@sebastienrousseau/dotfiles 0.2.500 → 0.2.501

package/docs/manual/01-concepts/05-self-healing.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Self-Healing
 
 `.dotfiles` detects, diagnoses, and repairs configuration drift, missing tools, broken symlinks, and environmental damage — often without user intervention.
@@ -124,11 +128,13 @@ dot rollback clean        # delete snapshots older than 30 days
 ```
 
 Snapshots include:
+
 - Every file chezmoi would have overwritten
 - The previous `.chezmoidata.toml` and `chezmoi.toml`
 - A pointer to the Git SHA at apply time
 
 They do **not** include:
+
 - Generated caches (`~/.cache/`)
 - Tool binaries (Mise-managed)
 - External state (databases, remote repos)
@@ -138,7 +144,7 @@ They do **not** include:
 `dot bundle` creates a self-contained archive that can restore the workstation without network access:
 
 ```
-dotfiles-bundle-v0.2.500-20260416.tar.zst
+dotfiles-bundle-v0.2.501-20260416.tar.zst
 ├── source/              # Full git clone at current HEAD
 ├── tools/               # Pre-built chezmoi binary + mise
 ├── secrets/             # Age-encrypted snapshot of ~/.config/age/
@@ -173,6 +179,7 @@ Recovery use case: you're stranded on a new machine with no internet. Copy the b
 | Compliance (policy hash match) | 15 |
 
 Scores:
+
 - 90-100 — healthy
 - 70-89 — minor issues
 - 50-69 — needs attention

package/docs/manual/02-tutorials/01-first-install.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Tutorial: First Install
 
 End-to-end installation and verification, from zero to a fully-working environment in under 5 minutes.
@@ -16,6 +20,7 @@ bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfil
 ```
 
 The installer:
+
 1. Verifies prerequisites (`git`, `curl`, write access to `~`)
 2. Downloads chezmoi via the SHA256-verified installer
 3. Clones the dotfiles source to `~/.dotfiles`

package/docs/manual/02-tutorials/02-add-wallpaper.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Tutorial: Add a Wallpaper → Theme
 
 Drop an image. Get a fully-WCAG-AAA terminal theme.
@@ -57,6 +61,7 @@ bash scripts/theme/merge-wallpaper.sh mytheme
 ```
 
 This:
+
 1. Resizes both to 6016×6016 (preserving aspect ratio, center-cropped)
 2. Encodes both into a single `.heic` via `heif-enc`
 3. Injects `apple_desktop:apr` XMP metadata (image 0 = light, image 1 = dark)

package/docs/manual/02-tutorials/03-create-profile.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Tutorial: Create a Machine Profile
 
 Machine profiles tell chezmoi how to render templates differently on each host — display scale, keyboard layout, performance preset, available features.
@@ -236,3 +241,4 @@ Profiles let one source tree produce correctly-configured output on every host y
 - [Concept: Fleet Architecture](../01-concepts/04-fleet.md)
 - [Reference: Templates](../03-reference/04-templates.md)
 - [Reference: Feature Flags](../03-reference/05-feature-flags.md)
+{% endraw %}

package/docs/manual/02-tutorials/04-encrypt-secret.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Tutorial: Encrypt a Secret
 
 How to store an API key (or any secret) encrypted in the repository using Age and SOPS — decrypted automatically on `dot apply`.
@@ -273,3 +278,4 @@ chezmoi apply --verbose dot_tmp/stripe-key.txt
 - [Concept: Trust Model](../01-concepts/02-trust-model.md) — the security architecture
 - [Reference: Secret operations](../03-reference/01-dot-cli.md#secrets)
 - [Security: Secret management](../../security/SECRETS.md)
+{% endraw %}

package/docs/manual/02-tutorials/05-deploy-fleet.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Tutorial: Deploy to a Fleet
 
 Roll out `.dotfiles` across multiple workstations and verify they're in sync.
@@ -111,7 +115,7 @@ dot fleet attest
 Expected output:
 
 ```
-Fleet Attestation — v0.2.500
+Fleet Attestation — v0.2.501
 
 Host           Git SHA    Policy    Tools OK   Drift   Verified
 -------------- ---------- --------- ---------- ------- --------

package/docs/manual/03-reference/01-dot-cli.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Reference: The `dot` CLI
 
 Complete command reference. Every subcommand, every flag, every exit code.

package/docs/manual/03-reference/02-config-files.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Reference: Configuration Files
 
 Every config file read or written by `.dotfiles`, with its schema and purpose.
@@ -28,7 +33,7 @@ Every config file read or written by `.dotfiles`, with its schema and purpose.
 
 ```toml
 # Version — bumped by version-sync.sh at release time
-dotfiles_version = "0.2.500"
+dotfiles_version = "0.2.501"
 
 # Machine preset — override in ~/.config/chezmoi/chezmoi.toml per host
 machine = ""
@@ -214,7 +219,7 @@ Agent Card (MCP A2A spec):
 ```json
 {
   "name": "dotfiles-agent",
-  "version": "0.2.500",
+  "version": "0.2.501",
   "capabilities": ["chezmoi.apply", "theme.switch", "secrets.decrypt"],
   "policy_hash": "0x7f2a..."
 }
@@ -257,3 +262,4 @@ _build/
 - [Template Variables](04-templates.md)
 - [Feature Flags](05-feature-flags.md)
 - [First Install Tutorial](../02-tutorials/01-first-install.md)
+{% endraw %}

package/docs/manual/03-reference/03-environment.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Reference: Environment Variables
 
 All environment variables that affect `.dotfiles` behaviour.

package/docs/manual/03-reference/04-templates.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Reference: Template Variables
 
 Every variable available to chezmoi templates (`.tmpl` files).
@@ -8,7 +13,7 @@ Flat top-level keys:
 
 | Variable | Type | Example |
 |:---|:---|:---|
-| `.dotfiles_version` | string | `"0.2.500"` |
+| `.dotfiles_version` | string | `"0.2.501"` |
 | `.theme` | string | `"tahoe-dark"` |
 | `.machine` | string | `"macbook-t2"` |
 | `.profile` | string | `"laptop"` |
@@ -182,3 +187,4 @@ If any template fails to render, the build breaks before merge.
 - [Chezmoi template reference](https://www.chezmoi.io/reference/templates/)
 - [Configuration Files](02-config-files.md)
 - [Create a Profile tutorial](../02-tutorials/03-create-profile.md)
+{% endraw %}

package/docs/manual/03-reference/05-feature-flags.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Reference: Feature Flags
 
 Feature flags toggle optional subsystems. Set in `.chezmoidata.toml`, override per-preset in `.chezmoidata/hardware.toml`.
@@ -28,6 +33,7 @@ The effective value is `mergeOverwrite` of global + preset features.
 ### `dms` — Dank Material Shell
 
 When `true`:
+
 - Configures DMS IPC for theme sync
 - Enables Quickshell templates
 - Sets up per-monitor wallpaper via `dms ipc wallpaper`
@@ -37,6 +43,7 @@ Requires: Niri + Quickshell + DMS installed.
 ### `linux_desktop` — Linux Desktop Configs
 
 When `true`:
+
 - Enables GTK 3/4 theme generation from `themes.toml`
 - Configures `gsettings color-scheme` behaviour
 - Generates desktop file entries for installed tools
@@ -46,6 +53,7 @@ No effect on macOS.
 ### `niri` — Niri Window Manager
 
 When `true`:
+
 - Generates `~/.config/niri/config.kdl`
 - Enables Niri keybindings from `keybinds.toml`
 - Configures workspace rules per preset
@@ -55,6 +63,7 @@ Requires: Niri installed.
 ### `waybar` — Waybar Status Bar
 
 When `true`:
+
 - Generates `~/.config/waybar/config.jsonc` + `style.css`
 - Hooks into theme switching via `dot-theme-sync`
 
@@ -116,3 +125,4 @@ Flags can be deprecated without breaking existing hosts. The deprecation process
 
 - [Configuration Files](02-config-files.md)
 - [Create a Profile](../02-tutorials/03-create-profile.md)
+{% endraw %}

package/docs/manual/04-cookbook/01-recipes.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Cookbook: Recipes
 
 Thirty short recipes for common tasks.

package/docs/manual/04-cookbook/02-troubleshooting.md

@@ -1,3 +1,8 @@
+---
+render_with_liquid: false
+---
+{% raw %}
+
 # Cookbook: Troubleshooting
 
 Symptom → cause → fix.
@@ -9,6 +14,7 @@ Symptom → cause → fix.
 **Cause**: `/usr/local/bin` or `~/.local/bin` not in PATH at install time.
 
 **Fix**:
+
 ```sh
 export PATH="$HOME/.local/bin:$PATH"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/master/install.sh)"
@@ -19,6 +25,7 @@ bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfil
 **Cause**: Permission issue on `~/.local`.
 
 **Fix**:
+
 ```sh
 mkdir -p ~/.local/share ~/.local/state ~/.local/bin
 chmod 755 ~/.local ~/.local/share
@@ -29,6 +36,7 @@ chmod 755 ~/.local ~/.local/share
 **Cause**: Slow network or corporate proxy.
 
 **Fix**:
+
 ```sh
 export https_proxy=$HTTP_PROXY  # if applicable
 # Or pre-download chezmoi manually
@@ -43,6 +51,7 @@ apt install chezmoi             # Debian 13+
 **Cause**: Chezmoi detected local drift on a managed file.
 
 **Fix**:
+
 ```sh
 dot diff                    # see what differs
 dot apply --force           # overwrite local
@@ -55,10 +64,13 @@ dot add <path>              # import local change to source
 **Cause**: A template references a missing data field.
 
 **Fix**: Check that your `.chezmoidata.toml` has the required field. For example:
+
 ```sh
 chezmoi execute-template '{{- $hw := index .hardware .machine -}}{{ $hw.wm }}'
 ```
+
 If `machine` is not set in your `~/.config/chezmoi/chezmoi.toml`, `index` returns nil. Set:
+
 ```toml
 [data]
 machine = "macbook-t2"
@@ -69,6 +81,7 @@ machine = "macbook-t2"
 **Cause**: Cached init scripts are stale.
 
 **Fix**:
+
 ```sh
 dot clean-cache
 dot prewarm
@@ -82,6 +95,7 @@ exec $SHELL -l
 **Cause**: No wallpapers discovered, themes.toml not generated.
 
 **Fix**:
+
 ```sh
 dot theme rebuild --force
 ```
@@ -91,6 +105,7 @@ dot theme rebuild --force
 **Cause**: Theme name doesn't exist in `themes.toml`.
 
 **Fix**:
+
 ```sh
 dot theme list            # see valid names
 dot theme rebuild --force # regenerate if expected but missing
@@ -101,10 +116,12 @@ dot theme rebuild --force # regenerate if expected but missing
 **Cause**: System Settings UI cached the old value.
 
 **Fix**: `dot-theme-sync` now calls `killall cfprefsd SystemUIServer Dock "System Settings"`. If it still doesn't refresh:
+
 ```sh
 killall -KILL Dock SystemUIServer
 sudo killall -KILL cfprefsd
 ```
+
 Or log out and back in.
 
 ### Symptom: Wallpaper not applying
@@ -112,6 +129,7 @@ Or log out and back in.
 **Cause**: Wrong format or missing DE support on Linux.
 
 **Fix**:
+
 ```sh
 # Check the wallpaper file exists
 ls -la ~/Pictures/Wallpapers/
@@ -127,6 +145,7 @@ sudo apt install imagemagick-7
 **Cause**: Ghostty DBus or SIGUSR2 signaling failed.
 
 **Fix**:
+
 ```sh
 # Restart Ghostty manually, or:
 pkill -USR2 ghostty 2>/dev/null
@@ -140,6 +159,7 @@ pkill -USR2 ghostty 2>/dev/null
 **Cause**: `~/.config/age/keys.txt` missing or unreadable.
 
 **Fix**:
+
 ```sh
 ls -la ~/.config/age/keys.txt
 # Should be: -rw------- 1 user user
@@ -153,6 +173,7 @@ chmod 600 ~/.config/age/keys.txt
 **Cause**: Your Age public key isn't listed in the file's recipients.
 
 **Fix**:
+
 ```sh
 # Add your public key to .sops.yaml
 sops updatekeys path/to/file.sops.yaml
@@ -165,6 +186,7 @@ sops updatekeys path/to/file.sops.yaml
 **Cause**: A secret was committed to Git history.
 
 **Fix**:
+
 ```sh
 # Immediate mitigation
 dot verify --security   # confirm which file
@@ -184,6 +206,7 @@ git filter-repo --path <file> --invert-paths
 **Cause**: Heavy modules loaded synchronously.
 
 **Fix**:
+
 ```sh
 dot benchmark --detailed
 # Identify which module is slow
@@ -200,6 +223,7 @@ dot prewarm
 **Cause**: Multiple health issues.
 
 **Fix**:
+
 ```sh
 dot doctor --verbose    # see every failure
 dot heal                # auto-fix what's possible
@@ -211,6 +235,7 @@ dot doctor              # recheck
 **Cause**: Mise shim not activated.
 
 **Fix**:
+
 ```sh
 eval "$(mise activate zsh)"  # or fish, bash
 dot doctor                    # confirm
@@ -223,6 +248,7 @@ dot doctor                    # confirm
 **Cause**: `~/.cargo/config.toml` not managed or was overridden.
 
 **Fix**:
+
 ```sh
 chezmoi apply ~/.cargo/config.toml
 cat ~/.cargo/config.toml | grep target-dir
@@ -234,6 +260,7 @@ cat ~/.cargo/config.toml | grep target-dir
 **Cause**: Created by shell init, but shell wasn't restarted.
 
 **Fix**:
+
 ```sh
 mkdir -p /tmp/builds
 # Or restart shell
@@ -247,6 +274,7 @@ exec $SHELL -l
 **Cause**: A fleet host is unreachable.
 
 **Fix**:
+
 ```sh
 # Check connectivity to each host
 for host in macbook-t2 surface-pro geekom-a9; do
@@ -261,6 +289,7 @@ done
 **Cause**: Remote host's SSH public key not in local `~/.ssh/allowed_signers`.
 
 **Fix**:
+
 ```sh
 # On the remote host:
 ssh remote-host 'cat ~/.ssh/id_ed25519.pub'
@@ -274,6 +303,7 @@ ssh remote-host 'cat ~/.ssh/id_ed25519.pub'
 **Cause**: `shfmt` formatting differs from canonical.
 
 **Fix**:
+
 ```sh
 shfmt -w -i 2 -ci scripts/**/*.sh install.sh .chezmoitemplates/**/*.sh
 # Commit the changes
@@ -284,6 +314,7 @@ shfmt -w -i 2 -ci scripts/**/*.sh install.sh .chezmoitemplates/**/*.sh
 **Cause**: New code added without tests.
 
 **Fix**:
+
 ```sh
 bash examples/example-coverage-gate.sh
 # Identifies uncovered modules
@@ -317,3 +348,4 @@ chezmoi --version
 - [Self-Healing concept](../01-concepts/05-self-healing.md)
 - [FAQ](03-faq.md)
 - [Security: Incident Response](../../security/INCIDENT_RESPONSE.md)
+{% endraw %}

package/docs/manual/04-cookbook/03-faq.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Cookbook: Frequently Asked Questions
 
 ## General
@@ -36,6 +40,7 @@ CIELAB distances approximate human perception. A Δ in RGB might look identical
 ### Why not pre-built themes like Catppuccin or Rosé Pine?
 
 Two reasons:
+
 1. **Maintenance** — 100+ themes × 20+ applications = thousands of template variables to keep in sync. Generation from wallpapers eliminates that.
 2. **User agency** — users bring their own wallpapers. The theme adapts to them, not the other way around.
 
@@ -52,6 +57,7 @@ You don't directly — the accent hue is extracted from the wallpaper. But `_com
 ### Can I use my own theme without a wallpaper?
 
 Not directly — the engine expects a source image. You could:
+
 1. Pick a wallpaper whose palette you want
 2. Let the engine generate the theme
 3. Lock the generated `.toml` entry by copying to a non-regenerated path
@@ -116,6 +122,7 @@ DOTFILES_DEBUG=1 zsh -i -c exit 2>&1 | grep -E '\[debug [0-9]+ms\]'
 ```
 
 Common culprits:
+
 - nvm loading Node on every shell (use lazy loading)
 - `mise activate` with aggressive hook-env (set `activate_aggressive = false`)
 - Plugin manager scanning for updates
@@ -153,6 +160,7 @@ To maximize adoption and contribution. MIT is compatible with commercial use; co
 ### Why no GUI configurator?
 
 Text + Git is the optimal interface for a workstation baseline:
+
 - Versioned (Git history)
 - Reproducible (same input → same output)
 - Auditable (diff-able)

package/docs/manual/05-appendices/A-platform-matrix.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Appendix A: Platform Support Matrix
 
 ## Supported Platforms

package/docs/manual/05-appendices/B-security-checklist.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Appendix B: Security Checklist
 
 Run this checklist after a fresh install and quarterly afterwards.
@@ -40,10 +44,12 @@ Run this checklist after a fresh install and quarterly afterwards.
 If a secret leak is detected:
 
 1. **Contain** — remove from history, force-push
+
    ```sh
    git filter-repo --path <file> --invert-paths
    git push --force
    ```
+
 2. **Rotate** — change the leaked secret upstream (Stripe key, SSH key, etc.)
 3. **Audit** — check who/what had access
 4. **Notify** — inform affected parties if required

package/docs/manual/05-appendices/C-glossary.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Appendix C: Glossary
 
 | Term | Definition |

package/docs/manual/05-appendices/D-bibliography.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Appendix D: Bibliography
 
 Cited works and recommended reading.
@@ -51,4 +55,4 @@ Cited works and recommended reading.
 
 ## Author
 
-- **Rousseau, S.** *Dotfiles v0.2.500.* <https://github.com/sebastienrousseau/dotfiles>
+- **Rousseau, S.** *Dotfiles v0.2.501.* <https://github.com/sebastienrousseau/dotfiles>

package/docs/manual/05-appendices/E-license.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Appendix E: License
 
 ## MIT License

package/docs/manual/_toc.yml

@@ -2,7 +2,7 @@
 # Determines concatenation order for single-page HTML/PDF/EPUB
 title: "The .dotfiles Manual"
 subtitle: "A Trusted Agent Workstation for macOS, Linux, and WSL"
-version: "0.2.500"
+version: "0.2.501"
 
 sections:
   - file: 00-introduction.md

package/docs/manual/command-index.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Command Index
 
 Alphabetical list of `dot` subcommands referenced in the manual.

package/docs/manual/concept-index.md

@@ -1,3 +1,7 @@
+---
+render_with_liquid: false
+---
+
 # Concept Index
 
 Alphabetical list of concepts covered in the manual.

package/docs/operations/ATTESTATION.md

@@ -1,8 +1,13 @@
+---
+render_with_liquid: false
+---
+
 # Workstation Attestation
 
 `dot attest` exports a machine-readable record of the current workstation state.
 
 It captures:
+
 - dotfiles version
 - platform and architecture
 - Git signing settings