@sebastienrousseau/dotfiles 0.2.500 → 0.2.501

package/dot_config/fish/functions/_cached_eval.fish

@@ -1,14 +1,43 @@
-# _cached_eval — Cache tool init output with binary mtime invalidation
-# Mirrors the bash/zsh _cached_eval pattern for Fish
+# _cached_eval — Cache tool init output with binary mtime invalidation.
+# Mirrors the bash/zsh _cached_eval pattern for Fish.
 #
 # Usage: _cached_eval <tool_binary> <init_args...>
 # Example: _cached_eval starship init fish
 #          _cached_eval zoxide init fish
 #
 # Cache files stored in $XDG_CACHE_HOME/fish/ (or ~/.cache/fish/)
-# Cache invalidated when binary mtime changes (e.g. after upgrade)
+# Cache invalidated when binary mtime, realpath, or any file-path arg
+# changes (e.g. after upgrade or PATH-shadow swap).
+#
+# Env knobs:
+#   EVALCACHE_DISABLE=true  bypass cache read AND write (debug aid)
+#   EVALCACHE_TIMING=1      log per-call timing for `dot perf --by-tool`
 
-function _cached_eval --description 'Cache and source tool init output'
+function _cached_eval_log_timing --description 'Append a timing event for dot perf --by-tool'
+    set -l label $argv[1]
+    set -l t0 $argv[2]
+    set -l t1 $argv[3]
+    set -l rc $argv[4]
+    set -l shell fish
+    if test (count $argv) -ge 5
+        set shell $argv[5]
+    end
+    set -l log_dir (set -q XDG_STATE_HOME; and echo $XDG_STATE_HOME; or echo "$HOME/.local/state")/dotfiles
+    mkdir -p "$log_dir" 2>/dev/null; or return 0
+    set -l logfile "$log_dir/eval-timings.jsonl"
+    test -f "$logfile"; or touch "$logfile" 2>/dev/null; or return 0
+    # nanoseconds -> milliseconds
+    set -l ms 0
+    if test -n "$t0"; and test -n "$t1"
+        set ms (math --scale=0 "($t1 - $t0) / 1000000") 2>/dev/null; or set ms 0
+    end
+    set -l ts (date -u +%Y-%m-%dT%H:%M:%SZ)
+    printf '{"ts":"%s","shell":"%s","label":"%s","ms":%s,"rc":%s}\n' \
+        "$ts" "$shell" "$label" "$ms" "$rc" \
+        >>"$logfile" 2>/dev/null; or true
+end
+
+function _cached_eval_impl
     set -l tool_name $argv[1]
     if test -z "$tool_name"
         echo "_cached_eval: usage: _cached_eval <tool> <init args...>" >&2
@@ -21,34 +50,61 @@ function _cached_eval --description 'Cache and source tool init output'
         return 1
     end
 
+    # Debug bypass: skip cache read AND write entirely.
+    if test "$EVALCACHE_DISABLE" = true
+        command $argv 2>/dev/null | source
+        return $status
+    end
+
     set -l cache_dir (set -q XDG_CACHE_HOME; and echo $XDG_CACHE_HOME; or echo "$HOME/.cache")/fish
     set -l cache_file "$cache_dir/$tool_name-init.fish"
-    set -l mtime_file "$cache_dir/$tool_name-init.mtime"
+    set -l pin_file "$cache_dir/$tool_name-init.bin"
 
     mkdir -p "$cache_dir"
 
-    # Check if cache is stale (binary newer than cache)
+    set -l real_bin (realpath -- "$tool_path" 2>/dev/null; or echo "$tool_path")
+
+    # Cache valid when: present non-empty, binary not newer, recorded realpath
+    # still matches, and no file-path argument modified since cache write.
     set -l stale 0
-    if not test -f "$cache_file"
-        set stale 1
-    else if not test -f "$mtime_file"
+    if not test -s "$cache_file"
         set stale 1
     else if test "$tool_path" -nt "$cache_file"
         set stale 1
+    else if test -f "$pin_file"
+        set -l pinned (cat "$pin_file" 2>/dev/null)
+        if test -n "$pinned"; and test "$pinned" != "$real_bin"
+            set stale 1
+        end
+    end
+    if test "$stale" = 0
+        for arg in $argv[2..]
+            if test -f "$arg"; and test "$arg" -nt "$cache_file"
+                set stale 1
+                break
+            end
+        end
     end
 
     # Regenerate cache if stale
     if test "$stale" = 1
         set -l init_output (command $argv 2>/dev/null)
+        set -l rc $status
+        if test "$rc" -ne 0
+            echo "[WARN] $tool_name init exited $rc; not caching" >&2
+            return $rc
+        end
         # Reject suspicious patterns indicating malicious payloads
         if string match -rq 'curl\s.*\|\s*(ba)?sh|wget\s.*\|\s*(ba)?sh|nc\s+-e|/dev/tcp/|base64\s+-d\s*\|' -- "$init_output"
             echo "[WARN] Suspicious output from $tool_name init, skipping" >&2
             return 1
         end
-        set -l tmp_cache "$cache_file.tmp.%self"
+        set -l tmp_cache "$cache_file.tmp.$fish_pid"
         printf '%s\n' $init_output >"$tmp_cache"
         mv "$tmp_cache" "$cache_file"  # atomic rename
-        echo "$tool_path" >"$mtime_file"
+        set -l tmp_pin "$pin_file.tmp.$fish_pid"
+        printf '%s\n' "$real_bin" >"$tmp_pin"
+        mv "$tmp_pin" "$pin_file"
     end
 
     # Source cached output
@@ -56,3 +112,20 @@ function _cached_eval --description 'Cache and source tool init output'
         source "$cache_file"
     end
 end
+
+function _cached_eval --description 'Cache and source tool init output'
+    if test "$EVALCACHE_TIMING" != 1
+        _cached_eval_impl $argv
+        return $status
+    end
+    set -l _ce_t0 (date +%s%N 2>/dev/null; or echo 0)
+    _cached_eval_impl $argv
+    set -l _ce_rc $status
+    set -l _ce_t1 (date +%s%N 2>/dev/null; or echo 0)
+    set -l label unknown
+    if test (count $argv) -ge 1
+        set label $argv[1]
+    end
+    _cached_eval_log_timing "$label" "$_ce_t0" "$_ce_t1" "$_ce_rc" fish
+    return $_ce_rc
+end

package/dot_config/fish/functions/_cached_eval_clear.fish

@@ -0,0 +1,17 @@
+# _cached_eval_clear — Remove cache files written by _cached_eval.
+# Safe: only removes *-init.fish and *-init.bin in $XDG_CACHE_HOME/fish.
+
+function _cached_eval_clear --description 'Clear caches written by _cached_eval'
+    set -l cache_dir (set -q XDG_CACHE_HOME; and echo $XDG_CACHE_HOME; or echo "$HOME/.cache")/fish
+    if not test -d "$cache_dir"
+        printf 'Cleared 0 cached eval file(s) from %s\n' "$cache_dir"
+        return 0
+    end
+    set -l count 0
+    for f in $cache_dir/*-init.fish $cache_dir/*-init.bin
+        if test -f "$f"
+            rm -f -- "$f"; and set count (math $count + 1)
+        end
+    end
+    printf 'Cleared %d cached eval file(s) from %s\n' $count "$cache_dir"
+end

package/dot_config/foot/foot.ini.tmpl

@@ -1,7 +1,7 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 {{- $tt := $t -}}
-{{- $themeName := default "macos-monterey-dark" .theme -}}
+{{- $themeName := default "big-sur-dark" .theme -}}
 {{- if hasSuffix "-light" $themeName -}}
   {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
   {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}

package/dot_config/fuzzel/fuzzel.ini.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 [main]
 font={{ .terminal_font_family }}:size={{ .terminal_font_size }}
 terminal=ghostty

package/dot_config/ghostty/config.tmpl

@@ -133,10 +133,10 @@ keybind = ctrl+k=clear_screen
 ################
 # Colors       #
 ################
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 {{- $tt := $t -}}
-{{- $themeName := default "macos-monterey-dark" .theme -}}
+{{- $themeName := default "big-sur-dark" .theme -}}
 {{- if hasSuffix "-light" $themeName -}}
   {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
   {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}

package/dot_config/git/hooks/executable_commit-msg

@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# ── AI Attribution (Linux kernel coding-assistants standard) ──────────
+# Appends "Assisted-by:" trailer to commit messages when authored during
+# an AI coding assistant session. Detects the active tool automatically.
+#
+# Reference: https://github.com/torvalds/linux/blob/master/Documentation/process/coding-assistants.rst
+# Format:    Assisted-by: AGENT_NAME:MODEL_VERSION [TOOL1] [TOOL2]
+
+detect_ai_agent() {
+  # Default model when running under Claude Code. Override at any time
+  # without editing this hook by exporting CLAUDE_MODEL in your shell
+  # rc, e.g. `export CLAUDE_MODEL=claude-opus-4-7`. Kept current with
+  # the latest generally-available Opus at time of last hook update.
+  local claude_default="${CLAUDE_MODEL:-claude-opus-4-7}"
+
+  # Claude Code (Anthropic). The CLI actually sets CLAUDECODE=1 (no
+  # underscore); the other vars are kept as historical aliases and for
+  # API-key-only sessions.
+  if [[ -n "${CLAUDECODE:-}" \
+     || -n "${CLAUDE_CODE:-}" \
+     || -n "${CLAUDE_SESSION_ID:-}" \
+     || -n "${CLAUDE_CODE_ENTRYPOINT:-}" \
+     || -n "${ANTHROPIC_API_KEY:-}" ]]; then
+    echo "Claude:${claude_default}"
+    return
+  fi
+
+  # GitHub Copilot CLI
+  if [[ -n "${GITHUB_COPILOT_CLI:-}" || -n "${COPILOT_SESSION:-}" ]]; then
+    echo "Copilot:copilot-cli"
+    return
+  fi
+
+  # Aider
+  if [[ -n "${AIDER_SESSION:-}" || -n "${AIDER_MODEL:-}" ]]; then
+    echo "Aider:${AIDER_MODEL:-unknown}"
+    return
+  fi
+
+  # OpenCode
+  if [[ -n "${OPENCODE_SESSION:-}" ]]; then
+    echo "OpenCode:${OPENCODE_MODEL:-unknown}"
+    return
+  fi
+
+  # Gemini CLI (Google)
+  if [[ -n "${GEMINI_API_KEY:-}" && -n "${GEMINI_SESSION:-}" ]]; then
+    echo "Gemini:gemini-cli"
+    return
+  fi
+
+  # Mistral Vibe
+  if [[ -n "${MISTRAL_API_KEY:-}" && -n "${MISTRAL_SESSION:-}" ]]; then
+    echo "Mistral:mistral-vibe"
+    return
+  fi
+
+  # Qwen Code
+  if [[ -n "${QWEN_SESSION:-}" ]]; then
+    echo "Qwen:qwen-code"
+    return
+  fi
+
+  # Kiro (AWS)
+  if [[ -n "${KIRO_SESSION:-}" || -n "${KIRO_CLI:-}" ]]; then
+    echo "Kiro:kiro-cli"
+    return
+  fi
+
+  # Autohand Code
+  if [[ -n "${AUTOHAND_SESSION:-}" ]]; then
+    echo "Autohand:autohand-code"
+    return
+  fi
+
+  # ZAI (Zhipu)
+  if [[ -n "${ZAI_SESSION:-}" ]]; then
+    echo "ZAI:zai-cli"
+    return
+  fi
+
+  # Shell-GPT
+  if [[ -n "${SHELL_GPT_SESSION:-}" ]]; then
+    echo "ShellGPT:shell-gpt"
+    return
+  fi
+
+  # Ollama (local)
+  if [[ -n "${OLLAMA_SESSION:-}" ]]; then
+    echo "Ollama:${OLLAMA_MODEL:-local}"
+    return
+  fi
+
+  # Fallback: check if any known AI process is in the tree.
+  # Uses the same overridable default as the env-var path above so a
+  # single export keeps both sites in sync.
+  if pgrep -q "claude" 2>/dev/null; then
+    echo "Claude:${claude_default}"
+    return
+  fi
+
+  # No AI detected
+  echo ""
+}
+
+# ── Branding Signature ────────────────────────────────────────────────
+sig_file="/Users/seb/.euxis/data/config/branding/signature.txt"
+msg_file="${1:-}"
+
+[[ -n "$msg_file" && -f "$msg_file" ]] || exit 0
+
+# Skip merge commits, fixups, and squashes
+first_line="$(head -1 "$msg_file")"
+if [[ "$first_line" =~ ^Merge\ |^fixup!\ |^squash!\  ]]; then
+  exit 0
+fi
+
+# ── Inject AI attribution if not already present ──────────────────────
+# Line-anchored: a literal mention of `Assisted-by:` inside the commit
+# body (e.g. when the commit message *describes* the trailer) must not
+# fool the hook into skipping injection. Trailers always start at col 1.
+if ! grep -Eq "^Assisted-by:" "$msg_file"; then
+  ai_agent="$(detect_ai_agent)"
+  if [[ -n "$ai_agent" ]]; then
+    printf '\nAssisted-by: %s\n' "$ai_agent" >> "$msg_file"
+  fi
+fi
+
+# ── Inject branding signature if not already present ──────────────────
+[[ -f "$sig_file" ]] || exit 0
+
+first_sig_line="$(sed -n '1p' "$sig_file")"
+[[ -n "$first_sig_line" ]] || exit 0
+
+if grep -Fqx -- "$first_sig_line" "$msg_file"; then
+  exit 0
+fi
+
+if [[ -s "$msg_file" ]]; then
+  printf '\n' >> "$msg_file"
+fi
+
+cat "$sig_file" >> "$msg_file"
+printf '\n' >> "$msg_file"

package/dot_config/goose/config.yaml

@@ -9,11 +9,11 @@ providers:
   anthropic:
     model: claude-opus-4-6
     max_tokens: 8192
-  
+
   openai:
     model: gpt-4o
     max_tokens: 4096
-  
+
   ollama:
     model: llama3.2
     host: http://localhost:11434

package/dot_config/gtk-3.0/gtk.css.tmpl

@@ -1,6 +1,6 @@
 {{- /* GTK-3.0 custom CSS — colors from SSOT theme manifest */ -}}
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- $is_dark := eq $t.mode "dark" -}}
 
 /* GTK3 Custom Styling for {{ .theme }} */

package/dot_config/gtk-3.0/settings.ini.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- $is_dark := eq $t.mode "dark" -}}
 {{- $gtk_theme := $t.app.gtk_theme -}}
 {{- $icon_theme := $t.app.gtk_icon -}}

package/dot_config/gtk-4.0/gtk.css.tmpl

@@ -1,6 +1,6 @@
 {{- /* GTK-4.0 custom CSS — colors from SSOT theme manifest */ -}}
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- $is_dark := eq $t.mode "dark" -}}
 
 /* GTK4 Custom Styling for {{ .theme }} */

package/dot_config/gtk-4.0/settings.ini.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- $is_dark := eq $t.mode "dark" -}}
 
 [Settings]

package/dot_config/kitty/kitty.conf.tmpl

@@ -21,10 +21,10 @@ cursor_trail 0
 linux_display_server wayland
 {{- end }}
 
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 {{- $tt := $t -}}
-{{- $themeName := default "macos-monterey-dark" .theme -}}
+{{- $themeName := default "big-sur-dark" .theme -}}
 {{- if hasSuffix "-light" $themeName -}}
   {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
   {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}

package/dot_config/mise/config.toml

@@ -80,7 +80,7 @@ kiro-cli = "latest"
 "npm:autohand-cli" = "latest"
 "npm:@qwen-code/qwen-code" = "latest"
 "npm:@guizmo-ai/zai-cli" = "latest"
-"pipx:mistral-vibe" = "latest"
+# "pipx:mistral-vibe" = "latest"  # disabled 2026-05-12: dep `mistralai` quarantined on PyPI; re-enable when restored
 
 # Task runners
 task = "latest"

package/dot_config/niri/config.kdl.tmpl

@@ -9,8 +9,8 @@
     {{- $hw = $m -}}
   {{- end -}}
 {{- end -}}
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 config-notification {
     disable-failed
 }

package/dot_config/nushell/cached_eval.nu

@@ -0,0 +1,80 @@
+# 🅳🅾🆃🅵🅸🅻🅴🆂 — Nushell _cached_eval equivalent
+# <https://dotfiles.io>
+#
+# Minimum-viable port of the zsh/fish `_cached_eval` primitive. Caches
+# the output of tool-init commands (e.g. `starship init nu`, `mise
+# activate nu`) so subsequent shells source the cached file instead of
+# spawning a subprocess. Cache invalidates on binary mtime change.
+#
+# Closes the Nushell-parity AC of #880. Tier-3 by design: not as
+# feature-rich as the zsh implementation (no malware-pattern screening,
+# no per-tool timing telemetry, no atomic write under concurrent
+# shells) — those layers are not yet worth Nushell's parse-time
+# constraints. See ADR-011.
+
+# Path resolution helpers — Nushell's parse-time evaluator means we
+# can't compute these at import time as cleanly as fish/zsh do.
+export def --env _cached_eval_cache_dir [] {
+    let xdg = ($env | get -i XDG_CACHE_HOME)
+    if $xdg != null and ($xdg | str length) > 0 {
+        $"($xdg)/nushell"
+    } else {
+        $"($env.HOME)/.cache/nushell"
+    }
+}
+
+# _cached_eval — cache the output of `<tool> <args...>` to disk and
+# print the cached path. The caller is responsible for `source`-ing
+# the result (Nushell `source` is parse-time, so this can't be
+# wrapped further without losing the parse-time semantics).
+#
+# Returns: the path to the cached file (string), or empty string when
+# the tool is unavailable / the eval failed.
+export def _cached_eval [tool: string, ...args: string] {
+    let cache_dir = (_cached_eval_cache_dir)
+    mkdir $cache_dir
+    let label = ($tool + "-" + ($args | str join "-") | str replace --all "/" "_" | str replace --all " " "-")
+    let cache_file = $"($cache_dir)/($label).nu"
+
+    # Check binary mtime against cache mtime for invalidation.
+    let tool_path = (which $tool | get -i 0.path)
+    if $tool_path == null {
+        return ""
+    }
+
+    let fresh = if ($cache_file | path exists) {
+        let tool_mtime = (ls $tool_path | get -i 0.modified)
+        let cache_mtime = (ls $cache_file | get -i 0.modified)
+        if $tool_mtime != null and $cache_mtime != null {
+            $cache_mtime > $tool_mtime
+        } else {
+            false
+        }
+    } else {
+        false
+    }
+
+    if not $fresh {
+        let output = (try { run-external $tool ...$args | complete } catch { { stdout: "", exit_code: 1 } })
+        if $output.exit_code == 0 and ($output.stdout | str length) > 0 {
+            $output.stdout | save -f $cache_file
+        } else {
+            return ""
+        }
+    }
+
+    $cache_file
+}
+
+# Convenience wrapper for the common case: caller wants the source
+# path, falls back to silent no-op if the tool is absent.
+export def _cached_eval_path_or_skip [tool: string, ...args: string] {
+    let p = (_cached_eval $tool ...$args)
+    if ($p | str length) == 0 {
+        ""
+    } else if ($p | path exists) {
+        $p
+    } else {
+        ""
+    }
+}

package/dot_config/nushell/env.nu.tmpl

@@ -28,28 +28,36 @@ let paths = [
 
 $env.PATH = ($env.PATH | split row (char esep) | append $paths | uniq)
 
-# Setup shell tool integrations
+# Setup shell tool integrations.
+#
+# The `_cached_eval` module (loaded via dot_config/nushell/cached_eval.nu)
+# adds mtime-based cache invalidation so we don't spawn `starship init
+# nu` / `mise activate nu` / etc. on every shell start. Closes the
+# Nushell parity AC of #880.
 mkdir ~/.cache/nushell
 
-# Starship prompt
-if (which starship | length) > 0 {
-    starship init nu | save -f ~/.cache/nushell/starship.nu
-} else {
+use ~/.config/nushell/cached_eval.nu *
+
+# The empty-file fallbacks preserve the `source` targets in
+# config.nu.tmpl — Nushell parses sources at parse time and refuses
+# to start if any source path is missing.
+
+if (_cached_eval_path_or_skip starship init nu | str length) == 0 {
     "" | save -f ~/.cache/nushell/starship.nu
+} else {
+    cp (_cached_eval starship init nu) ~/.cache/nushell/starship.nu
 }
 
-# Zoxide directory jumper
-if (which zoxide | length) > 0 {
-    zoxide init nushell | save -f ~/.cache/nushell/zoxide.nu
-} else {
+if (_cached_eval_path_or_skip zoxide init nushell | str length) == 0 {
     "" | save -f ~/.cache/nushell/zoxide.nu
+} else {
+    cp (_cached_eval zoxide init nushell) ~/.cache/nushell/zoxide.nu
 }
 
-# Atuin shell history
-if (which atuin | length) > 0 {
-    atuin init nu | save -f ~/.cache/nushell/atuin.nu
-} else {
+if (_cached_eval_path_or_skip atuin init nu | str length) == 0 {
     "" | save -f ~/.cache/nushell/atuin.nu
+} else {
+    cp (_cached_eval atuin init nu) ~/.cache/nushell/atuin.nu
 }
 
 # Generate Nushell alias cache from bash alias library

package/dot_config/shell/00-core-paths.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc / dot_config/fish/conf.d/; inherits set -euo pipefail from the caller.
 ## Construct PATH hierarchy for all language runtimes and tools.
 ##
 ## Sets PATH precedence: Local bin > Language runtimes > Homebrew > System.

package/dot_config/shell/05-core-safety.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Sourced by dot_zshrc.tmpl / dot_bashrc; inherits set -euo pipefail from the caller.
 
 # 05-safety.sh: Core Safety Settings
 # Part of the "Core Layer"

package/dot_config/shell/10-secrets.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Sourced by dot_zshrc.tmpl / dot_bashrc; inherits set -euo pipefail from the caller.
 
 # 10-secrets.sh: Optional secret bucket auto-loader
 # Loads configured secret buckets into the current shell via `dot env load`.

package/dot_config/shell/40-fzf-defaults.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc; inherits set -euo pipefail from the caller.
 # 🅳🅾🆃🅵🅸🅻🅴🆂 (v{{ .dotfiles_version }})
 # FZF Shared Configuration for all shells (Zsh, Bash, Fish)
 

package/dot_config/shell/40-ls-colors.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
 # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# Sourced by dot_zshrc.tmpl / dot_bashrc; inherits set -euo pipefail from the caller.
 
 # Set ls colors with GNU/BSD detection and caching
 # GNU coreutils: LS_COLORS via dircolors

package/dot_config/shell/50-logic-functions-core.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc / fish bridge; inherits set -euo pipefail from the caller.
 
 # Core Functions (Generated by Chezmoi) - minimal set
 

package/dot_config/shell/50-logic-functions.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc / fish bridge; inherits set -euo pipefail from the caller.
 
 # Universal Functions (Generated by Chezmoi)
 

package/dot_config/shell/51-logic-functions-extra.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc (lazy layer); inherits set -euo pipefail from the caller.
 
 # Extra Functions (Generated by Chezmoi) - loaded on demand
 # Group-wise lazy loaders to reduce first-load cost.

package/dot_config/shell/90-ux-aliases.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc / fish bridge; inherits set -euo pipefail from the caller.
 ## WARNING: Alias names must be unique across all alias source files in
 ## .chezmoitemplates/aliases/. Duplicates silently overwrite earlier
 ## definitions. Run the alias-conflict test to detect collisions.

package/dot_config/shell/91-ux-aliases-lazy.sh.tmpl

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Sourced by dot_zshrc.tmpl / dot_bashrc (lazy layer); inherits set -euo pipefail from the caller.
 
 # Tool-Specific Aliases — Lazy Load (Generated by Chezmoi)
 # These are loaded after the first prompt via precmd hook to keep startup fast.