@sebastienrousseau/dotfiles 0.2.504 → 0.2.505

package/scripts/dot/commands/ai.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Dotfiles AI Commands.
 ##
 ## Provides AI CLI status, setup, RAG query, and bridge commands.
@@ -141,26 +142,7 @@ _ai_status_field() {
   awk -F'\t' -v b="$1" -v f="$2" '$1==b{print $f;exit}' "$AI_STATUS_CACHE_FILE" 2>/dev/null
 }
 
-# binary -> mise package mapping
-_ai_mise_pkg() {
-  case "$1" in
-    claude) echo "npm:@anthropic-ai/claude-code" ;;
-    codex) echo "npm:@openai/codex" ;;
-    copilot) echo "npm:@github/copilot" ;;
-    goose) echo "pipx:goose-ai" ;;
-    aider) echo "pipx:aider-chat" ;;
-    opencode) echo "npm:opencode-ai" ;;
-    sgpt) echo "pipx:shell-gpt" ;;
-    gemini) echo "npm:@google/gemini-cli" ;;
-    ollama) echo "aqua:ollama/ollama" ;;
-    kiro-cli) echo "kiro-cli" ;;
-    autohand) echo "npm:autohand-cli" ;;
-    vibe) echo "pipx:mistral-vibe" ;;
-    qwen) echo "npm:@qwen-code/qwen-code" ;;
-    zai) echo "npm:@guizmo-ai/zai-cli" ;;
-    *) echo "" ;;
-  esac
-}
+# _ai_mise_pkg (binary -> mise package map) is defined in lib/dot/ai-install.sh.
 
 cmd_ai_status() {
   ui_header "AI CLI Status"
@@ -254,6 +236,10 @@ cmd_ai_status() {
       echo ""
       for entry in "${_ai_to_install[@]}"; do
         IFS='|' read -r name bin <<<"$entry"
+        if [[ "$bin" == "claude" ]]; then
+          install_claude_native "$name"
+          continue
+        fi
         local pkg
         pkg=$(_ai_mise_pkg "$bin")
         if [[ -n "$pkg" ]]; then
@@ -334,7 +320,7 @@ cmd_ai_delegate() {
   # Usage: dot ai delegate "<prompt>" [max-turns] [agent] [timeout]
   if [[ $# -lt 1 ]]; then
     ui_err "Usage" "dot ai delegate \"<prompt>\" [max-turns] [agent] [timeout-secs]"
-    ui_info "Example" "dot ai delegate \"add a CHANGELOG entry for v0.2.504\""
+    ui_info "Example" "dot ai delegate \"add a CHANGELOG entry for v0.2.505\""
     return 1
   fi
   local prompt="$1"

package/scripts/dot/commands/aliases.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Aliases Commands (extracted from tools.sh)
 # aliases list|search|why|stats|cheatsheet|tiers, alias-check
 

package/scripts/dot/commands/appearance.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Appearance Commands
 # theme, wallpaper, fonts, tune
 

package/scripts/dot/commands/core.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Dotfiles Core Commands — Core chezmoi operations for the dot CLI.
 ##
 ## Provides apply, sync, update, add, diff, status, remove, cd, and edit

package/scripts/dot/commands/diagnostics.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Diagnostics Commands
 # doctor, heal, health, rollback, drift, history, benchmark, verify, perf,
 # scorecard, conflicts, locks, snapshot, load-bench, chaos, bundle, attest

package/scripts/dot/commands/env-emit.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 #
 # `dot env emit` — render a portable workstation-environment
 # manifest. The output is the canonical "what is installed on this

package/scripts/dot/commands/fleet.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Fleet Commands
 # fleet status|nodes|drift|events|namespace
 

package/scripts/dot/commands/init.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck shell=bash
 #
 # scripts/dot/commands/init.sh

package/scripts/dot/commands/lint.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Lint Command
 # Wraps shellcheck and shfmt with project-specific flags
 

package/scripts/dot/commands/manual.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # dot manual — open or download the dotfiles manual in multiple formats.
 #
 # Usage:

package/scripts/dot/commands/meta.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Meta Commands
 # upgrade, prewarm, docs, learn, keys, sandbox, mcp, mode, agent
 

package/scripts/dot/commands/patterns.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # AI Steering Patterns Management.
 # Usage: dot patterns [list|view|edit] [name]
 

package/scripts/dot/commands/registry.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck shell=bash
 #
 # scripts/dot/commands/registry.sh

package/scripts/dot/commands/restore.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # dot restore - Restore dotfiles from backup or previous state
 # Usage: dot restore [--list|-l|--latest|-L|<backup-id>]
 

package/scripts/dot/commands/secrets.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Secrets/Env Commands
 # secrets-init, secrets, secrets-create, ssh-key, env load
 

package/scripts/dot/commands/security.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Security Commands
 # backup, encrypt-check, firewall, telemetry, dns-doh, lock-screen, usb-safety
 

package/scripts/dot/commands/tools.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Tools Commands
 # tools, new, packages, log-rotate, aliases, alias-check, env, profile
 

package/scripts/fonts/install-nerd-fonts.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/fonts/patch-fonts.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 if [[ $# -lt 1 ]]; then

package/scripts/git-hooks/install.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"

package/scripts/git-hooks/pre-commit-audit.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles Pre-Commit Sentinel (Audit Hook)
 # Prevents secrets, hardcoded paths, and shell hygiene violations.
 
@@ -140,6 +141,6 @@ if [[ $FAILED -eq 1 ]]; then
   printf '%b\\n' "   (Use --no-verify to bypass if absolutely necessary)"
   exit 1
 else
-  printf '%b\n' "${GREEN}${BOLD}✅ Audit passed.${NC} v0.2.504 standards maintained."
+  printf '%b\n' "${GREEN}${BOLD}✅ Audit passed.${NC} v0.2.505 standards maintained."
   exit 0
 fi

package/scripts/lib/secrets_provider.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Provider-agnostic secrets bridge for dotfiles.
 
 set -euo pipefail

package/scripts/ops/ai-setup.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Universal AI Toolchain Setup & Authentication.
 
 set -euo pipefail

package/scripts/ops/bundle.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Create an offline bundle of the dotfiles environment for air-gapped systems.
 
 set -euo pipefail

package/scripts/ops/chaos.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Chaos Engineering: Randomly corrupt config files to test self-healing (dot heal)
 # USE WITH CAUTION: This intentionally breaks your environment.
 

package/scripts/ops/chezmoi-apply.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -9,6 +10,9 @@ source "$SCRIPT_DIR/../../lib/dot/ui.sh"
 # shellcheck source=../../lib/dot/log.sh
 # shellcheck disable=SC1091
 source "$SCRIPT_DIR/../../lib/dot/log.sh"
+# shellcheck source=../../lib/dot/ai-install.sh
+# shellcheck disable=SC1091
+source "$SCRIPT_DIR/../../lib/dot/ai-install.sh"
 export DOT_COMMAND="apply"
 
 # Temp file cleanup. `set +u` guards the array expansion: on bash 3.2
@@ -154,9 +158,9 @@ check_cmd() {
 echo ""
 ui_header "AI provider CLI checks (optional)"
 
-# binary|mise_package|label
+# binary|mise_package|label  (claude uses the native installer, not mise)
 _AI_PROVIDERS=(
-  "claude|npm:@anthropic-ai/claude-code|Claude Code"
+  "claude|native|Claude Code"
   "copilot|npm:@github/copilot|Copilot CLI"
   "gemini|npm:@google/gemini-cli|Gemini CLI"
   "sgpt|pipx:shell-gpt|Shell-GPT"
@@ -224,6 +228,10 @@ if [[ ${#_ai_missing[@]} -gt 0 ]] && [[ "${DOTFILES_NONINTERACTIVE:-0}" != "1" ]
       echo ""
       for _entry in "${_ai_to_install[@]}"; do
         IFS='|' read -r _bin _pkg _label <<<"$_entry"
+        if [[ "$_bin" == "claude" ]]; then
+          install_claude_native "$_label"
+          continue
+        fi
         if command -v gum &>/dev/null; then
           if gum spin --spinner dot --title "Installing $_label ($_pkg)" -- \
             mise use -g "$_pkg@latest" 2>&1; then

package/scripts/ops/chezmoi-diff.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 excludes=(scripts)

package/scripts/ops/chezmoi-remove.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 if [[ $# -lt 1 ]]; then

package/scripts/ops/chezmoi-update.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 args=()

package/scripts/ops/heal-chezmoi.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck disable=SC2034
 # =============================================================================
 # heal-chezmoi.sh — Chezmoi drift and backup repair functions for heal.sh

package/scripts/ops/heal-system.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck disable=SC2034
 # =============================================================================
 # heal-system.sh — System-level repair functions for heal.sh

package/scripts/ops/heal-tools.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck disable=SC2034
 # =============================================================================
 # heal-tools.sh — Tool installation helpers for heal.sh

package/scripts/ops/heal.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck disable=SC2034
 # =============================================================================
 # Dotfiles Heal Script - Auto-repair common dotfiles issues

package/scripts/ops/post-apply-repair.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/ops/prewarm.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Pre-warm shell initialization caches for ultra-fast startup.
 
 set -euo pipefail

package/scripts/ops/release.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # =============================================================================
 # Dotfiles Release Script
 # Orchestrates a new release: version bump, changelog, tag, and push

package/scripts/ops/rollback.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck disable=SC2034
 # =============================================================================
 # Dotfiles Rollback Script - Self-Healing Configuration Recovery

package/scripts/ops/setup.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Interactive setup for dotfiles preferences
 # Usage: dot setup
 

package/scripts/ops/teleport.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Script: teleport.sh
 # Description: Deploys dotfiles to a remote host ephemerally.
 # Usage: ./teleport.sh user@hostname

package/scripts/qa/check-version-consistency.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 #
 # Verify that every "live" version reference matches the canonical
 # version in .chezmoidata.toml. The intent is to catch drift between

package/scripts/qa/coverage-baseline.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/qa/docs-coverage.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/qa/reliability-audit.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/qa/scorecard-snapshot.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 #
 # Fetch the current OpenSSF Scorecard result and refresh the
 # per-check posture table in docs/security/SCORECARD.md.

package/scripts/qa/traceability-coverage.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/qa/validate-examples.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/qa/wsl-contract.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/secrets/age-init.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SECRETS_DIR="$HOME/.config/chezmoi"

package/scripts/secrets/create-secrets-file.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 OUT_FILE="${1:-$HOME/.config/chezmoi/encrypted_secrets.env.age}"

package/scripts/secrets/encrypt-ssh-key.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 KEY_PATH="${1:-$HOME/.ssh/id_ed25519}"

package/scripts/security/backup.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Create compressed backup of home directory.
 ##
 ## Archives the home directory (excluding cache and trash) to a timestamped

package/scripts/security/check-disclosure-key-expiry.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 #
 # scripts/security/check-disclosure-key-expiry.sh
 #

package/scripts/security/dns-doh.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/security/encryption-check.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/security/enforce-policies.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Security Policy Enforcement Script
 # This script enforces security policies across the dotfiles repository
 

package/scripts/security/firewall.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Configure system firewall with secure defaults.
 ##
 ## Enables firewall with deny-by-default policy and minimal exceptions.

package/scripts/security/lock-configs.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 # MIT License
-# Copyright (c) 2026
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # See LICENSE file for details.
 
 # Script: lock-configs.sh

package/scripts/security/lock-screen.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/security/manage-secrets.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Secure Configuration Management.
 ##
 ## Manages environment variables and secrets across local development.