@sebastienrousseau/dotfiles 0.2.503 → 0.2.505

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (132) hide show
  1. package/CHANGELOG.md +86 -1
  2. package/README.md +5 -5
  3. package/docs/COPYRIGHT +1 -1
  4. package/docs/OPENCODE.md +1 -1
  5. package/docs/index.md +2 -2
  6. package/docs/interop/A2A.md +2 -2
  7. package/docs/manual/00-introduction.md +1 -1
  8. package/docs/manual/02-tutorials/01-first-install.md +1 -1
  9. package/docs/operations/RELEASE_PIPELINE.md +3 -3
  10. package/docs/operations/TRUSTED_AGENT_WORKSTATION.md +6 -6
  11. package/docs/security/AUTOMATION_SECRETS.md +1 -1
  12. package/docs/security/MCP_POLICY.md +4 -4
  13. package/docs/security/SECURITY_CHECKLIST.md +1 -1
  14. package/docs/security/SOUP_REGISTER.md +4 -4
  15. package/install.sh +98 -6
  16. package/package.json +1 -1
  17. package/scripts/README.md +3 -3
  18. package/scripts/ci/check-copyright-headers.sh +3 -2
  19. package/scripts/ci/check-shell-preamble.sh +3 -2
  20. package/scripts/ci/guard-gitleaks-checkout.sh +3 -2
  21. package/scripts/demo/record.sh +2 -1
  22. package/scripts/diagnostics/a2a-conformance.sh +2 -1
  23. package/scripts/diagnostics/alias-governance.sh +2 -1
  24. package/scripts/diagnostics/aliases-cheatsheet.sh +2 -1
  25. package/scripts/diagnostics/aliases-manifest.sh +2 -1
  26. package/scripts/diagnostics/benchmark.sh +3 -2
  27. package/scripts/diagnostics/conflicts.sh +2 -1
  28. package/scripts/diagnostics/doctor-unified.sh +3 -2
  29. package/scripts/diagnostics/doctor.sh +2 -1
  30. package/scripts/diagnostics/drift-dashboard.sh +2 -1
  31. package/scripts/diagnostics/health.sh +2 -1
  32. package/scripts/diagnostics/history-analysis.sh +2 -1
  33. package/scripts/diagnostics/mcp-doctor.sh +2 -1
  34. package/scripts/diagnostics/perf.sh +3 -2
  35. package/scripts/diagnostics/scorecard.sh +2 -1
  36. package/scripts/diagnostics/secret-governance.sh +2 -1
  37. package/scripts/diagnostics/security-score.sh +25 -5
  38. package/scripts/diagnostics/smoke-test.sh +2 -1
  39. package/scripts/diagnostics/snapshot.sh +2 -1
  40. package/scripts/diagnostics/verify.sh +2 -1
  41. package/scripts/diagnostics/verify_state.sh +2 -1
  42. package/scripts/diagnostics/version-locks.sh +13 -2
  43. package/scripts/diagnostics/workstation-attestation.sh +2 -1
  44. package/scripts/dot/commands/agent.sh +2 -1
  45. package/scripts/dot/commands/agents.sh +2 -1
  46. package/scripts/dot/commands/ai.sh +19 -33
  47. package/scripts/dot/commands/aliases.sh +2 -1
  48. package/scripts/dot/commands/appearance.sh +2 -1
  49. package/scripts/dot/commands/core.sh +2 -1
  50. package/scripts/dot/commands/diagnostics.sh +2 -1
  51. package/scripts/dot/commands/env-emit.sh +2 -1
  52. package/scripts/dot/commands/fleet.sh +12 -6
  53. package/scripts/dot/commands/init.sh +2 -1
  54. package/scripts/dot/commands/lint.sh +2 -1
  55. package/scripts/dot/commands/manual.sh +2 -1
  56. package/scripts/dot/commands/meta.sh +2 -1
  57. package/scripts/dot/commands/patterns.sh +2 -1
  58. package/scripts/dot/commands/registry.sh +2 -1
  59. package/scripts/dot/commands/restore.sh +2 -1
  60. package/scripts/dot/commands/secrets.sh +2 -1
  61. package/scripts/dot/commands/security.sh +2 -1
  62. package/scripts/dot/commands/tools.sh +2 -1
  63. package/scripts/fonts/install-nerd-fonts.sh +2 -1
  64. package/scripts/fonts/patch-fonts.sh +2 -1
  65. package/scripts/git-hooks/install.sh +2 -1
  66. package/scripts/git-hooks/pre-commit-audit.sh +4 -3
  67. package/scripts/lib/secrets_provider.sh +2 -1
  68. package/scripts/ops/ai-setup.sh +2 -1
  69. package/scripts/ops/bundle.sh +3 -2
  70. package/scripts/ops/chaos.sh +2 -1
  71. package/scripts/ops/chezmoi-apply.sh +19 -5
  72. package/scripts/ops/chezmoi-diff.sh +2 -1
  73. package/scripts/ops/chezmoi-remove.sh +2 -1
  74. package/scripts/ops/chezmoi-update.sh +2 -1
  75. package/scripts/ops/heal-chezmoi.sh +2 -1
  76. package/scripts/ops/heal-system.sh +2 -1
  77. package/scripts/ops/heal-tools.sh +2 -1
  78. package/scripts/ops/heal.sh +2 -1
  79. package/scripts/ops/post-apply-repair.sh +2 -1
  80. package/scripts/ops/prewarm.sh +2 -1
  81. package/scripts/ops/release.sh +2 -1
  82. package/scripts/ops/rollback.sh +2 -1
  83. package/scripts/ops/setup.sh +2 -1
  84. package/scripts/ops/teleport.sh +2 -1
  85. package/scripts/qa/check-version-consistency.sh +2 -1
  86. package/scripts/qa/coverage-baseline.sh +2 -1
  87. package/scripts/qa/docs-coverage.sh +2 -1
  88. package/scripts/qa/reliability-audit.sh +2 -1
  89. package/scripts/qa/scorecard-snapshot.sh +2 -1
  90. package/scripts/qa/traceability-coverage.sh +2 -1
  91. package/scripts/qa/validate-examples.sh +2 -1
  92. package/scripts/qa/wsl-contract.sh +2 -1
  93. package/scripts/secrets/age-init.sh +2 -1
  94. package/scripts/secrets/create-secrets-file.sh +2 -1
  95. package/scripts/secrets/encrypt-ssh-key.sh +2 -1
  96. package/scripts/security/backup.sh +2 -1
  97. package/scripts/security/check-disclosure-key-expiry.sh +2 -1
  98. package/scripts/security/dns-doh.sh +2 -1
  99. package/scripts/security/encryption-check.sh +2 -1
  100. package/scripts/security/enforce-policies.sh +2 -1
  101. package/scripts/security/firewall.sh +2 -1
  102. package/scripts/security/lock-configs.sh +2 -1
  103. package/scripts/security/lock-screen.sh +2 -1
  104. package/scripts/security/manage-secrets.sh +2 -1
  105. package/scripts/security/ssh-cert.sh +2 -1
  106. package/scripts/security/telemetry-kill.sh +2 -1
  107. package/scripts/security/usb-safety.sh +2 -1
  108. package/scripts/theme/apply-gnome-theme.sh +2 -1
  109. package/scripts/theme/extract-heic-frames.sh +2 -1
  110. package/scripts/theme/extract-theme.py +2 -1
  111. package/scripts/theme/install-boot-logo.sh +2 -1
  112. package/scripts/theme/install-catppuccin-themes.sh +2 -1
  113. package/scripts/theme/install-cursors.sh +2 -1
  114. package/scripts/theme/install-file-icons.sh +2 -1
  115. package/scripts/theme/install-grub-theme.sh +2 -1
  116. package/scripts/theme/install-lock-icon.sh +2 -1
  117. package/scripts/theme/merge-wallpaper.sh +2 -1
  118. package/scripts/theme/rebuild-themes.sh +26 -3
  119. package/scripts/theme/switch.sh +3 -2
  120. package/scripts/theme/wallpaper-rotate.sh +2 -1
  121. package/scripts/theme/wallpaper-sync.sh +3 -2
  122. package/scripts/tools/cmatrix.sh +2 -1
  123. package/scripts/tools/detect-collisions.py +2 -1
  124. package/scripts/tools/emoji-picker.sh +2 -1
  125. package/scripts/tools/figlet-banner.sh +2 -1
  126. package/scripts/tools/log-rotate.sh +2 -1
  127. package/scripts/tools/lolcat-wrap.sh +2 -1
  128. package/scripts/tools/pipes.sh +2 -1
  129. package/scripts/tuning/linux.sh +2 -1
  130. package/scripts/tuning/macos.sh +2 -1
  131. package/scripts/uninstall.sh +2 -1
  132. package/scripts/version-sync.sh +21 -4
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  set -euo pipefail
4
5
 
5
6
  if command -v lolcat >/dev/null; then
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  set -euo pipefail
4
5
 
5
6
  # Simple terminal pipes screensaver
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  # Linux System Tuning (opt-in)
4
5
  # Managed by chezmoi - https://github.com/sebastienrousseau/dotfiles
5
6
  #
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  # macOS tuning (opt-in)
4
5
 
5
6
  set -euo pipefail
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  # Uninstall dotfiles and clean up all artifacts.
4
5
 
5
6
  set -euo pipefail
@@ -1,5 +1,6 @@
1
1
  #!/usr/bin/env bash
2
- # Copyright (c) 2015-2026 Dotfiles. All rights reserved.
2
+ # SPDX-License-Identifier: MIT
3
+ # Copyright (c) 2015-2026 Sebastien Rousseau
3
4
  # Version Synchronization Script
4
5
  # Synchronizes version numbers across all markdown files with package.json
5
6
  # Used by CI/CD and available for local testing
@@ -7,7 +8,7 @@
7
8
  set -euo pipefail
8
9
 
9
10
  _cleanup_files=()
10
- trap 'rm -f "${_cleanup_files[@]}"' EXIT
11
+ trap 'set +u; rm -f "${_cleanup_files[@]}" 2>/dev/null; set -u' EXIT
11
12
 
12
13
  # Configuration
13
14
  SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -63,6 +64,17 @@ EXCLUDE_FILES=(
63
64
  "docs/manual/05-appendices/D-bibliography.md"
64
65
  "docs/operations/MAINTENANCE.md"
65
66
 
67
+ # Release-process / structural docs that reference *historical* dotfiles
68
+ # versions (the repo reorg, past release tags, migration scenarios).
69
+ # Bumping these each release would corrupt accurate history.
70
+ "docs/operations/RELEASE_PIPELINE.md"
71
+ "docs/operations/TESTING.md"
72
+ "docs/STRUCTURE.md"
73
+ "install/migrate/README.md"
74
+ "install/README.md"
75
+ "tools/README.md"
76
+ "defaults/README.md"
77
+
66
78
  # CI_COMPOSITES.md cites third-party action versions (e.g. v5.0.5),
67
79
  # not dotfiles_version. False-positive pattern match.
68
80
  "docs/operations/CI_COMPOSITES.md"
@@ -154,9 +166,14 @@ find_version_files() {
154
166
 
155
167
  log_info "Scanning for markdown files with version references..."
156
168
 
157
- # Find all markdown files with version patterns
169
+ # Find all markdown files with version patterns.
170
+ # The "." path is required: with no path and a non-TTY stdin (CI, pipes,
171
+ # background jobs) rg reads from stdin instead of searching the tree, so
172
+ # the whole script hangs forever. The `sed` strips rg's leading "./" so
173
+ # the paths match the EXCLUDE_FILES entries (which have no "./"),
174
+ # otherwise excluded historical docs get rewritten.
158
175
  cd "$PROJECT_ROOT"
159
- rg -l "v?$VERSION_PATTERN" --type md >"$temp_file" 2>/dev/null || true
176
+ rg -l "v?$VERSION_PATTERN" --type md . 2>/dev/null | sed 's|^\./||' >"$temp_file" || true
160
177
 
161
178
  # Add known files that should be checked even if they don't have versions yet
162
179
  echo "README.md" >>"$temp_file"