@sebastienrousseau/dotfiles 0.2.500 → 0.2.501

package/dot_config/shell/README.md

@@ -7,13 +7,13 @@ Welcome to your universally compatible, high-performance dotfiles configuration,
 - **Universal Support**: Works seamlessly on macOS, Linux (Ubuntu/Debian), and Windows (WSL).
 - **Fast Startup**: Optimized with `zcompile` and lazy-loading. Benchmarks vary by machine; use `DOTFILES_FAST=1` for the quickest first prompt.
 - **Modern Core**: Replaces legacy Unix tools with Rust-based alternatives:
-    - `eza` (ls)
-    - `bat` (cat)
-    - `ripgrep` (grep)
-    - `zoxide` (cd)
-    - `atuin` (history)
-    - `yazi` (files)
-    - `zellij` (multiplexer)
+  - `eza` (ls)
+  - `bat` (cat)
+  - `ripgrep` (grep)
+  - `zoxide` (cd)
+  - `atuin` (history)
+  - `yazi` (files)
+  - `zellij` (multiplexer)
 - **Starship Prompt**: A fast, customizable, cross-shell prompt.
 - **Optimized Vim**: Vim settings are kept minimal and fast by default.
 - **Modular Design**: Configuration is split into small, manageable templates.
@@ -23,13 +23,15 @@ Welcome to your universally compatible, high-performance dotfiles configuration,
 ## Get started
 
 ### Install
+
 To install these dotfiles on a new machine, run:
 
 ```bash
-sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.500/install.sh)"
+sh -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.501/install.sh)"
 ```
 
 This command will:
+
 1. Install `chezmoi`.
 2. Clone this repository.
 3. Install required packages (Homebrew/Apt).
@@ -40,7 +42,9 @@ This command will:
 ## Keep it current
 
 ### macOS
+
 Updates are handled via [Homebrew](https://brew.sh/).
+
 1. Edit `~/.dotfiles/dot_config/shell/Brewfile.cli` and `~/.dotfiles/dot_config/shell/Brewfile.cask`.
 2. Run `chezmoi apply`.
    - This triggers `run_onchange_darwin_install-packages.sh.tmpl`, which runs `brew bundle` for CLI and GUI packages.
@@ -48,16 +52,20 @@ Updates are handled via [Homebrew](https://brew.sh/).
    - Optional: `duti` applies default app bindings from `~/.config/duti/defaults.duti`.
 
 ### VS Code extensions
+
 1. Edit `~/.config/vscode/extensions.txt`.
 2. Run `chezmoi apply` to install missing extensions (if `code` is available).
 
 ### Linux and WSL
+
 Updates are handled via `apt-get` (Ubuntu/Debian).
+
 1. Run `chezmoi apply`.
    - This checks for package updates defined in `run_onchange_linux_install-packages.sh.tmpl`.
    - Optional Flatpak list is read from `~/.config/flatpak/flatpak.list`.
 
 ### Vim plugins
+
 1. Edit `~/.dotfiles/dot_vimrc`.
 2. Run `chezmoi apply`.
    - This automatically runs `vim +PlugInstall +PlugClean +qa`.
@@ -69,12 +77,14 @@ Updates are handled via `apt-get` (Ubuntu/Debian).
 If you are migrating from an old `~/.dotfiles` setup:
 
 1. **Backup**:
+
    ```bash
    mv ~/.dotfiles ~/.dotfiles.legacy
    cp ~/.zshrc ~/.zshrc.bak
    ```
 
 2. **Initialize Chezmoi**:
+
    ```bash
    git clone https://github.com/sebastienrousseau/dotfiles.git ~/.dotfiles
    chezmoi apply
@@ -115,6 +125,7 @@ The configuration is managed in `~/.dotfiles`.
 ## Use it
 
 ### Apply changes
+
 After editing any file in `~/.dotfiles`, apply the changes to your home directory:
 
 ```bash
@@ -195,6 +206,7 @@ ${EDITOR:-nano} ~/.config/chezmoi/chezmoi.toml
 ```
 
 Fields:
+
 - `git_name`
 - `git_email`
 - `git_signingkey`
@@ -211,6 +223,7 @@ terminal_font_size = 12
 ```
 
 Available themes:
+
 - `tokyonight-night` (best dark default)
 - `tokyonight-day` (best light default)
 - `tokyonight-storm`
@@ -242,6 +255,7 @@ Available themes:
 ```
 
 ### Add aliases
+
 1. Navigate to `~/.dotfiles/.chezmoitemplates/aliases/`.
 2. Create a new file (e.g., `mytool/mytool.aliases.sh`) or edit an existing one.
 3. Add your aliases.
@@ -250,12 +264,14 @@ Available themes:
 **Note:** Files in `macOS/` are only included on macOS systems.
 
 ### Add functions
+
 1. Navigate to `~/.dotfiles/.chezmoitemplates/functions/`.
 2. Create a new `.sh` file.
 3. Define your function with a usage comment.
 4. Run `chezmoi apply`.
 
 ## Performance
+
 - **Lazy Loading**: Heavy tools (like `nvm`, `rbenv`) are lazy-loaded. They only initialize when you type the command.
 - **Zcompile**: Your `.zshrc` and generated config files are automatically compiled to `.zwc` bytecode for faster parsing.
 - **Fast Mode**: Set `DOTFILES_FAST=1` to skip heavy startup work (plugins, completions, prompt tooling, AI helpers) for the quickest possible first prompt.
@@ -264,4 +280,5 @@ Available themes:
 - **Deferred Hooks**: Use `DOTFILES_DEFER_COMPINIT=1`, `DOTFILES_DEFER_TOOLS=1`, and `DOTFILES_DEFER_ZINIT_MODE=preexec` to move work after the first command.
 
 ## Test
+
 This repository includes GitHub Actions CI to test the configuration on macOS, Ubuntu, and Windows for every Pull Request.

package/dot_config/starship.toml.tmpl

@@ -5,8 +5,8 @@
 # Raise timeout to avoid spurious prompt warnings.
 command_timeout = 5000
 add_newline = true
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 # Palette driven by starship_palette in .chezmoidata/themes.toml
 palette = "{{ $t.app.starship_palette }}"
 

package/dot_config/tmux/tmux.conf.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- $bg := $t.term.bg -}}
 {{- $fg := $t.term.fg -}}
 {{- $accent := $t.ui.accent -}}
@@ -141,7 +141,7 @@ bind K confirm-before -p "kill all sessions? (y/n)" kill-server
 
 # ╔══════════════════════════════════════════════════════════════════════════╗
 # ║  THEME — Powerline Status Bar                                           ║
-# ║  Colors from .chezmoidata/themes.toml ({{ default "macos-monterey-dark" .theme }})  ║
+# ║  Colors from .chezmoidata/themes.toml ({{ default "big-sur-dark" .theme }})  ║
 # ╚══════════════════════════════════════════════════════════════════════════╝
 
 # --- Status Bar ---

package/dot_config/user-dirs.dirs

@@ -7,3 +7,4 @@ XDG_PICTURES_DIR="$HOME/Pictures"
 XDG_VIDEOS_DIR="$HOME/Videos"
 XDG_TEMPLATES_DIR="$HOME/Templates"
 XDG_PUBLICSHARE_DIR="$HOME/Public"
+XDG_PROJECTS_DIR="$HOME/Projects"

package/dot_config/vscode/settings.json.tmpl

@@ -1,7 +1,7 @@
 {
   // Theme Configuration - Dynamically set based on chezmoi theme variable
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
   "workbench.colorTheme": "{{ $t.app.vscode }}",
   "workbench.preferredDarkColorTheme": "{{ $t.app.vscode_dark }}",
   "workbench.preferredLightColorTheme": "{{ $t.app.vscode_light }}",

package/dot_config/waybar/config.jsonc.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- /* Copyright (c) 2015-2026 Dotfiles. All rights reserved. */ -}}
 // Waybar configuration for niri — {{ .theme }}
 // Generated by chezmoi · dotfiles v{{ .dotfiles_version }}

package/dot_config/waybar/style.css.tmpl

@@ -1,5 +1,5 @@
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end -}}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end -}}
 {{- /* Copyright (c) 2015-2026 Dotfiles. All rights reserved. */ -}}
 {{- $bg := $t.term.bg -}}
 {{- $fg := $t.term.fg -}}

package/dot_config/wezterm/wezterm.lua.tmpl

@@ -7,10 +7,10 @@ end
 
 {{- $fontFamily := default "JetBrainsMono Nerd Font" .terminal_font_family -}}
 {{- $fontSize := default 12 .terminal_font_size -}}
-{{- $t := index .themes (default "macos-monterey-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "macos-monterey-dark" -}}{{- end }}
+{{- $t := index .themes (default "big-sur-dark" .theme) -}}
+{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
 {{- $tt := $t -}}
-{{- $themeName := default "macos-monterey-dark" .theme -}}
+{{- $themeName := default "big-sur-dark" .theme -}}
 {{- if hasSuffix "-light" $themeName -}}
   {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
   {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}

package/dot_config/zsh/dot_zshrc.tmpl

@@ -28,7 +28,7 @@ export FORCE_COLOR_OS="Windows"
 
 {{- $profile := default "laptop" .profile -}}
 {{- $features := default (dict "zsh" true "nvim" true "tmux" true "gui" true "secrets" true) .features -}}
-{{- $theme := default "macos-monterey-dark" .theme -}}
+{{- $theme := default "big-sur-dark" .theme -}}
 {{- $strict_mode := default false (index . "strict_mode") -}}
 {{- $enabled := list -}}
 {{- range $k, $v := $features }}{{- if $v }}{{- $enabled = append $enabled $k }}{{- end }}{{- end }}
@@ -108,27 +108,141 @@ fi
 _SHELL_CACHE="${XDG_CACHE_HOME:-$HOME/.cache}/zsh"
 [[ -d "$_SHELL_CACHE" ]] || mkdir -p "$_SHELL_CACHE"
 
+# Append a timing event to ${XDG_STATE_HOME:-~/.local/state}/dotfiles/eval-timings.jsonl.
+# Read by `dot perf --by-tool` to attribute startup time per tool.
+_cached_eval_log_timing() {
+  emulate -L zsh
+  setopt no_clobber 2>/dev/null && unsetopt no_clobber
+  local label="$1" t0="$2" t1="$3" rc="${4:-0}" shell="${5:-zsh}"
+  local log_dir="${XDG_STATE_HOME:-$HOME/.local/state}/dotfiles"
+  [[ -d "$log_dir" ]] || mkdir -p "$log_dir" 2>/dev/null || return 0
+  local logfile="$log_dir/eval-timings.jsonl"
+  [[ -f "$logfile" ]] || touch "$logfile" 2>/dev/null || return 0
+  local ms_int=0
+  if [[ -n "$t0" && -n "$t1" ]]; then
+    ms_int=$(printf '%.0f' "$(( (t1 - t0) * 1000 ))" 2>/dev/null) || ms_int=0
+  fi
+  printf '{"ts":"%s","shell":"%s","label":"%s","ms":%s,"rc":%s}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$shell" "$label" "$ms_int" "$rc" \
+    >> "$logfile" 2>/dev/null || true
+}
+
+# Cache and source a tool's init output, with mtime/realpath/file-arg invalidation.
+#
+# Runs <cmd args...> on cache miss, vets the output for shell-injection
+# patterns, writes atomically, sources, and precompiles via zcompile in
+# the background. Cache invalidates when the binary's mtime is newer,
+# its realpath has changed (PATH-shadow swap), or a file-path argument
+# is newer than the cache.
+#
+# @arg $1 string Cache label (cache file: $_SHELL_CACHE/<label>.zsh)
+# @arg $2..N string Command and args to run on cache miss
+# @env EVALCACHE_DISABLE Set to "true" to bypass cache read AND write
+# @env EVALCACHE_TIMING  Set to "1" to log per-call timing for `dot perf --by-tool`
+# @stdout Sourced cache content
+# @stderr Warning on init failure or suspicious-output rejection
+# @exitcode 0 Cache hit, successful regeneration, or successful bypass
+# @exitcode 1 Suspicious pattern detected in init output
+# @exitcode * Init command's exit code on non-zero return
 _cached_eval() {
+  if [[ "$EVALCACHE_TIMING" != "1" ]]; then
+    _cached_eval_impl "$@"
+    return
+  fi
+  zmodload zsh/datetime 2>/dev/null
+  local _ce_t0="${EPOCHREALTIME:-$(date +%s.%N 2>/dev/null || echo 0)}"
+  _cached_eval_impl "$@"
+  local _ce_rc=$?
+  local _ce_t1="${EPOCHREALTIME:-$(date +%s.%N 2>/dev/null || echo 0)}"
+  _cached_eval_log_timing "${1:-unknown}" "$_ce_t0" "$_ce_t1" "$_ce_rc" "zsh"
+  return $_ce_rc
+}
+
+_cached_eval_impl() {
   local label=$1; shift
+
+  # Debug bypass: skip cache read AND write entirely.
+  # Set EVALCACHE_DISABLE=true to eval directly without touching cache files.
+  if [[ "$EVALCACHE_DISABLE" == "true" ]]; then
+    eval "$("$@" 2>/dev/null)"
+    return $?
+  fi
+
   local cache="$_SHELL_CACHE/${label}.zsh"
+  local pin="${cache}.bin"
   local bin="${commands[$1]}"
-  if [[ -f "$cache" ]] && [[ -z "$bin" || "$cache" -nt "$bin" ]]; then
-    source "$cache"
-  else
-    local init_output
-    local suspicious_re
-    init_output=$("$@" 2>/dev/null)
-    suspicious_re='(curl[[:space:]].*\|[[:space:]]*(ba)?sh|wget[[:space:]].*\|[[:space:]]*(ba)?sh|nc[[:space:]]+-e|/dev/tcp/|base64[[:space:]]+-d[[:space:]]*\|)'
-    # Reject suspicious patterns indicating malicious payloads
-    if printf '%s\n' "$init_output" | LC_ALL=C grep -Eqs -- "$suspicious_re"; then
-      print -u2 "[WARN] Suspicious output from $label init, skipping"
-      return 1
-    fi
-    print -r -- "$init_output" > "${cache}.tmp.$$"
-    mv "${cache}.tmp.$$" "$cache"
+  local real_bin=""
+  [[ -n "$bin" ]] && real_bin=${bin:A}
+
+  # Cache is valid when: it exists non-empty, the binary is not newer than it,
+  # the recorded realpath (if any) still matches the current realpath, and no
+  # file-path argument has been modified since cache write.
+  local cache_valid=1
+  if [[ ! -s "$cache" ]]; then
+    cache_valid=0
+  elif [[ -n "$bin" && "$bin" -nt "$cache" ]]; then
+    cache_valid=0
+  elif [[ -f "$pin" && -n "$real_bin" ]]; then
+    local pinned_real
+    pinned_real=$(<"$pin")
+    [[ -n "$pinned_real" && "$pinned_real" != "$real_bin" ]] && cache_valid=0
+  fi
+  if (( cache_valid )); then
+    local arg
+    for arg in "${@:2}"; do
+      if [[ -f "$arg" && "$arg" -nt "$cache" ]]; then
+        cache_valid=0
+        break
+      fi
+    done
+  fi
+
+  if (( cache_valid )); then
     source "$cache"
-    { zcompile "$cache" } &!
+    return
+  fi
+
+  local init_output rc
+  init_output=$("$@" 2>/dev/null)
+  rc=$?
+  if (( rc != 0 )); then
+    print -u2 "[WARN] $label init exited $rc; not caching"
+    return $rc
+  fi
+
+  # Reject suspicious patterns indicating malicious payloads
+  local suspicious_re='(curl[[:space:]].*\|[[:space:]]*(ba)?sh|wget[[:space:]].*\|[[:space:]]*(ba)?sh|nc[[:space:]]+-e|/dev/tcp/|base64[[:space:]]+-d[[:space:]]*\|)'
+  if printf '%s\n' "$init_output" | LC_ALL=C grep -Eqs -- "$suspicious_re"; then
+    print -u2 "[WARN] Suspicious output from $label init, skipping"
+    return 1
+  fi
+
+  print -r -- "$init_output" > "${cache}.tmp.$$"
+  mv "${cache}.tmp.$$" "$cache"
+  if [[ -n "$real_bin" ]]; then
+    print -r -- "$real_bin" > "${pin}.tmp.$$"
+    mv "${pin}.tmp.$$" "$pin"
   fi
+  source "$cache"
+  { zcompile "$cache" } &!
+}
+
+# Clear cache files written by _cached_eval.
+#
+# Safe by design: only deletes *.zsh / *.zsh.bin / *.zwc files in
+# $_SHELL_CACHE, leaving any unrelated content untouched.
+#
+# @noargs
+# @stdout Single-line summary: "Cleared N cached eval file(s) from <dir>"
+# @exitcode 0 Always (no-op when cache dir doesn't exist)
+_cached_eval_clear() {
+  local cache_dir="$_SHELL_CACHE"
+  [[ -d "$cache_dir" ]] || return 0
+  local count=0 f
+  for f in "$cache_dir"/*.zsh(N) "$cache_dir"/*.zsh.bin(N) "$cache_dir"/*.zwc(N); do
+    rm -f -- "$f" && (( count++ ))
+  done
+  printf 'Cleared %d cached eval file(s) from %s\n' "$count" "$cache_dir"
 }
 
 # Lightweight precmd hook manager (faster than add-zsh-hook)
@@ -259,6 +373,23 @@ unset _core_layers
 # Starship prompt (eager — must survive cache clears for consistent UI)
 if [[ "$DOTFILES_ARTIFACT_MODE" != "1" ]] && (( ${+commands[starship]} )); then
   _cached_eval starship-init starship init zsh
+  # Transient Prompt: collapse the prompt of past commands to the
+  # [character] glyph after Enter, reducing scrollback noise.
+  #
+  # Forward-compatibility hook. Starship's `enable_transience` function
+  # is currently defined only by `starship init fish` (upstream issue
+  # starship/starship#3522 tracks the zsh equivalent). On zsh the
+  # `${+functions[enable_transience]}` guard evaluates to 0, so the
+  # block silently no-ops. When upstream ships the zsh-side function,
+  # this code activates automatically — no zshrc change needed.
+  #
+  # The `_DOTFILES_STARSHIP_TRANSIENT` flag prevents the lazy-hydration
+  # path below (which also re-runs starship init) from binding the
+  # widgets twice.
+  if [[ -z "${_DOTFILES_STARSHIP_TRANSIENT:-}" ]] && (( ${+functions[enable_transience]} )); then
+    enable_transience
+    _DOTFILES_STARSHIP_TRANSIENT=1
+  fi
 fi
 
 # User-local modules (aliases, functions — not managed by chezmoi)
@@ -458,7 +589,13 @@ _dotfiles_async_init() {
           _cached_eval atuin-init atuin init zsh
           ;;
         starship)
-          [[ "$DOTFILES_ARTIFACT_MODE" == "0" ]] && _cached_eval starship-init starship init zsh
+          if [[ "$DOTFILES_ARTIFACT_MODE" == "0" ]]; then
+            _cached_eval starship-init starship init zsh
+            if [[ -z "${_DOTFILES_STARSHIP_TRANSIENT:-}" ]] && (( ${+functions[enable_transience]} )); then
+              enable_transience
+              _DOTFILES_STARSHIP_TRANSIENT=1
+            fi
+          fi
           ;;
         zoxide)
           _cached_eval zoxide-init zoxide init zsh

package/dot_config/zsh/rc.d/00-alias-shims.zsh

@@ -1,13 +1,35 @@
 # shellcheck shell=bash
 # Cognitive Shell Enhancements
+#
+# Carapace is deferred to first `preexec` (closes #862). The eager
+# `_cached_eval carapace ...` call previously cost ~15ms on every
+# interactive shell start even with the cache warm — that work is
+# only needed when the user invokes tab-completion, which happens
+# after the first command at the earliest. Opt out by setting
+# `DOTFILES_DEFER_CARAPACE=0` (rarely useful).
 if [[ -o interactive ]]; then
-  # Carapace completions — cached to avoid subshell on every startup
-  if command -v carapace >/dev/null 2>&1; then
-    if typeset -f _cached_eval >/dev/null 2>&1; then
-      _cached_eval carapace carapace _carapace zsh
-    else
-      source <(carapace _zsh)
+  : ${DOTFILES_DEFER_CARAPACE:=1}
+
+  _dotfiles_carapace_init() {
+    if command -v carapace >/dev/null 2>&1; then
+      if typeset -f _cached_eval >/dev/null 2>&1; then
+        _cached_eval carapace carapace _carapace zsh
+      else
+        source <(carapace _zsh)
+      fi
     fi
+  }
+
+  if [[ "${DOTFILES_DEFER_CARAPACE}" == "1" ]] && typeset -f _dotfiles_add_preexec >/dev/null 2>&1; then
+    _dotfiles_carapace_deferred() {
+      _dotfiles_del_preexec _dotfiles_carapace_deferred
+      _dotfiles_carapace_init
+    }
+    _dotfiles_add_preexec _dotfiles_carapace_deferred
+  else
+    # Fallback to eager init when preexec helpers aren't available
+    # (e.g., DOTFILES_FAST=1 paths that skip the zshrc helper block).
+    _dotfiles_carapace_init
   fi
 
   # thefuck — lazy-loaded to avoid ~200ms startup penalty

package/dot_config/zsh/rc.d/30-options.zsh.tmpl

@@ -112,24 +112,44 @@ if [[ "${DOTFILES_FAST:-0}" != "1" ]] && [[ "${DOTFILES_ULTRA_FAST:-0}" != "1" ]
   }
   sdk() { _lazy_load_sdkman; sdk "$@"; }
 fi
-# Defer compinit to first prompt — opt-in for max performance
+# Defer compinit to first prompt — opt-in for max performance.
+#
+# Cache lifecycle (closes #864):
+#   * dump path lives at $XDG_CACHE_HOME/zsh/zcompdump-$ZSH_VERSION so
+#     the user-state directory is clean (and zsh's own search picks up
+#     `.zwc` siblings automatically — non-laptop profiles get the
+#     benefit even without re-running compinit).
+#   * `compinit -C` (skip security-check, use the cached dump) is used
+#     when the dump is fresh (< 24 h); full `compinit` rebuilds when
+#     the dump is older.
+#   * The dump is `zcompile`d in the background after each rebuild so
+#     subsequent shells load the bytecode form directly.
+#   * The fpath corpus itself is precompiled at chezmoi-apply time by
+#     `run_onchange_after_zcompile-completions.sh.tmpl` — that runs
+#     once per fpath change, not per shell start.
 : ${DOTFILES_ENABLE_COMPINIT:=0}
 : ${DOTFILES_DEFER_COMPINIT:=1}
+
+_DOTFILES_ZCOMPDUMP="${XDG_CACHE_HOME:-${HOME}/.cache}/zsh/zcompdump-${ZSH_VERSION:-${ZSH_NAME:-unknown}}"
+
 if [[ "${DOTFILES_ENABLE_COMPINIT}" == "1" ]] && [[ "${DOTFILES_FAST:-0}" != "1" ]] && [[ "${DOTFILES_ULTRA_FAST:-0}" != "1" ]]; then
   autoload -Uz compinit
+  [[ -d "${_DOTFILES_ZCOMPDUMP:h}" ]] || mkdir -p "${_DOTFILES_ZCOMPDUMP:h}"
+
   _deferred_compinit() {
     if [[ "${DOTFILES_DEFER_COMPINIT}" == "1" ]]; then
       _dotfiles_del_preexec _deferred_compinit
     else
       _dotfiles_del_precmd _deferred_compinit
     fi
-    if [[ -n ${ZDOTDIR}/.zcompdump(#qN.mh+24) ]]; then
-      compinit
+    # Fresh dump (< 24 h) → use cached fast path; otherwise rebuild.
+    if [[ -n ${_DOTFILES_ZCOMPDUMP}(#qN.mh+24) ]]; then
+      compinit -d "${_DOTFILES_ZCOMPDUMP}"
     else
-      compinit -C
+      compinit -C -d "${_DOTFILES_ZCOMPDUMP}"
     fi
-    # Compile zcompdump to bytecode in background for faster subsequent loads
-    { [[ ! -f "${ZDOTDIR}/.zcompdump.zwc" || "${ZDOTDIR}/.zcompdump" -nt "${ZDOTDIR}/.zcompdump.zwc" ]] && zcompile "${ZDOTDIR}/.zcompdump" } &!
+    # Compile to bytecode in background for faster subsequent loads
+    { [[ ! -f "${_DOTFILES_ZCOMPDUMP}.zwc" || "${_DOTFILES_ZCOMPDUMP}" -nt "${_DOTFILES_ZCOMPDUMP}.zwc" ]] && zcompile "${_DOTFILES_ZCOMPDUMP}" } &!
   }
   if [[ "${DOTFILES_DEFER_COMPINIT}" == "1" ]]; then
     _dotfiles_add_preexec _deferred_compinit

package/dot_local/bin/executable_bm

@@ -2,6 +2,8 @@
 # Universal directory bookmarking with history support
 # Works across Bash, Zsh, and Fish
 
+set -eu
+
 # Cross-platform sed in-place (BSD vs GNU)
 _sed_i() {
   if sed --version >/dev/null 2>&1; then

package/dot_local/bin/executable_dot

@@ -3,7 +3,7 @@
 # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
 set -euo pipefail
 
-# Dotfiles CLI Entry Point - v0.2.500
+# Dotfiles CLI Entry Point - v0.2.501
 
 # Ensure XDG Base Directory variables are set
 export XDG_CONFIG_HOME="${XDG_CONFIG_HOME:-$HOME/.config}"
@@ -21,7 +21,7 @@ if [ -e "${HOME}/.nix-profile/etc/profile.d/nix.sh" ]; then
   . "${HOME}/.nix-profile/etc/profile.d/nix.sh"
 fi
 
-VERSION="0.2.500"
+VERSION="0.2.501"
 
 COMMAND="${1:-}"
 if [ -n "${1:-}" ]; then
@@ -344,12 +344,19 @@ ai-setup|ai
 ai-query|ai
 cl|ai
 claude|ai
+codex|ai
+copilot|ai
 gemini|ai
+goose|ai
 kiro|ai
 sgpt|ai
 ollama|ai
 opencode|ai
 aider|ai
+autohand|ai
+vibe|ai
+qwen|ai
+zai|ai
 env|tools
 profile|tools
 tools|tools

package/dot_local/bin/executable_dot-load-benchmark

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-set -e
+set -euo pipefail
 
 # Measure time to load heavy layers in a fresh interactive shell
 # Usage: dot-load-benchmark [runs]

package/dot_local/bin/executable_notify

@@ -2,6 +2,8 @@
 # Universal desktop notification (notify)
 # Supports macOS (osascript), Linux (notify-send), and WSL (powershell)
 
+set -eu
+
 title="${1:-Notification}"
 message="${2:-}"
 

package/dot_local/bin/executable_open

@@ -2,6 +2,8 @@
 # Universal file opener (open)
 # Maps to open (macOS), xdg-open (Linux), and explorer.exe (WSL)
 
+set -eu
+
 target="${1:-.}"
 
 # Helper for rich feedback if TTY is present

package/dot_local/bin/executable_tour

@@ -1,6 +1,8 @@
 #!/bin/sh
 # Interactive Tour using Gum
-# Part of Dotfiles v0.2.500
+# Part of Dotfiles v0.2.501
+
+set -eu
 
 if ! command -v gum >/dev/null; then
   echo "Error: 'gum' is not installed."
@@ -37,7 +39,7 @@ banner='██████╗  ██████╗ ████████╗
 ██████╔╝╚██████╔╝   ██║   ██║     ██║███████╗███████╗███████║
 ╚═════╝  ╚═════╝    ╚═╝   ╚═╝     ╚═╝╚══════╝╚══════╝╚══════╝
 
-v0.2.500 · Infrastructure‑grade shell environment'
+v0.2.501 · Infrastructure‑grade shell environment'
 
 gum style \
   --foreground 212 --border-foreground 212 --border double \

package/dot_local/bin/executable_up

@@ -2,7 +2,9 @@
 # Universal directory navigation with history support
 # Works across Bash, Zsh, and Fish
 
-levels=$1
+set -eu
+
+levels=${1:-1}
 target=".."
 
 case "$levels" in