+BACKUP_DIR="$PROJECT_ROOT/.version-sync-backup"
+EXCLUDE_FILES=(
+  "CHANGELOG.md"
+  "docs/security/COMPLIANCE.md"
+  "docs/reference/FONTS.md"
+  "docs/archive/LEGACY_ROADMAP.md"
+  "docs/archive/PLAN.md"
+)
+
+# shellcheck source=dot/lib/ui.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/dot/lib/ui.sh"
+ui_init
+
+# Functions — delegate to shared ui.sh (redirect to stderr for script output)
+log_info() { ui_info "$@" >&2; }
+log_success() { ui_ok "$@" >&2; }
+log_warning() { ui_warn "$@" >&2; }
+log_error() { ui_err "$@" >&2; }
+
+show_help() {
+  cat <<EOF
+Version Synchronization Script
+
+USAGE:
+  $0 [OPTIONS] [VERSION]
+
+OPTIONS:
+  -h, --help        Show this help message
+  -d, --dry-run     Show what would be changed without making changes
+  -v, --verify      Verify version consistency without updating
+  -b, --backup      Create backup before changes (default: true)
+  --no-backup       Skip creating backup
+  -f, --force       Force sync even if no changes detected
+
+ARGUMENTS:
+  VERSION          Target version to sync to (defaults to package.json version)
+
+EXAMPLES:
+  $0                    # Sync to current package.json version
+  $0 1.2.3             # Sync all files to version 1.2.3
+  $0 --dry-run         # Preview changes without applying
+  $0 --verify          # Check current version consistency
+
+DESCRIPTION:
+  This script synchronizes version numbers across all markdown files in the
+  repository with the version specified in package.json. It updates various
+  version reference patterns including badges, documentation headers, and
+  feature version stamps.
+
+EOF
+}
+
+is_excluded_file() {
+  local file="$1"
+  local excluded
+  for excluded in "${EXCLUDE_FILES[@]}"; do
+    if [[ "$file" == "$excluded" ]]; then
+      return 0
+    fi
+  done
+  return 1
+}
+
+get_package_version() {
+  local package_file="$PROJECT_ROOT/package.json"
+  if [[ ! -f "$package_file" ]]; then
+    log_error "package.json not found at $package_file"
+    exit 1
+  fi
+
+  local version
+  version=$(jq -r '.version' "$package_file" 2>/dev/null)
+  if [[ "$version" == "null" || -z "$version" ]]; then
+    log_error "Could not extract version from package.json"
+    exit 1
+  fi
+
+  echo "$version"
+}
+
+validate_version() {
+  local version="$1"
+  if [[ ! $version =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+    log_error "Invalid version format: $version (expected: x.y.z)"
+    exit 1
+  fi
+}
+
+find_version_files() {
+  local temp_file
+  temp_file=$(umask 077 && mktemp)
+
+  log_info "Scanning for markdown files with version references..."
+
+  # Find all markdown files with version patterns
+  cd "$PROJECT_ROOT"
+  rg -l "v?$VERSION_PATTERN" --type md >"$temp_file" 2>/dev/null || true
+
+  # Add known files that should be checked even if they don't have versions yet
+  echo "README.md" >>"$temp_file"
+  echo "docs/reference/FEATURES.md" >>"$temp_file"
+  echo "docs/COPYRIGHT" >>"$temp_file"
+
+  # Remove duplicates and filter existing files
+  sort -u "$temp_file" | while IFS= read -r file; do
+    if [[ -f "$file" ]]; then
+      if is_excluded_file "$file"; then
+        continue
+      fi
+      echo "$file"
+    fi
+  done
+
+  rm -f "$temp_file"
+}
+
+sed_in_place() {
+  local file="$1"
+  shift
+
+  if sed --version >/dev/null 2>&1; then
+    sed -E -i "$@" "$file"
+  else
+    sed -E -i '' "$@" "$file"
+  fi
+}
+
+create_backup() {
+  local files=("$@")
+
+  if [[ ${#files[@]} -eq 0 ]]; then
+    log_warning "No files to backup"
+    return
+  fi
+
+  log_info "Creating backup in $BACKUP_DIR"
+  rm -rf "$BACKUP_DIR"
+  mkdir -p "$BACKUP_DIR"
+
+  local backup_count=0
+  for file in "${files[@]}"; do
+    if [[ -f "$file" ]]; then
+      local backup_name
+      backup_name="$(basename "$file").$(date +%Y%m%d_%H%M%S).backup"
+      cp "$file" "$BACKUP_DIR/$backup_name"
+      backup_count=$((backup_count + 1))
+    fi
+  done
+
+  log_success "Backed up $backup_count files"
+}
+
+update_version_references() {
+  local target_version="$1"
+  local dry_run="$2"
+  local files=("${@:3}")
+
+  local changes_made=0
+  local files_processed=0
+
+  for file in "${files[@]}"; do
+    if [[ ! -f "$file" ]]; then
+      log_warning "File not found: $file"
+      continue
+    fi
+
+    # Skip milestone and other historical files
+    if [[ "$(basename "$file")" == MILESTONE_* ]]; then
+      log_info "Skipping historical file: $file"
+      continue
+    fi
+
+    # Create temporary file for changes
+    local temp_file
+    temp_file=$(umask 077 && mktemp)
+    cp "$file" "$temp_file"
+
+    # Update various version reference patterns
+    case "$(basename "$file")" in
+      "README.md")
+        # Update badge and release link versions.
+        sed_in_place "$temp_file" \
+          -e "s|Version-v$SED_VERSION_PATTERN|Version-v$target_version|g" \
+          -e "s|/releases/tag/v$SED_VERSION_PATTERN|/releases/tag/v$target_version|g" \
+          -e "s|/dotfiles/v$SED_VERSION_PATTERN/|/dotfiles/v$target_version/|g"
+        ;;
+      *)
+        # Update explicit markdown version labels, backticks, and parentheses.
+        # Skip lines containing MILESTONE.
+        sed_in_place "$temp_file" \
+          -e "/MILESTONE/!s|(\*\*Version\*\*:[[:space:]]*)v?$SED_VERSION_PATTERN|\\1v$target_version|g" \
+          -e "/MILESTONE/!s|(\*\*Dotfiles Version\*\*:[[:space:]]*)v?$SED_VERSION_PATTERN|\\1v$target_version|g" \
+          -e "/MILESTONE/!s|(Version:[[:space:]]*)v?$SED_VERSION_PATTERN|\\1v$target_version|g" \
+          -e "/MILESTONE/!s|(Dotfiles Version:[[:space:]]*)v?$SED_VERSION_PATTERN|\\1v$target_version|g" \
+          -e "/MILESTONE/!s|Version[[:space:]]*\`v?$SED_VERSION_PATTERN\`|Version \`$target_version\`|g" \
+          -e "/MILESTONE/!s|\(v$SED_VERSION_PATTERN\)|\(v$target_version\)|g" \
+          -e "/MILESTONE/!s|/v$SED_VERSION_PATTERN/|/v$target_version/|g" \
+          -e "/MILESTONE/!s|\bv$SED_VERSION_PATTERN\b|v$target_version|g" \
+          -e "/MILESTONE/!s|dotfiles:v?$SED_VERSION_PATTERN|dotfiles:$target_version|g" \
+          -e "/MILESTONE/!s|notes — v$SED_VERSION_PATTERN|notes — v$target_version|g"
+        ;;
+    esac
+
+    # Check if file was changed
+    if ! cmp -s "$file" "$temp_file"; then
+      if [[ "$dry_run" == "true" ]]; then
+        log_info "Would update: $file"
+        # Show diff preview
+        diff -u "$file" "$temp_file" | head -20 >&2 || true
+      else
+        # Use cat to preserve permissions and ownership
+        cat "$temp_file" >"$file"
+        log_success "Updated: $file"
+      fi
+      changes_made=$((changes_made + 1))
+    else
+      log_info "No changes needed: $file"
+      rm -f "$temp_file"
+    fi
+  done
+
+  if [[ "$dry_run" == "true" ]]; then
+    log_info "Dry run complete - $changes_made files would be updated out of $files_processed processed"
+  else
+    log_success "Updated $changes_made files out of $files_processed processed"
+  fi
+
+  echo "$changes_made"
+}
+
+verify_version_consistency() {
+  local expected_version="$1"
+  local files=("${@:2}")
+
+  log_info "Verifying version consistency (expected: v$expected_version)"
+
+  local inconsistencies=0
+  local total_checked=0
+
+  for file in "${files[@]}"; do
+    if [[ ! -f "$file" ]]; then
+      continue
+    fi
+
+    if [[ "$(basename "$file")" == MILESTONE_* ]]; then
+      log_info "Skipping historical file: $file"
+      continue
+    fi
+
+    total_checked=$((total_checked + 1))
+
+    # Extract only dotfiles-targeted version references (ignore unrelated tool versions).
+    local versions_in_file=()
+    while IFS= read -r match; do
+      while IFS= read -r version; do
+        versions_in_file+=("$version")
+      done < <(printf "%s\n" "$match" | rg -o "v?$VERSION_PATTERN" || true)
+    done < <(
+      rg -v "MILESTONE" "$file" 2>/dev/null | rg -o \
+        -e "Version-v$VERSION_PATTERN" \
+        -e "/releases/tag/v$VERSION_PATTERN" \
+        -e "/dotfiles/v$VERSION_PATTERN/" \
+        -e "\\*\\*Version\\*\\*:[[:space:]]*v?$VERSION_PATTERN" \
+        -e "\\*\\*Dotfiles Version\\*\\*:[[:space:]]*v?$VERSION_PATTERN" \
+        -e "(^|[[:space:]])Version:[[:space:]]*v?$VERSION_PATTERN" \
+        -e "(^|[[:space:]])Dotfiles Version:[[:space:]]*v?$VERSION_PATTERN" \
+        -e "Version[[:space:]]*\`v?$VERSION_PATTERN\`" \
+        -e "\\(v$VERSION_PATTERN\\)" \
+        -e "/v$VERSION_PATTERN/" \
+        -e "v$VERSION_PATTERN\\b" \
+        -e "dotfiles:v?$VERSION_PATTERN" \
+        -e "notes — v$VERSION_PATTERN" || true
+    )
+
+    if [[ ${#versions_in_file[@]} -eq 0 ]]; then
+      continue
+    fi
+
+    for version in "${versions_in_file[@]}"; do
+      # Remove 'v' prefix if present for comparison
+      local clean_version="${version#v}"
+      if [[ "$clean_version" != "$expected_version" ]]; then
+        log_error "Inconsistent version in $file: $version (expected: v$expected_version)"
+        inconsistencies=$((inconsistencies + 1))
+      fi
+    done
+  done
+
+  if [[ $inconsistencies -eq 0 ]]; then
+    log_success "All version references are consistent: v$expected_version (checked $total_checked files)"
+    return 0
+  else
+    log_error "Found $inconsistencies inconsistent version references"
+    return 1
+  fi
+}
+
+main() {
+  local target_version=""
+  local dry_run="false"
+  local verify_only="false"
+  local create_backup_flag="true"
+  local force_sync="false"
+
+  # Parse arguments
+  while [[ $# -gt 0 ]]; do
+    case $1 in
+      -h | --help)
+        show_help
+        exit 0
+        ;;
+      -d | --dry-run)
+        dry_run="true"
+        shift
+        ;;
+      -v | --verify)
+        verify_only="true"
+        shift
+        ;;
+      -b | --backup)
+        create_backup_flag="true"
+        shift
+        ;;
+      --no-backup)
+        create_backup_flag="false"
+        shift
+        ;;
+      -f | --force)
+        force_sync="true"
+        shift
+        ;;
+      -*)
+        log_error "Unknown option: $1"
+        show_help
+        exit 1
+        ;;
+      *)
+        target_version="$1"
+        shift
+        ;;
+    esac
+  done
+
+  # Change to project root
+  cd "$PROJECT_ROOT"
+
+  # Determine target version
+  if [[ -z "$target_version" ]]; then
+    target_version=$(get_package_version)
+    log_info "Using package.json version: $target_version"
+  else
+    validate_version "$target_version"
+    log_info "Using specified version: $target_version"
+  fi
+
+  # Find files with version references
+  local version_files
+  readarray -t version_files < <(find_version_files)
+
+  if [[ ${#version_files[@]} -eq 0 ]]; then
+    log_warning "No files with version references found"
+    exit 0
+  fi
+
+  log_info "Found ${#version_files[@]} files with version references"
+
+  # Verify mode - just check consistency
+  if [[ "$verify_only" == "true" ]]; then
+    if verify_version_consistency "$target_version" "${version_files[@]}"; then
+      exit 0
+    else
+      exit 1
+    fi
+  fi
+
+  # Create backup if requested and not dry run
+  if [[ "$create_backup_flag" == "true" && "$dry_run" == "false" ]]; then
+    create_backup "${version_files[@]}"
+  fi
+
+  # Sync chezmoidata.toml (single source of truth for template files)
+  local chezmoidata="$PROJECT_ROOT/.chezmoidata.toml"
+  if [[ -f "$chezmoidata" ]]; then
+    if [[ "$dry_run" == "true" ]]; then
+      log_info "Would update .chezmoidata.toml: dotfiles_version = \"$target_version\""
+    else
+      sed_in_place "$chezmoidata" \
+        "s|^dotfiles_version = \"$SED_VERSION_PATTERN\"|dotfiles_version = \"$target_version\"|"
+      log_success "Updated .chezmoidata.toml"
+    fi
+  fi
+
+  # Sync non-template script files that embed the version
+  local script_files=(
+    "dot_local/bin/executable_dot"
+    "dot_local/bin/executable_tour"
+    "install.sh"
+  )
+  for script_file in "${script_files[@]}"; do
+    local full_path="$PROJECT_ROOT/$script_file"
+    if [[ -f "$full_path" ]]; then
+      local temp_file
+      temp_file=$(umask 077 && mktemp)
+      cp "$full_path" "$temp_file"
+      sed_in_place "$temp_file" "s|v$SED_VERSION_PATTERN|v$target_version|g"
+      sed_in_place "$temp_file" "s|\"$SED_VERSION_PATTERN\"|\"$target_version\"|g"
+      if ! cmp -s "$full_path" "$temp_file"; then
+        if [[ "$dry_run" == "true" ]]; then
+          log_info "Would update: $script_file"
+        else
+          # Use cat to preserve permissions and ownership
+          cat "$temp_file" >"$full_path"
+          log_success "Updated: $script_file"
+        fi
+      else
+        rm -f "$temp_file"
+      fi
+    fi
+  done
+
+  # Update version references
+  local changes_made
+  changes_made="$(update_version_references "$target_version" "$dry_run" "${version_files[@]}")"
+  if [[ "$changes_made" =~ ^[0-9]+$ ]]; then
+
+    if [[ $changes_made -gt 0 || "$force_sync" == "true" ]]; then
+      if [[ "$dry_run" == "false" ]]; then
+        # Verify the changes
+        if verify_version_consistency "$target_version" "${version_files[@]}"; then
+          log_success "Version synchronization completed successfully"
+
+          # Show summary
+          cat <<EOF
+
+═══════════════════════════════════════
+Version Sync Summary
+═══════════════════════════════════════
+Target Version: v$target_version
+Files Updated:  $changes_made
+Backup Created: $create_backup_flag
+Verification:   ✅ Passed
+
+EOF
+        else
+          log_error "Version synchronization failed verification"
+          exit 1
+        fi
+      fi
+    else
+      log_info "No changes needed - all versions are already synchronized"
+    fi
+  else
+    log_error "Version synchronization failed"
+    exit 1
+  fi
+}
+
+# Ensure we have required tools
+if ! command -v jq &>/dev/null; then
+  log_warning "jq is not installed — skipping version sync"
+  exit 0
+fi
+
+if ! command -v rg &>/dev/null; then
+  log_warning "ripgrep (rg) is not installed — skipping version sync"
+  exit 0
+fi
+
+# Run main function
+main "$@"

package/templates/chezmoi-data/geekom-a9.toml.example

@@ -0,0 +1,21 @@
+profile = "desktop"
+host_id = "geekom-a9"
+host_class = "linux-desktop"
+
+[features]
+gui = true
+linux_desktop = true
+niri = true
+waybar = true
+fuzzel = true
+mako = true
+foot = true
+kanshi = true
+touch = false
+t2 = false
+surface = false
+
+[monitors]
+internal = false
+scale = 1.0
+rotation = "normal"

package/templates/chezmoi-data/mac-m1.toml.example

@@ -0,0 +1,16 @@
+profile = "laptop"
+host_id = "mac-m1"
+host_class = "macos"
+
+[features]
+gui = true
+linux_desktop = false
+niri = false
+waybar = false
+fuzzel = false
+mako = false
+foot = false
+kanshi = false
+touch = false
+t2 = false
+surface = false

package/templates/chezmoi-data/mac-t2-linux.toml.example

@@ -0,0 +1,21 @@
+profile = "laptop"
+host_id = "mac-t2-linux"
+host_class = "linux-t2"
+
+[features]
+gui = true
+linux_desktop = true
+niri = true
+waybar = true
+fuzzel = true
+mako = true
+foot = true
+kanshi = true
+touch = false
+t2 = true
+surface = false
+
+[monitors]
+internal = true
+scale = 1.25
+rotation = "normal"

package/templates/chezmoi-data/surface-pro-7p.toml.example

@@ -0,0 +1,21 @@
+profile = "laptop"
+host_id = "surface-pro-7p"
+host_class = "linux-tablet"
+
+[features]
+gui = true
+linux_desktop = true
+niri = true
+waybar = true
+fuzzel = true
+mako = true
+foot = true
+kanshi = true
+touch = true
+t2 = false
+surface = true
+
+[monitors]
+internal = true
+scale = 1.5
+rotation = "normal"

package/templates/projects/go/.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+      - run: go mod download
+      - run: go build ./...
+      - run: go test ./...
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.22'
+      - name: Run govulncheck
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+          govulncheck ./... || echo "No vulnerabilities"

package/templates/projects/go/README.md

@@ -1,3 +1,7 @@
 # __PROJECT_NAME__
 
 Minimal Go project scaffold.
+
+---
+
+Made with ❤️ by [Sebastien Rousseau](https://sebastienrousseau.com)

package/templates/projects/go/cmd/__PROJECT_NAME__/main.go

@@ -1,3 +1,4 @@
+// Copyright (c) 2015-2026 Dotfiles. All rights reserved.
 package main
 
 import "fmt"

package/templates/projects/molecule/README.md

@@ -0,0 +1,7 @@
+# __PROJECT_NAME__
+
+Molecule scenario scaffold.
+
+---
+
+Made with ❤️ by [Sebastien Rousseau](https://sebastienrousseau.com)

package/templates/projects/molecule/converge.yml

@@ -0,0 +1,7 @@
+---
+- name: Converge
+  hosts: all
+  tasks:
+    - name: Print a message
+      ansible.builtin.debug:
+        msg: "Molecule scenario: __PROJECT_NAME__"

package/templates/projects/molecule/molecule.yml

@@ -0,0 +1,16 @@
+---
+driver:
+  name: docker
+
+platforms:
+  - name: instance
+    image: "geerlingguy/docker-ubuntu2204-ansible:latest"
+    privileged: true
+
+provisioner:
+  name: ansible
+  playbooks:
+    converge: converge.yml
+
+verifier:
+  name: ansible

package/templates/projects/node/.github/workflows/ci.yml

@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+      - run: npm ci
+      - run: npm test
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+      - run: npm ci
+      - run: npm audit --audit-level=high

package/templates/projects/node/README.md

@@ -1,3 +1,7 @@
 # __PROJECT_NAME__
 
 Minimal Node project scaffold.
+
+---
+
+Made with ❤️ by [Sebastien Rousseau](https://sebastienrousseau.com)