@sebastienrousseau/dotfiles 0.2.500 → 0.2.502

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (237) hide show
  1. package/CHANGELOG.md +154 -0
  2. package/README.md +113 -45
  3. package/docs/.vitepress/reports/localization-readability-audit.md +4 -0
  4. package/docs/AI.md +8 -2
  5. package/docs/CNAME +1 -0
  6. package/docs/COPYRIGHT +1 -1
  7. package/docs/NAMING_CONVENTIONS.md +7 -0
  8. package/docs/README.md +4 -0
  9. package/docs/_config.yml +59 -0
  10. package/docs/adr/ADR-001-ci-cd-pipeline.md +17 -0
  11. package/docs/adr/ADR-002-shell-performance.md +9 -0
  12. package/docs/adr/ADR-003-security-first.md +18 -0
  13. package/docs/adr/ADR-004-cli-architecture.md +14 -0
  14. package/docs/adr/ADR-005-chezmoi-choice.md +10 -0
  15. package/docs/adr/ADR-006-shell-selection.md +9 -0
  16. package/docs/adr/ADR-007-multi-shell-parity.md +10 -1
  17. package/docs/adr/ADR-008-alias-system-architecture.md +10 -0
  18. package/docs/adr/ADR-009-wallpaper-driven-theming.md +131 -0
  19. package/docs/adr/ADR-010-starship-transient-prompt.md +144 -0
  20. package/docs/adr/ADR-011-nushell-tier3-keep.md +144 -0
  21. package/docs/adr/README.md +7 -0
  22. package/docs/architecture/ARCHITECTURE.md +4 -0
  23. package/docs/architecture/INTEROP.md +8 -0
  24. package/docs/architecture/REPO_LAYOUT.md +5 -1
  25. package/docs/architecture/WALKTHROUGH.md +4 -0
  26. package/docs/architecture/fleet-deployment.md +4 -0
  27. package/docs/archive/EUXIS_2026_REVIEW.md +11 -3
  28. package/docs/archive/LEGACY_ROADMAP.md +45 -27
  29. package/docs/archive/MILESTONE_v0.2.493.md +4 -0
  30. package/docs/archive/PLAN.md +46 -8
  31. package/docs/archive/REPO_AUDIT.md +8 -0
  32. package/docs/guides/INSTALL.md +4 -0
  33. package/docs/guides/NEOVIM_IDE_GUIDE.md +9 -0
  34. package/docs/guides/THEMING.md +8 -0
  35. package/docs/guides/TROUBLESHOOTING.md +28 -0
  36. package/docs/guides/WSL2_NIX_TROUBLESHOOTING.md +70 -1
  37. package/docs/index.md +6 -2
  38. package/docs/interop/A2A.md +7 -0
  39. package/docs/interop/POWERSHELL.md +102 -0
  40. package/docs/manual/00-introduction.md +5 -1
  41. package/docs/manual/01-concepts/01-architecture.md +4 -0
  42. package/docs/manual/01-concepts/02-trust-model.md +6 -2
  43. package/docs/manual/01-concepts/03-theme-engine.md +4 -0
  44. package/docs/manual/01-concepts/04-fleet.md +7 -1
  45. package/docs/manual/01-concepts/05-self-healing.md +8 -1
  46. package/docs/manual/02-tutorials/01-first-install.md +5 -0
  47. package/docs/manual/02-tutorials/02-add-wallpaper.md +5 -0
  48. package/docs/manual/02-tutorials/03-create-profile.md +6 -0
  49. package/docs/manual/02-tutorials/04-encrypt-secret.md +6 -0
  50. package/docs/manual/02-tutorials/05-deploy-fleet.md +5 -1
  51. package/docs/manual/03-reference/01-dot-cli.md +67 -45
  52. package/docs/manual/03-reference/02-config-files.md +8 -2
  53. package/docs/manual/03-reference/03-environment.md +4 -0
  54. package/docs/manual/03-reference/04-templates.md +7 -1
  55. package/docs/manual/03-reference/05-feature-flags.md +72 -3
  56. package/docs/manual/04-cookbook/01-recipes.md +4 -0
  57. package/docs/manual/04-cookbook/02-troubleshooting.md +32 -0
  58. package/docs/manual/04-cookbook/03-faq.md +8 -0
  59. package/docs/manual/05-appendices/A-platform-matrix.md +4 -0
  60. package/docs/manual/05-appendices/B-security-checklist.md +6 -0
  61. package/docs/manual/05-appendices/C-glossary.md +4 -0
  62. package/docs/manual/05-appendices/D-bibliography.md +5 -1
  63. package/docs/manual/05-appendices/E-license.md +4 -0
  64. package/docs/manual/_toc.yml +1 -1
  65. package/docs/manual/command-index.md +16 -8
  66. package/docs/manual/concept-index.md +4 -0
  67. package/docs/manual/index.md +66 -0
  68. package/docs/operations/ATTESTATION.md +5 -0
  69. package/docs/operations/CI_CADENCE.md +107 -0
  70. package/docs/operations/CI_COMPOSITES.md +156 -0
  71. package/docs/operations/COMPLETIONS.md +123 -0
  72. package/docs/operations/COVERAGE.md +182 -0
  73. package/docs/operations/DRIFT.md +107 -0
  74. package/docs/operations/HARD_AUDIT_2026.md +631 -0
  75. package/docs/operations/MAINTENANCE.md +5 -1
  76. package/docs/operations/MIGRATION.md +14 -6
  77. package/docs/operations/OPERATIONS.md +24 -0
  78. package/docs/operations/PERFORMANCE.md +133 -0
  79. package/docs/operations/REGISTRY.md +89 -0
  80. package/docs/operations/RELIABILITY.md +6 -0
  81. package/docs/operations/ROADMAP.md +36 -18
  82. package/docs/operations/ROADMAP_2026.md +665 -0
  83. package/docs/operations/TESTING.md +4 -0
  84. package/docs/operations/TRACEABILITY.md +7 -0
  85. package/docs/operations/TRUSTED_AGENT_WORKSTATION.md +4 -0
  86. package/docs/operations/VERSION_SYNC.md +54 -5
  87. package/docs/reference/ALIASES.md +7 -0
  88. package/docs/reference/ALIASES_CHEATSHEET.md +5 -1
  89. package/docs/reference/ALIASES_DEPRECATIONS.md +5 -1
  90. package/docs/reference/FEATURES.md +4 -0
  91. package/docs/reference/FONTS.md +4 -0
  92. package/docs/reference/POWERSHELL_PARITY.md +80 -0
  93. package/docs/reference/PROFILES.md +4 -0
  94. package/docs/reference/SCREENSHOTS.md +4 -0
  95. package/docs/reference/SCRIPTS.md +4 -0
  96. package/docs/reference/SUPPORT_MATRIX.md +10 -4
  97. package/docs/reference/THEMES.md +4 -0
  98. package/docs/reference/TOOLS.md +4 -0
  99. package/docs/reference/UTILS.md +16 -12
  100. package/docs/registry.json +6 -0
  101. package/docs/security/AI_ACT_COMPLIANCE.md +4 -0
  102. package/docs/security/AUDIT_BYPASS.md +103 -0
  103. package/docs/security/AUTOMATION_SECRETS.md +4 -0
  104. package/docs/security/CI_EGRESS_ALLOWLIST.md +127 -0
  105. package/docs/security/CI_PINNING.md +113 -0
  106. package/docs/security/COMMIT_SIGNING.md +138 -0
  107. package/docs/security/COMPLIANCE.md +5 -0
  108. package/docs/security/DEPS_DEV_EXCEPTIONS.md +86 -0
  109. package/docs/security/DISCLOSURE.md +130 -0
  110. package/docs/security/ENCRYPTION.md +5 -0
  111. package/docs/security/FMEA.md +4 -0
  112. package/docs/security/HISTORY_FILTERING.md +132 -0
  113. package/docs/security/INCIDENT_RESPONSE.md +4 -0
  114. package/docs/security/INSTALL_VERIFICATION.md +122 -0
  115. package/docs/security/KEYS.md +4 -0
  116. package/docs/security/KEY_ROTATION.md +85 -1
  117. package/docs/security/MCP_POLICY.md +9 -0
  118. package/docs/security/POLICY_RELEASES.md +4 -0
  119. package/docs/security/README.md +4 -0
  120. package/docs/security/SCORECARD.md +140 -0
  121. package/docs/security/SECRETS.md +12 -0
  122. package/docs/security/SECURITY.md +4 -0
  123. package/docs/security/SECURITY_CHECKLIST.md +11 -0
  124. package/docs/security/SHELL_EXEMPTIONS.md +145 -0
  125. package/docs/security/SOUP_REGISTER.md +4 -0
  126. package/docs/security/THREAT_MODEL.md +10 -0
  127. package/docs/security/VERIFICATION_VALIDATION.md +5 -1
  128. package/docs/security/security-pubkey.asc +15 -0
  129. package/docs/themes/README.md +4 -0
  130. package/docs/themes/VISUAL_INTEGRITY_REPORT.md +4 -0
  131. package/dot_config/ai/identity.md +3 -0
  132. package/dot_config/ai/patterns/architect.md +2 -0
  133. package/dot_config/ai/patterns/hardener.md +2 -0
  134. package/dot_config/ai/patterns/refactor.md +2 -0
  135. package/dot_config/alacritty/alacritty.toml.tmpl +3 -3
  136. package/dot_config/atuin/config.toml.tmpl +47 -0
  137. package/dot_config/dotfiles/agent-card.json +1 -1
  138. package/dot_config/dotfiles/boot/README.md +2 -0
  139. package/dot_config/dotfiles/grub/README.md +2 -0
  140. package/dot_config/dotfiles/lock/README.md +2 -0
  141. package/dot_config/fish/conf.d/direnv.fish +4 -0
  142. package/dot_config/fish/conf.d/init.fish.tmpl +21 -0
  143. package/dot_config/fish/conf.d/mise-activate.fish +5 -0
  144. package/dot_config/fish/functions/_cached_eval.fish +84 -11
  145. package/dot_config/fish/functions/_cached_eval_clear.fish +17 -0
  146. package/dot_config/foot/foot.ini.tmpl +3 -3
  147. package/dot_config/fuzzel/fuzzel.ini.tmpl +2 -2
  148. package/dot_config/ghostty/config.tmpl +3 -3
  149. package/dot_config/git/hooks/executable_commit-msg +146 -0
  150. package/dot_config/goose/config.yaml +2 -2
  151. package/dot_config/gtk-3.0/gtk.css.tmpl +2 -2
  152. package/dot_config/gtk-3.0/settings.ini.tmpl +2 -2
  153. package/dot_config/gtk-4.0/gtk.css.tmpl +2 -2
  154. package/dot_config/gtk-4.0/settings.ini.tmpl +2 -2
  155. package/dot_config/kitty/kitty.conf.tmpl +3 -3
  156. package/dot_config/mise/config.toml +1 -1
  157. package/dot_config/niri/config.kdl.tmpl +2 -2
  158. package/dot_config/nushell/cached_eval.nu +80 -0
  159. package/dot_config/nushell/env.nu.tmpl +21 -13
  160. package/dot_config/shell/00-core-paths.sh.tmpl +9 -1
  161. package/dot_config/shell/05-core-safety.sh +1 -0
  162. package/dot_config/shell/10-secrets.sh +1 -0
  163. package/dot_config/shell/40-fzf-defaults.sh.tmpl +1 -0
  164. package/dot_config/shell/40-ls-colors.sh +1 -0
  165. package/dot_config/shell/50-logic-functions-core.sh.tmpl +1 -0
  166. package/dot_config/shell/50-logic-functions.sh.tmpl +1 -0
  167. package/dot_config/shell/51-logic-functions-extra.sh.tmpl +1 -0
  168. package/dot_config/shell/90-ux-aliases.sh.tmpl +1 -0
  169. package/dot_config/shell/91-ux-aliases-lazy.sh.tmpl +1 -0
  170. package/dot_config/shell/README.md +25 -8
  171. package/dot_config/starship.toml.tmpl +2 -2
  172. package/dot_config/tmux/tmux.conf.tmpl +3 -3
  173. package/dot_config/user-dirs.dirs +1 -0
  174. package/dot_config/vscode/settings.json.tmpl +2 -2
  175. package/dot_config/waybar/config.jsonc.tmpl +2 -2
  176. package/dot_config/waybar/style.css.tmpl +2 -2
  177. package/dot_config/wezterm/wezterm.lua.tmpl +3 -3
  178. package/dot_config/zsh/dot_zshrc.tmpl +207 -17
  179. package/dot_config/zsh/rc.d/00-alias-shims.zsh +28 -6
  180. package/dot_config/zsh/rc.d/30-options.zsh.tmpl +27 -7
  181. package/dot_local/bin/executable_bm +2 -0
  182. package/dot_local/bin/executable_dot +56 -9
  183. package/dot_local/bin/executable_dot-bootstrap +0 -1
  184. package/dot_local/bin/executable_dot-load-benchmark +1 -1
  185. package/dot_local/bin/executable_dot-theme-sync +8 -8
  186. package/dot_local/bin/executable_notify +2 -0
  187. package/dot_local/bin/executable_open +2 -0
  188. package/dot_local/bin/executable_tour +4 -2
  189. package/dot_local/bin/executable_up +3 -1
  190. package/dot_local/share/man/man1/dot.1 +1 -1
  191. package/dot_local/share/zsh/completions/_dot +4 -0
  192. package/install.sh +53 -38
  193. package/package.json +1 -1
  194. package/scripts/ci/check-dangerous-chmod.sh +19 -0
  195. package/scripts/ci/check-deps-dev.sh +236 -0
  196. package/scripts/ci/check-insecure-tls.sh +61 -0
  197. package/scripts/ci/check-regression-traceability.sh +67 -0
  198. package/scripts/ci/check-shell-preamble.sh +106 -0
  199. package/scripts/ci/dot-cli-startup-bench.sh +126 -0
  200. package/scripts/ci/install-chezmoi-verified.sh +4 -1
  201. package/scripts/ci/lint-reusable-pins.sh +78 -0
  202. package/scripts/ci/run-coverage.sh +451 -0
  203. package/scripts/ci/validate-chezmoidata.sh +25 -0
  204. package/scripts/ci/windows-smoke-test.ps1 +136 -0
  205. package/scripts/diagnostics/doctor.sh +203 -5
  206. package/scripts/diagnostics/drift-dashboard.sh +177 -13
  207. package/scripts/diagnostics/health.sh +21 -4
  208. package/scripts/diagnostics/perf.sh +304 -77
  209. package/scripts/diagnostics/workstation-attestation.sh +6 -1
  210. package/scripts/dot/commands/agent.sh +33 -27
  211. package/scripts/dot/commands/agents.sh +325 -0
  212. package/scripts/dot/commands/ai.sh +75 -10
  213. package/scripts/dot/commands/aliases.sh +10 -8
  214. package/scripts/dot/commands/core.sh +10 -4
  215. package/scripts/dot/commands/fleet.sh +278 -3
  216. package/scripts/dot/commands/init.sh +184 -0
  217. package/scripts/dot/commands/meta.sh +7 -4
  218. package/scripts/dot/commands/registry.sh +263 -0
  219. package/scripts/dot/commands/tools.sh +49 -1
  220. package/scripts/dot/lib/bento.sh +2 -1
  221. package/scripts/dot/lib/log.sh +6 -0
  222. package/scripts/dot/lib/platform.sh +22 -8
  223. package/scripts/dot/lib/ui.sh +145 -2
  224. package/scripts/dot/lib/utils.sh +6 -1
  225. package/scripts/git-hooks/pre-commit-audit.sh +1 -1
  226. package/scripts/git-hooks/pre-push +66 -3
  227. package/scripts/lib/secrets_provider.sh +32 -6
  228. package/scripts/ops/heal-chezmoi.sh +41 -6
  229. package/scripts/ops/rollback.sh +14 -0
  230. package/scripts/qa/powershell-contract.ps1 +95 -0
  231. package/scripts/security/check-disclosure-key-expiry.sh +110 -0
  232. package/scripts/security/lock-configs.sh +11 -2
  233. package/scripts/theme/merge-wallpaper.sh +4 -0
  234. package/scripts/theme/switch.sh +20 -10
  235. package/scripts/version-sync.sh +3 -0
  236. package/dot_config/atuin/config.toml +0 -40
  237. package/dot_local/bin/__pycache__/executable_dot-load-benchmark-ptycpython-312.pyc +0 -0
@@ -0,0 +1,131 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
5
+ # ADR-009: Wallpaper-Driven Theming Engine
6
+
7
+ ## Status
8
+
9
+ Accepted
10
+
11
+ ## Date
12
+
13
+ 2026-05-12
14
+
15
+ ## Context
16
+
17
+ Most dotfiles distributions ship a small fixed palette (Solarized, Gruvbox,
18
+ Tokyo Night) chosen once and recycled across every terminal, editor, and
19
+ status bar. When the user changes wallpapers — a daily occurrence on macOS
20
+ with HEIC dark/light variants and on Linux with `swww`/`hyprpaper` —
21
+ terminal chrome stays static, creating visual incoherence between the
22
+ chosen wallpaper and the surrounding tooling.
23
+
24
+ Manual palette switching solves coherence but adds friction: it requires
25
+ the user to (a) generate a palette, (b) regenerate config for every tool
26
+ (`alacritty.toml`, `kitty.conf`, `wezterm.lua`, neovim themes, …), and
27
+ (c) reload each tool. Tools like pywal/wal automate (a) and (b), but
28
+ pywal palettes routinely fail WCAG contrast thresholds (especially for
29
+ bright wallpapers) and lack support for many of the format files this
30
+ project ships.
31
+
32
+ **Problem:** Reuse the user's chosen wallpaper as the single source of
33
+ truth for terminal + status-bar colors, with accessibility guaranteed and
34
+ no manual regeneration step.
35
+
36
+ **Constraints:**
37
+
38
+ - Output must satisfy **WCAG 2.2 AAA contrast** (≥ 7:1 for normal text,
39
+ ≥ 4.5:1 for large text) — non-negotiable, the dotfiles ship as
40
+ workstation infrastructure.
41
+ - Palette extraction must work offline on both macOS (HEIC, dynamic
42
+ wallpapers with embedded dark/light variants) and Linux (PNG/JPEG via
43
+ `swww`, `hyprpaper`, `feh`, GNOME).
44
+ - Total time from "user changes wallpaper" → "all terminals retinted"
45
+ must be ≤ 3 seconds (rebuild trigger + write of templated configs).
46
+ - Targets include Warp, iTerm2, Alacritty, Ghostty, Kitty, Wezterm,
47
+ Tmux, Neovim (multiple themes), VS Code, Firefox theme JSON, Niri
48
+ borders, Waybar, GTK/Qt (matugen pipeline).
49
+
50
+ ## Decision
51
+
52
+ Build a self-contained theming engine — `dot theme rebuild` —
53
+ implemented in `scripts/theme/` with the following pipeline:
54
+
55
+ 1. **Source detection** — locate the active wallpaper across macOS
56
+ (`defaults read … wallpaper`), GNOME/dconf, KDE, Niri, swww,
57
+ hyprpaper. HEIC dynamic wallpapers decompose into dark and light
58
+ variants; both feed the engine.
59
+
60
+ 2. **Color extraction** — **K-Means clustering in CIELAB** (not RGB).
61
+ CIELAB is perceptually uniform, so distances correlate with the way
62
+ humans see color similarity. 8-cluster K-Means yields a 16-color
63
+ ANSI palette (8 normal + 8 bright) plus 4 accent slots.
64
+
65
+ 3. **Contrast enforcement** — compute WCAG 2.2 contrast against the
66
+ chosen background; nudge each foreground hue along the lightness
67
+ axis until the ratio passes AAA. The nudge stays within the cluster
68
+ to preserve aesthetic intent. If AAA cannot be reached, fall back to
69
+ AA with a logged warning (never silently regress).
70
+
71
+ 4. **Format generation** — emit one canonical TOML palette to
72
+ `.chezmoidata/themes.toml`, then run `chezmoi apply` so every
73
+ theme-aware template (terminals, editors, status bars, browsers)
74
+ regenerates from a single declarative source.
75
+
76
+ 5. **Companion pipelines** — `dot-theme-sync` feeds the same accent
77
+ colors to **matugen** for Material You-style GTK/Qt theming on
78
+ Linux, keeping desktop chrome in lockstep with the terminal.
79
+
80
+ The whole flow is idempotent (`chezmoi apply` is no-op if nothing
81
+ changed), repeatable, and tested under `tests/unit/theme/`.
82
+
83
+ ## Consequences
84
+
85
+ ### Positive
86
+
87
+ - Single source of truth: change the wallpaper, every tool retints in
88
+ one keystroke.
89
+ - Accessibility is structural, not opt-in — every shipped palette
90
+ passes WCAG AAA before it touches a config file.
91
+ - No competing "premium" dotfiles distribution (mathiasbynens, holman,
92
+ paulirish, omakub) ships anything similar. The engine is a defining
93
+ differentiator and surfaced in the README hero.
94
+ - Reuses chezmoi's templating — no new templating layer to maintain.
95
+
96
+ ### Negative
97
+
98
+ - K-Means on a 4K wallpaper takes ~500–800 ms; cached after first run,
99
+ but the cold path is non-trivial.
100
+ - HEIC handling on Linux requires `libheif` (extra dep on Debian/Ubuntu
101
+ before 24.04).
102
+ - Contrast enforcement can produce slightly different palettes from the
103
+ same wallpaper across major OS versions when system color profiles
104
+ differ (mitigated by snapshot tests).
105
+
106
+ ### Risks
107
+
108
+ - Wallpapers with extreme dynamic range (pure-white backgrounds, deep
109
+ monochrome) may fail to produce an aesthetically pleasing 16-color
110
+ palette even when WCAG AAA is satisfied. Mitigation: maintainer
111
+ curation of a fallback theme set in `.chezmoidata/themes.toml`.
112
+ - Future Wayland compositors may not expose a stable wallpaper-detection
113
+ API. The engine isolates source detection in a single module so the
114
+ blast radius of compositor churn is one file.
115
+
116
+ ## Alternatives Considered
117
+
118
+ | Alternative | Why rejected |
119
+ |---|---|
120
+ | pywal/wal | RGB K-Means, no WCAG enforcement, limited target list. |
121
+ | matugen alone | Excellent for GTK/Qt; not terminal-aware. We use it *in addition*, not instead. |
122
+ | Static curated themes (Tokyo Night et al.) | Loses the "wallpaper coherence" property that motivates the whole project. |
123
+ | Hand-roll per-terminal scripts | Doesn't compose with chezmoi; loses the single-source-of-truth invariant. |
124
+
125
+ ## References
126
+
127
+ - WCAG 2.2 contrast: <https://www.w3.org/TR/WCAG22/#contrast-minimum>
128
+ - CIELAB color space: <https://en.wikipedia.org/wiki/CIELAB_color_space>
129
+ - `scripts/theme/` — engine source
130
+ - `.chezmoidata/themes.toml` — output palette schema
131
+ - Issue #873 — captures this ADR alongside `llms.txt`
@@ -0,0 +1,144 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
5
+ # ADR-010: Enable Starship Transient Prompt in Zsh and Fish
6
+
7
+ ## Status
8
+
9
+ Accepted
10
+
11
+ ## Date
12
+
13
+ 2026-05-12
14
+
15
+ ## Context
16
+
17
+ Starship is the prompt renderer for both zsh and fish in this
18
+ distribution (pinned via `mise.toml`: `starship = "1.24.2"`).
19
+ A typical Starship prompt for this project renders 4–6 lines including
20
+ the directory, git branch + dirty markers, language toolchain version,
21
+ duration of the previous command, and a final `❯` line.
22
+
23
+ By default Starship emits this multi-line prompt on **every** previous
24
+ command as well as the current one. After 50 commands in a session, the
25
+ terminal scrollback contains 200–300 lines of historical prompts — most
26
+ of which only convey context that was relevant at the time the command
27
+ ran. Search through scrollback (Ctrl-r history, copy-paste, screenshots,
28
+ asciinema replay) is noisy.
29
+
30
+ Starship 1.24+ supports a **transient prompt** feature: when a command
31
+ finishes, the prompt that produced it is rewritten to a compact form
32
+ (e.g., `❯`) and the full prompt is re-emitted only at the live editing
33
+ line. The current command always shows the full prompt; history shows
34
+ only the compact form.
35
+
36
+ **Problem:** Reduce scrollback noise without sacrificing the live prompt's
37
+ rich context, and apply it consistently across the two interactive
38
+ shells we support as first-class.
39
+
40
+ **Constraints:**
41
+
42
+ - Must work in zsh and fish (the two Tier-1 shells per ADR-007).
43
+ - Must not interfere with `_cached_eval`'s startup-cost optimization
44
+ (the transient hook fires per-prompt, not per-shell-start).
45
+ - Must not break copy-paste of previous commands: the compact line
46
+ must still be `❯` (or similar) so `<Ctrl-shift-c>` over scrollback
47
+ yields runnable shell content if the user includes the prompt.
48
+
49
+ ## Decision
50
+
51
+ Call Starship's `enable_transience` shell function after the cached
52
+ `starship init` runs in each shell. We share one `starship.toml.tmpl`
53
+ across both shells; the transient prompt content is the existing
54
+ `[character]` block (no separate `[transient_*]` section needed).
55
+
56
+ - **Fish**: `dot_config/fish/conf.d/init.fish.tmpl` calls
57
+ `enable_transience` once the function is defined. `starship init
58
+ fish` defines it via `--print-full-init`. Result: `$fish_transient_prompt`
59
+ flips to `1` and the Enter handler is bound to
60
+ `__starship_transient_execute`. The compact prompt collapses past
61
+ scrollback as soon as the next command runs.
62
+
63
+ - **Zsh**: `dot_config/zsh/dot_zshrc.tmpl` carries the same
64
+ `enable_transience` call, guarded by
65
+ `(( ${+functions[enable_transience]} ))`. **Upstream Starship does
66
+ not ship a zsh-side `enable_transience` function yet** (tracked by
67
+ [starship/starship#3522](https://github.com/starship/starship/issues/3522)).
68
+ The guard returns 0, the block no-ops, and zsh keeps its full multi-
69
+ line prompt in scrollback for now. The code is a forward-compatibility
70
+ hook: when upstream ships the zsh function, the feature activates
71
+ automatically on the next `mise upgrade starship` with no zshrc edit.
72
+
73
+ Alternatives we rejected for zsh:
74
+
75
+ - **Roll our own `zle` widget that rewrites `$PROMPT` on Enter.**
76
+ Possible (the standard recipe overrides `accept-line` with a
77
+ transient widget). Rejected because:
78
+ (a) any hand-rolled implementation will conflict with upstream
79
+ once they ship the official function, forcing a removal,
80
+ (b) Starship's prompt is multi-line and ANSI-coloured; correctly
81
+ rewriting it from a custom widget requires duplicating
82
+ Starship's escape-code generation, which drifts with every
83
+ Starship release,
84
+ (c) it'd run inside `_cached_eval`'s eager-init path, complicating
85
+ the cache-invalidation semantics we documented in ADR-002.
86
+ - **Third-party zsh plugin (e.g. zsh-autocomplete's transient mode).**
87
+ Rejected because the upstream Starship fix is in active discussion
88
+ and a plugin adds a permanent dependency we'd then have to remove.
89
+ - **Disable zsh transient until upstream lands.** The current state.
90
+ Zsh users see the same scrollback density they had before this PR;
91
+ the visible improvement is fish-only. Honest trade-off.
92
+
93
+ - **Transient prompt content**: `❯` plus optional exit-code dot
94
+ (red dot if `$status != 0`). Keep it 1–3 characters so scrollback
95
+ density actually improves.
96
+
97
+ The toggle is exposed in `.chezmoidata.toml` as
98
+ `features.starship_transient = true`. Users on bandwidth-constrained
99
+ terminals (slow SSH, serial console) can flip it off without editing
100
+ the canonical config.
101
+
102
+ ## Consequences
103
+
104
+ ### Positive (fish only, until upstream lands zsh support)
105
+
106
+ - Scrollback is 4–5× denser **in fish**. A 100-command session that previously
107
+ filled the screen 20× over now fills it ~4×.
108
+ - Asciinema recordings (relevant for the showcase commits in #874)
109
+ read much more naturally — fewer screens of historical prompts
110
+ between actions.
111
+ - The live prompt still surfaces all the rich context Starship was
112
+ configured for; only history is compacted.
113
+
114
+ ### Negative
115
+
116
+ - Slightly more complex Starship config; the maintainer must remember
117
+ that `[character]` and `[transient_*]` are distinct modules.
118
+ - Users who rely on visual scanning of historical prompts (e.g., "what
119
+ branch was I on when I ran that?") lose that signal. Mitigation: the
120
+ feature flag.
121
+
122
+ ### Risks
123
+
124
+ - Starship's transient API is stable since 1.16 (2023) but the exact
125
+ config surface evolves. If Starship breaks the schema in a future
126
+ major, the pinned version in `mise.toml` insulates us; we vet new
127
+ releases through `dot upgrade --dry-run` before bumping.
128
+
129
+ ## Alternatives Considered
130
+
131
+ | Alternative | Why rejected |
132
+ |---|---|
133
+ | Single-line Starship prompt | Sacrifices live-prompt richness for the same scrollback-density goal. The transient feature gives both. |
134
+ | Custom zsh `precmd` rewriter | Would have to be reimplemented in fish. Starship already solved it. |
135
+ | Disable Starship entirely on history | Loses the whole reason we use Starship. |
136
+
137
+ ## References
138
+
139
+ - Starship transient prompt docs:
140
+ <https://starship.rs/advanced-config/#transientprompt-and-transientrightprompt-in-zsh>
141
+ - ADR-002 (Shell Performance Optimization) — establishes the
142
+ `_cached_eval` constraint this ADR respects.
143
+ - ADR-007 (Multi-Shell Parity) — establishes zsh + fish as Tier-1.
144
+ - Issue #873 — captures this ADR alongside `llms.txt`.
@@ -0,0 +1,144 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
5
+ # ADR-011: Keep Nushell as Tier-3 Reference with Minimum-Viable Caching
6
+
7
+ ## Status
8
+
9
+ Accepted
10
+
11
+ ## Date
12
+
13
+ 2026-05-13
14
+
15
+ ## Context
16
+
17
+ ADR-007 (Multi-Shell Parity Strategy) classified the three supported
18
+ shells:
19
+
20
+ | Tier | Shells | Definition |
21
+ |---|---|---|
22
+ | Tier 1 (Full) | zsh, bash | Native aliases, functions, lazy loading, `_cached_eval` |
23
+ | Tier 2 (Bridged) | fish | Aliases + functions via bridge, `_cached_eval` |
24
+ | Tier 3 (Compatible) | nushell | Simple aliases only, functions via bash delegation |
25
+
26
+ The 2026 audit (slice 3 of #880's deep-dive) flagged Nushell as a
27
+ maintenance candidate:
28
+
29
+ - < 5% feature parity with zsh.
30
+ - No async / deferred-load support.
31
+ - No equivalent of `_cached_eval` — meaning every Nushell start spawns
32
+ `starship init nu`, `mise activate nu`, `zoxide init nushell`,
33
+ `atuin init nu` as fresh subprocesses, costing 100–200 ms aggregated.
34
+ - 5 config files (`config.nu.tmpl`, `env.nu.tmpl`, `aliases.nu`,
35
+ `completions.nu.tmpl`, `functions.nu.tmpl`) totalling ~270 lines —
36
+ enough to be meaningful, not enough to be self-sustaining.
37
+
38
+ Three paths were proposed:
39
+
40
+ 1. **Keep as-is** — accept the gap, defer maintenance.
41
+ 2. **Reduce to a stub** — leave the config but stop investing.
42
+ 3. **Remove entirely** — delete all references.
43
+
44
+ ## Decision
45
+
46
+ **Keep Nushell as Tier-3 with explicit limitations + a minimum-viable
47
+ `_cached_eval` equivalent.**
48
+
49
+ Specifically:
50
+
51
+ - Ship `dot_config/nushell/cached_eval.nu` — a Nushell module that
52
+ ports the binary-mtime-based init caching pattern from zsh/fish.
53
+ It handles the four tools that matter most for shell start:
54
+ starship, mise, zoxide, atuin. See the Nushell-specific tradeoffs
55
+ in the "Consequences" section below.
56
+ - Wire `env.nu.tmpl` to use the new module so subsequent shells skip
57
+ the subprocess spawns when binaries haven't moved.
58
+ - Continue maintaining the existing `aliases.nu` (hand-curated simple
59
+ aliases — `l`, `ll`, `la`, etc.) but accept that the bash-bridge
60
+ approach for full alias parity isn't worth the complexity.
61
+ - Update `README.md`'s shell list to call Nushell out as "best-effort
62
+ / Tier-3" so users have correct expectations.
63
+ - Reject the "remove entirely" option for now (see Rationale below).
64
+
65
+ ## Rationale
66
+
67
+ **Why not remove**: Nushell is shipped with the canonical `mise`
68
+ toolchain in this repo (it's installable via `mise install nushell`)
69
+ and is gaining adoption in the Rust + data-engineering communities
70
+ that overlap with this distribution's audience. Removing it would
71
+ break promises to a small-but-vocal segment of users. The maintenance
72
+ cost of the current 270-line surface is low.
73
+
74
+ **Why not reduce to a stub**: A stub config is worse than the current
75
+ moderate config — users who type `nu` and get a featureless shell
76
+ without any of the integrations the README promised would feel
77
+ betrayed. Either we keep the shell working well enough to use, or we
78
+ delete it.
79
+
80
+ **Why the minimum-viable cache layer**: The biggest waste on every
81
+ Nushell start was the four uncached subprocess spawns
82
+ (`starship init nu` etc.). Adding mtime-based caching for those costs
83
+ ~50 lines of Nushell code and saves 100–200 ms per shell. That's the
84
+ cheapest meaningful improvement; deeper investments (async hydration,
85
+ plugin system, bash bridge for aliases) await an actual user request.
86
+
87
+ ## Consequences
88
+
89
+ ### Positive
90
+
91
+ - Nushell starts substantially faster than before (TBD — needs
92
+ measurement on a host with all four tools installed). The
93
+ subprocess elimination saves ~50–80 ms per cached tool, per cold
94
+ shell after the cache is populated.
95
+ - The mtime-invalidation pattern matches what zsh / fish do, so a
96
+ contributor familiar with one of the other shells can read the
97
+ Nushell code without learning a new mental model.
98
+ - Explicit Tier-3 documentation avoids the "wait, this is supposed to
99
+ be at parity" surprise.
100
+
101
+ ### Negative
102
+
103
+ - Nushell's parse-time evaluator means we can't wrap source calls in
104
+ the cache function — the caller has to `source <path>` directly.
105
+ Slightly more boilerplate than the zsh/fish APIs.
106
+ - No malware-pattern screening in the cached output. The zsh / fish
107
+ implementations grep for `curl ... | sh`, `nc -e`, etc. before
108
+ sourcing; the Nushell version trusts its inputs. For the four tools
109
+ we ship (`starship`, `mise`, `zoxide`, `atuin`) this is acceptable
110
+ — they're official binaries pinned via `mise.toml`. Future tools
111
+ added to the cache must be similarly trusted.
112
+ - No per-tool timing telemetry. The `EVALCACHE_TIMING` infrastructure
113
+ zsh has (#863) isn't ported. If Nushell perf becomes a sustained
114
+ user concern, this is the next layer to add.
115
+
116
+ ### Risks
117
+
118
+ - Nushell's syntax evolves quickly between 0.x releases. The
119
+ `cached_eval.nu` module uses `path exists`, `ls | get -i modified`,
120
+ and `run-external` which have been stable since 0.86 (Q3 2024).
121
+ If a future Nushell release breaks the API, the module fails fast
122
+ (saving an empty cache file) rather than corrupting state.
123
+ - Cache invalidation by mtime is fragile when the user installs a
124
+ tool via a non-mtime-respecting method (e.g. unpacking a tarball
125
+ with `--no-touch-mtimes`). The fallback is the user running
126
+ `dot prewarm` or deleting `~/.cache/nushell/*.nu`. Documented in
127
+ `docs/operations/PERFORMANCE.md`.
128
+
129
+ ## Alternatives Considered
130
+
131
+ | Alternative | Why rejected |
132
+ |---|---|
133
+ | **Bash bridge for full alias parity** | Adds a `bash --norc --noprofile -c '...'` subprocess on every Nushell start (~30 ms). Defeats the perf gain from the cache layer. |
134
+ | **Port `_cached_eval` 1:1 (malware screen + JSONL telemetry)** | The full zsh implementation is 100+ lines. The Nushell version covers the 80% case at 50 lines; the remaining 20% (advanced features) aren't load-bearing for Tier-3 status. |
135
+ | **Delete Nushell entirely** | See "Why not remove" above. |
136
+ | **Reduce to a stub** | See "Why not reduce to a stub" above. |
137
+
138
+ ## References
139
+
140
+ - [`dot_config/nushell/cached_eval.nu`](../../dot_config/nushell/cached_eval.nu) — the new module.
141
+ - [`dot_config/nushell/env.nu.tmpl`](../../dot_config/nushell/env.nu.tmpl) — adopter.
142
+ - ADR-007 (Multi-Shell Parity Strategy) — establishes the tier definitions.
143
+ - ADR-002 (Shell Performance Optimization Strategy) — establishes `_cached_eval` semantics this module ports.
144
+ - Issue [#880](https://github.com/sebastienrousseau/dotfiles/issues/880).
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Architecture Decision Records
2
6
 
3
7
  This directory contains Architecture Decision Records (ADRs) that document
@@ -15,6 +19,9 @@ significant architectural decisions made in this project.
15
19
  | [ADR-006](ADR-006-shell-selection.md) | Zsh as Default Shell | Accepted |
16
20
  | [ADR-007](ADR-007-multi-shell-parity.md) | Multi-Shell Parity Strategy | Accepted |
17
21
  | [ADR-008](ADR-008-alias-system-architecture.md) | Alias System Architecture | Accepted |
22
+ | [ADR-009](ADR-009-wallpaper-driven-theming.md) | Wallpaper-Driven Theming Engine | Accepted |
23
+ | [ADR-010](ADR-010-starship-transient-prompt.md) | Enable Starship Transient Prompt in Zsh and Fish | Accepted |
24
+ | [ADR-011](ADR-011-nushell-tier3-keep.md) | Keep Nushell as Tier-3 Reference with Minimum-Viable Caching | Accepted |
18
25
 
19
26
  ## ADR Format
20
27
 
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Architecture
2
6
 
3
7
  Core architectural decisions and system design of the dotfiles shell distribution.
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Cross-Platform Interoperability
2
6
 
3
7
  How dotfiles commands and shims map across macOS, Linux, and WSL2.
@@ -24,13 +28,17 @@ How dotfiles commands and shims map across macOS, Linux, and WSL2.
24
28
  ## Troubleshooting
25
29
 
26
30
  ### WSL2 IO Latency
31
+
27
32
  Keep projects in the Linux filesystem (`~/...`), not under `/mnt/c/`.
28
33
 
29
34
  ### WSL2 Windows Binary Path
35
+
30
36
  If you've disabled WSL path sharing, make sure Windows-side binaries like `clip.exe` and `explorer.exe` are still reachable in `$PATH`.
31
37
 
32
38
  ### macOS Permissions
39
+
33
40
  Grant your terminal "Full Disk Access" in System Settings so dotfiles can manage all configurations.
34
41
 
35
42
  ### Linux GUI Fallbacks
43
+
36
44
  In headless environments, GUI commands like `cb` and `open` fall back to `gum log` or terminal bell instead of hanging.
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  <!-- Copyright (c) 2015-2026 Dotfiles. All rights reserved. -->
2
6
 
3
7
  # Repository Layout
@@ -154,7 +158,7 @@ the repo itself.
154
158
 
155
159
  | Path | Purpose |
156
160
  |---------------------------------------|----------------------------------------------------------------------------|
157
- | `docs/manual/` | 26-page GNU-Stow-style reference manual (the v0.2.500 feature) |
161
+ | `docs/manual/` | 26-page GNU-Stow-style reference manual (the v0.2.501 feature) |
158
162
  | `docs/architecture/` | This file + core architecture docs (ARCHITECTURE, INTEROP, fleet, walkthrough) |
159
163
  | `docs/operations/` | Runbooks, traceability matrix, migration notes |
160
164
  | `docs/reference/` | Command/config reference material |
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Walkthrough
2
6
 
3
7
  A hands-on tour of the dotfiles after installation. Run each step in your terminal to get comfortable with what's available.
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Fleet Deployment Architecture
2
6
 
3
7
  ## Deployment Flow
@@ -1,3 +1,7 @@
1
+ ---
2
+ render_with_liquid: false
3
+ ---
4
+
1
5
  # Euxis 2026 Architecture & Product Review
2
6
 
3
7
  This review translates the current dotfiles CLI stack into an Apple-tier product strategy:
@@ -76,18 +80,22 @@ Added `scripts/tests/unit/test_dot_lib_platform.sh`:
76
80
  ## File-by-file next refactors (high ROI)
77
81
 
78
82
  1. `scripts/dot/commands/tools.sh`
83
+
79
84
  - Split `cmd_aliases` into submodule file.
80
85
  - Replace repeated `command -v` checks with cached capability map.
81
86
 
82
- 2. `dot_config/zsh/dot_zshrc.tmpl`
87
+ 1. `dot_config/zsh/dot_zshrc.tmpl`
88
+
83
89
  - Add startup budget guard (record startup time; warn >400ms).
84
90
  - Move optional integrations behind capability checks generated once/session.
85
91
 
86
- 3. `scripts/ops/health-check.sh`
92
+ 1. `scripts/ops/health-check.sh`
93
+
87
94
  - Import `platform.sh`, unify WSL/macOS/Linux branch logic.
88
95
  - Emit machine-readable JSON summary for UI frontends.
89
96
 
90
- 4. `scripts/diagnostics/perf.sh`
97
+ 1. `scripts/diagnostics/perf.sh`
98
+
91
99
  - Add percentile reporting (P50/P95 over 10 runs).
92
100
  - Add regression threshold with actionable remediation hints.
93
101