@sebastienrousseau/dotfiles 0.2.502 → 0.2.503

package/dot_config/.module-manifest.json

@@ -1,69 +0,0 @@
-{
-  "$schema": "Module manifest for dot_config/ — logical grouping of flat directories",
-  "groups": {
-    "shell": {
-      "description": "Shell environments and startup",
-      "modules": ["shell", "zsh", "fish", "nushell"]
-    },
-    "terminal": {
-      "description": "Terminal emulators",
-      "modules": ["alacritty", "ghostty", "kitty", "wezterm"]
-    },
-    "editor": {
-      "description": "Text editors and IDEs",
-      "modules": ["nvim", "vscode", "micro", "nano"]
-    },
-    "git": {
-      "description": "Version control",
-      "modules": ["git", "lazygit", "gh"]
-    },
-    "container": {
-      "description": "Containers and orchestration",
-      "modules": ["docker", "containers", "lazydocker", "k9s", "minikube"]
-    },
-    "ai": {
-      "description": "AI tools and assistants",
-      "modules": ["ai", "aider", "claude", "goose"]
-    },
-    "languages": {
-      "description": "Language toolchains",
-      "modules": ["go", "pip", "pypoetry", "gem", "bun", "yarn", "dlv"]
-    },
-    "system": {
-      "description": "System monitoring and management",
-      "modules": ["btop", "htop", "fastfetch", "topgrade", "systemd", "ncdu", "duf"]
-    },
-    "security": {
-      "description": "Security and secrets",
-      "modules": ["gnupg", "sops"]
-    },
-    "network": {
-      "description": "Network and HTTP tools",
-      "modules": ["curl", "wget"]
-    },
-    "data": {
-      "description": "Databases and data tools",
-      "modules": ["redis", "mongosh", "mycli", "ipython"]
-    },
-    "tools": {
-      "description": "CLI utilities",
-      "modules": ["bat", "fzf", "yazi", "just", "mise", "task", "tmux", "pueue", "atuin", "emoji"]
-    },
-    "desktop": {
-      "description": "Desktop environment and appearance",
-      "modules": ["gtk-3.0", "gtk-4.0", "fontconfig", "flatpak", "zellij"]
-    },
-    "macos": {
-      "description": "macOS-specific modules",
-      "modules": ["karabiner", "mas", "duti", "raycast"]
-    },
-    "infra": {
-      "description": "Infrastructure and cloud",
-      "modules": ["ansible", "tflint"]
-    },
-    "dotfiles": {
-      "description": "Dotfiles internal config",
-      "modules": ["dotfiles"]
-    }
-  }
-}

package/dot_config/ai/identity.md

@@ -1,23 +0,0 @@
-# AI Identity & Preferences
-
-## Profile
-
-- **User**:
-- **Role**: Senior Software Engineer / Architect
-- **Expertise**: Rust, TypeScript, Go, DevOps (Nix, Kubernetes), Shell Scripting.
-
-## Coding Style
-
-- **Principles**: Clean code, SOLID, DRY, KISS.
-- **Preferences**:
-  - Prefer TypeScript over JavaScript.
-  - Prefer functional programming patterns where appropriate.
-  - Use Vitest or Jest for testing.
-  - Use Prettier and ESLint for formatting/linting.
-- **Documentation**: Use JSDoc/TSDoc for code and GitHub-flavored Markdown for docs.
-
-## Workspace Context
-
-- **Environment**: Linux (CachyOS/Arch), macOS.
-- **Shells**: Zsh (primary), Fish, Nushell, Bash.
-- **Dotfiles**: Managed by Chezmoi, optimized for performance and security.

package/dot_config/ai/patterns/architect.md

@@ -1,16 +0,0 @@
-# Identity: Dotfiles Architect
-
-You are an expert Shell Infrastructure Architect specializing in the 2026 developer stack.
-
-## Core Directives
-
-- **Subtlety**: Propose changes that integrate seamlessly without adding unnecessary complexity.
-- **Performance**: Prioritize shell startup speed and binary efficiency (e.g., _cached_eval).
-- **Architecture**: Adhere to the modular "rc.d" structure and XDG Base Directory standards.
-- **Tools**: Leverage Mise for runtimes, Nix for declarative environments, and Chezmoi for state management.
-
-## Environment Context
-
-- OS: Arch/CachyOS (optimized for x86-64-v4) or macOS.
-- Shells: Zsh (primary), Fish, Nushell, Bash.
-- Security: Age/SOPS for secrets, GPG signing enforced.

package/dot_config/ai/patterns/hardener.md

@@ -1,15 +0,0 @@
-# Identity: Shell Security Hardener
-
-You are a security engineer specializing in high-compliance Fintech environments and Post-Quantum Cryptography (PQC).
-
-## Core Directives
-
-- **Zero Trust**: Assume all external scripts are compromised until verified.
-- **Encryption**: Enforce Age/SOPS for all sensitive data.
-- **Compliance**: Adhere to 2026 security baselines (GPG signing, SSH certificate authorities).
-- **Privacy**: Disable all non-essential telemetry at the OS and application level.
-
-## Verification Logic
-
-- Every proposal must include a "Verification" step (e.g., dot verify --security).
-- Prioritize hardware enclave (TPM/Secure Enclave) integrations.

package/dot_config/ai/patterns/refactor.md

@@ -1,15 +0,0 @@
-# Identity: POSIX & Shell Optimizer
-
-You are an expert in shell script optimization and POSIX compliance.
-
-## Core Directives
-
-- **Portability**: Ensure scripts work across Zsh, Bash, and Dash unless specifically optimized for a feature shell (like Fish/Nushell).
-- **Indempotency**: Scripts must be safe to run multiple times without side effects.
-- **Linting**: Adhere to ShellCheck best practices and strict error handling (set -euo pipefail).
-- **Latency**: Minimize subshell calls and external binary forks.
-
-## Optimization Strategy
-
-- Use built-in shell features over external commands where possible.
-- Implement caching mechanisms for heavy computations.

package/dot_config/aider/aider.conf.yml

@@ -1,32 +0,0 @@
-# Aider configuration
-# https://aider.chat/docs/config/options.html
-
-# Model settings
-model: claude-opus-4-6
-edit-format: diff
-
-# Git settings
-auto-commits: true
-dirty-commits: false
-attribute-author: true
-attribute-commit-message: true
-
-# UI settings
-dark-mode: true
-pretty: true
-stream: true
-
-# Code settings
-auto-lint: true
-lint-cmd: "npm run lint"
-auto-test: false
-
-# File handling
-gitignore: true
-aiderignore: true
-
-# History
-restore-chat-history: true
-
-# Voice (if enabled)
-# voice-language: en

package/dot_config/alacritty/alacritty.toml.tmpl

@@ -1,55 +0,0 @@
-{{- $fontFamily := default "JetBrainsMono Nerd Font" .terminal_font_family -}}
-{{- $fontSize := default 12 .terminal_font_size -}}
-{{- $t := index .themes (default "big-sur-dark" .theme) -}}
-{{- if not $t -}}{{- $t = index .themes "big-sur-dark" -}}{{- end }}
-{{- $tt := $t -}}
-{{- $themeName := default "big-sur-dark" .theme -}}
-{{- if hasSuffix "-light" $themeName -}}
-  {{- $darkTheme := index .themes (printf "%s-dark" (trimSuffix "-light" $themeName)) -}}
-  {{- if $darkTheme -}}{{- $tt = $darkTheme -}}{{- end -}}
-{{- end }}
-[window]
-padding = { x = 16, y = 12 }
-opacity = {{ if eq .chezmoi.os "darwin" }}0.92{{ else }}0.96{{ end }}
-option_as_alt = {{ if eq .chezmoi.os "darwin" }}"Both"{{ else }}"None"{{ end }}
-
-[font]
-size = {{ $fontSize }}
-normal = { family = "{{ $fontFamily }}" }
-{{- if eq .chezmoi.os "darwin" }}
-offset = { x = 0, y = 1 }
-{{- else }}
-offset = { x = 0, y = 0 }
-{{- end }}
-
-[colors.primary]
-background = "{{ $tt.term.bg }}"
-foreground = "{{ $tt.term.fg }}"
-
-[colors.cursor]
-cursor = "{{ $tt.term.cursor }}"
-text = "{{ $tt.term.cursor_text }}"
-
-[colors.selection]
-background = "{{ $tt.term.sel_bg }}"
-text = "{{ $tt.term.sel_fg }}"
-
-[colors.normal]
-black = "{{ $tt.term.c0 }}"
-red = "{{ $tt.term.c1 }}"
-green = "{{ $tt.term.c2 }}"
-yellow = "{{ $tt.term.c3 }}"
-blue = "{{ $tt.term.c4 }}"
-magenta = "{{ $tt.term.c5 }}"
-cyan = "{{ $tt.term.c6 }}"
-white = "{{ $tt.term.c7 }}"
-
-[colors.bright]
-black = "{{ $tt.term.c8 }}"
-red = "{{ $tt.term.c9 }}"
-green = "{{ $tt.term.c10 }}"
-yellow = "{{ $tt.term.c11 }}"
-blue = "{{ $tt.term.c12 }}"
-magenta = "{{ $tt.term.c13 }}"
-cyan = "{{ $tt.term.c14 }}"
-white = "{{ $tt.term.c15 }}"

package/dot_config/ansible/ansible.cfg

@@ -1,11 +0,0 @@
-[defaults]
-inventory = ./inventory
-retry_files_enabled = False
-host_key_checking = False
-stdout_callback = yaml
-nocows = 1
-
-[privilege_escalation]
-become = True
-become_method = sudo
-become_ask_pass = False

package/dot_config/atuin/config.toml.tmpl

@@ -1,47 +0,0 @@
-# Atuin Configuration (~/.config/atuin/config.toml)
-# https://atuin.sh/docs/config
-#
-# This file is templated by chezmoi. The `history_filter` block is sourced
-# from `.chezmoidata/secrets-patterns.toml` (see #872) so the same audited
-# defaults ship to every machine, with per-host extension via
-# `~/.config/chezmoi/chezmoi.toml` → `[data.atuin.history_filter] extra = [...]`.
-
-# Core
-update_check = false
-db_path = "~/.local/share/atuin/history.db"
-key_path = "~/.local/share/atuin/key"
-session_path = "~/.local/share/atuin/session"
-
-# Sync
-auto_sync = true
-sync_frequency = "10m"
-sync_address = "https://api.atuin.sh"
-
-# UI
-style = "compact"
-inline_height = 20
-show_preview = true
-enter_accept = true
-
-# Search
-search_mode = "fuzzy"
-filter_mode = "global"
-workspaces = true
-
-# Privacy: skip commands that may contain secrets.
-# Defaults come from .chezmoidata/secrets-patterns.toml; the `extra` slot
-# in chezmoi.toml allows per-host extension without editing this template.
-history_filter = [
-{{- range .atuin.history_filter.defaults }}
-  {{ . | quote }},
-{{- end }}
-{{- with .atuin.history_filter.extra }}
-{{- range . }}
-  {{ . | quote }},
-{{- end }}
-{{- end }}
-]
-
-# Skip ephemeral directories
-secrets_filter = true
-network_timeout = 30

package/dot_config/bat/config

@@ -1,23 +0,0 @@
-# Bat configuration (dotfiles)
-# See: https://github.com/sharkdp/bat
-
-# Theme
---theme="TwoDark"
-
-# Style
---style="numbers,changes,header,grid"
-
-# Paging
---paging=auto
---pager="less -FR"
-
-# Formatting
---tabs=2
---italic-text=always
-
-# Syntax mappings
---map-syntax "*.conf:INI"
---map-syntax ".gitignore:Git Ignore"
---map-syntax "*.tmpl:Go HTML Template"
---map-syntax "*.kdl:KDL"
---map-syntax ".envrc:Bash"

package/dot_config/brave-flags.conf.tmpl

@@ -1,7 +0,0 @@
-{{- if eq .chezmoi.os "linux" -}}
---enable-gpu-rasterization
---enable-zero-copy
---enable-features=VaapiVideoDecodeLinuxGL,VaapiVideoEncoder,CanvasOopRasterization
---disable-features=UseChromeOSDirectVideoDecoder
---max-old-space-size=4096
-{{- end -}}

package/dot_config/btop/btop.conf

@@ -1,16 +0,0 @@
-# btop configuration
-# Theme files live in ~/.config/btop/themes/
-color_theme = "tokyonight"
-
-# Basic UI preferences
-update_ms = 2000
-proc_sorting = "cpu lazy"
-proc_gradient = true
-net_auto = true
-
-# Hide top-level header when on small screens
-show_cpu_freq = true
-show_gpu_info = false
-
-# Enable mouse support
-mouse = true

package/dot_config/btop/themes/tokyonight.theme

@@ -1,34 +0,0 @@
-# Tokyonight (Night) theme for btop
-# Based on Tokyo Night palette
-
-# Main background
-bg = "#1a1b26"
-# Main text
-fg = "#c0caf5"
-
-# Titles and boxes
-title = "#7aa2f7"
-hi_fg = "#bb9af7"
-
-# Graphs
-selected_bg = "#24283b"
-selected_fg = "#c0caf5"
-
-# CPU
-cpu_box = "#7aa2f7"
-mem_box = "#9ece6a"
-net_box = "#7dcfff"
-proc_box = "#e0af68"
-
-# Graph colors
-cpu_graph = "#7aa2f7"
-mem_graph = "#9ece6a"
-net_graph = "#7dcfff"
-proc_graph = "#e0af68"
-
-# Status
-available = "#9ece6a"
-used = "#e0af68"
-free = "#7dcfff"
-warning = "#e0af68"
-critical = "#f7768e"

package/dot_config/bun/bunfig.toml.tmpl

@@ -1,33 +0,0 @@
-# Bun configuration
-# Managed by chezmoi - edit source at ~/.dotfiles/dot_config/bun/bunfig.toml.tmpl
-# Documentation: https://bun.sh/docs/runtime/bunfig
-
-[install]
-# Use a shared global cache
-globalBinDir = "{{ .chezmoi.homeDir }}/.bun/bin"
-
-# Prefer offline mode when possible
-prefer = "offline"
-
-# Auto-install peer dependencies
-peer = true
-
-# Registry (default)
-registry = "https://registry.npmjs.org/"
-
-# Scoped registries (uncomment and configure as needed)
-# [install.scopes]
-# "@mycompany" = { token = "$NPM_TOKEN", url = "https://npm.mycompany.com/" }
-
-[run]
-# Silence the bun install/update messages during bun run
-silent = false
-
-[test]
-# Test configuration
-coverage = false
-coverageDir = "coverage"
-
-[telemetry]
-# Disable telemetry
-enabled = false

package/dot_config/claude/mcp_servers.json

@@ -1,20 +0,0 @@
-{
-  "$schema": "https://raw.githubusercontent.com/anthropics/claude-code/main/schemas/mcp-servers.json",
-  "mcpServers": {
-    "git": {
-      "command": "npx",
-      "args": ["-y", "mcp-server-git@2026.3.0"],
-      "env": {}
-    },
-    "memory": {
-      "command": "npx",
-      "args": ["-y", "@modelcontextprotocol/server-memory@2026.3.0"],
-      "env": {}
-    },
-    "sqlite": {
-      "command": "npx",
-      "args": ["-y", "mcp-server-sqlite@2026.3.0"],
-      "env": {}
-    }
-  }
-}

package/dot_config/containers/containers.conf

@@ -1,14 +0,0 @@
-# Podman/containers defaults
-[containers]
-netns = ""
-ipcns = ""
-utsns = ""
-
-[engine]
-# Use systemd cgroup driver when available
-cgroup_manager = "systemd"
-# Reduce noisy output
-events_logger = "journald"
-
-[network]
-# Default subnet and gateway can be overridden per user

package/dot_config/curl/dot_curlrc

@@ -1,18 +0,0 @@
-# cURL Configuration
--w "\n"
---anyauth
---continue-at -
---connect-timeout 60
---compressed
---ipv4
---location
---progress-bar
---remote-time
---referer ";auto"
---show-error
---ssl-reqd
---trace-time
---user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Edg/105.0.1343.53"
--H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
--H "Upgrade-Insecure-Requests: 1"
--H "Accept-Language: en-US,en;q=0.8"

package/dot_config/dlv/config.yml

@@ -1,39 +0,0 @@
-# Delve debugger configuration
-# https://github.com/go-delve/delve/blob/master/Documentation/cli/README.md
-
-# Aliases for common commands
-aliases:
-  # Navigation
-  ll: "list"
-  bt: "stack"
-  # Breakpoints
-  bp: "breakpoints"
-  # Variables
-  lv: "locals"
-  av: "args"
-  # Execution
-  c: "continue"
-  n: "next"
-  s: "step"
-  so: "stepout"
-  # Info
-  gs: "goroutines"
-  gt: "goroutine"
-
-# Source list settings
-source-list-line-color: 34
-source-list-arrow-color: 33
-source-list-keyword-color: 31
-
-# Substitute source paths (useful for remote debugging)
-# substitute-path:
-#   - {from: "/build/path", to: "/local/path"}
-
-# Max string length to display
-max-string-len: 256
-
-# Max array values to display
-max-array-values: 128
-
-# Show goroutine current location
-show-location-expr: true

package/dot_config/docker/config.json

@@ -1,15 +0,0 @@
-{
-  "auths": {},
-  "credsStore": "",
-  "credHelpers": {},
-  "detachKeys": "ctrl-@",
-  "experimental": "disabled",
-  "plugins": {},
-  "proxies": {
-    "default": {
-      "httpProxy": "",
-      "httpsProxy": "",
-      "noProxy": ""
-    }
-  }
-}

package/dot_config/dotfiles/agent-card.json

@@ -1,29 +0,0 @@
-{
-  "specVersion": "0.3",
-  "name": "dotfiles-agent",
-  "version": "0.2.501",
-  "description": "Trusted workstation agent surface for local shell automation.",
-  "defaultProfile": "ask",
-  "protocols": ["mcp", "a2a"],
-  "platforms": ["macOS", "Linux", "WSL", "PowerShell"],
-  "entrypoints": {
-    "cli": "dot",
-    "mode": "dot mode",
-    "attestation": "dot attest --json",
-    "mcp": "dot mcp --strict --json",
-    "conformance": "dot agent conformance --strict --json",
-    "checkpoint": "dot agent checkpoint list",
-    "a2aCard": "dot agent a2a-card --json"
-  },
-  "profiles": ["ask", "plan", "apply", "audit"],
-  "security": {
-    "signedCommits": true,
-    "mcpRegistry": true,
-    "sessionLogging": true,
-    "workstationAttestation": true,
-    "replayableCheckpoints": true,
-    "fleetAttestationExport": true,
-    "policyBundleReleases": true,
-    "cardSigning": "ssh-ed25519"
-  }
-}

package/dot_config/dotfiles/agent-profiles.json

@@ -1,92 +0,0 @@
-{
-  "schemaVersion": "2026.03",
-  "defaultProfile": "ask",
-  "rbac": {
-    "roles": {
-      "viewer": {
-        "description": "Read-only access to configuration and status.",
-        "allowedProfiles": ["ask"],
-        "permissions": ["read", "status", "audit"]
-      },
-      "developer": {
-        "description": "Standard development workflow with bounded writes.",
-        "inherits": "viewer",
-        "allowedProfiles": ["ask", "plan", "apply"],
-        "permissions": ["read", "write", "status", "audit", "execute"]
-      },
-      "admin": {
-        "description": "Full access including fleet management and profile switching.",
-        "inherits": "developer",
-        "allowedProfiles": ["ask", "plan", "apply", "audit"],
-        "permissions": ["read", "write", "status", "audit", "execute", "fleet", "configure"]
-      }
-    },
-    "defaultRole": "developer",
-    "enforcement": "advisory"
-  },
-  "delegation": {
-    "enabled": false,
-    "maxDepth": 2,
-    "allowedDelegates": {
-      "security-reviewer": {
-        "profile": "audit",
-        "permissions": ["read", "audit"],
-        "maxSteps": 4,
-        "timeout": 120
-      },
-      "test-runner": {
-        "profile": "apply",
-        "permissions": ["read", "execute"],
-        "maxSteps": 6,
-        "timeout": 300
-      },
-      "lint-checker": {
-        "profile": "ask",
-        "permissions": ["read"],
-        "maxSteps": 2,
-        "timeout": 60
-      }
-    },
-    "securityPolicy": {
-      "requireParentApproval": true,
-      "logAllDelegations": true,
-      "maxConcurrentDelegates": 3
-    }
-  },
-  "profiles": {
-    "ask": {
-      "description": "Read-only guidance with no unattended changes.",
-      "approval": "manual",
-      "filesystem": "read-only",
-      "network": "off",
-      "mcpProfile": "strict-local",
-      "maxSteps": 1
-    },
-    "plan": {
-      "description": "Structured planning with local inspection and no writes.",
-      "approval": "manual",
-      "filesystem": "read-only",
-      "network": "limited",
-      "mcpProfile": "strict-local",
-      "maxSteps": 3
-    },
-    "apply": {
-      "description": "Bounded implementation with explicit approval and local policy guards.",
-      "approval": "on-request",
-      "filesystem": "workspace-write",
-      "network": "limited",
-      "mcpProfile": "strict-local",
-      "maxSteps": 6,
-      "canDelegate": true
-    },
-    "audit": {
-      "description": "Deep verification, scoring, and compliance analysis.",
-      "approval": "manual",
-      "filesystem": "read-only",
-      "network": "limited",
-      "mcpProfile": "enterprise-remote",
-      "maxSteps": 8,
-      "canDelegate": true
-    }
-  }
-}

package/dot_config/dotfiles/boot/README.md

@@ -1,13 +0,0 @@
-Place your Linux boot logo image here.
-
-Default path used by the script:
-
-- ~/.config/dotfiles/boot/logo.png
-
-Run:
-
-- sudo ~/.dotfiles/scripts/theme/install-boot-logo.sh --apply
-
----
-
-Made with ❤️ by [Sebastien Rousseau](https://sebastienrousseau.com)

package/dot_config/dotfiles/grub/README.md

@@ -1,13 +0,0 @@
-Place your GRUB theme files here.
-
-Default path used by the script:
-
-- ~/.config/dotfiles/grub/theme
-
-Run:
-
-- sudo ~/.dotfiles/scripts/theme/install-grub-theme.sh --apply
-
----
-
-Made with ❤️ by [Sebastien Rousseau](https://sebastienrousseau.com)