@sebastienrousseau/dotfiles 0.2.504 → 0.2.507

package/docs/operations/TRUSTED_AGENT_WORKSTATION.md

@@ -20,12 +20,12 @@ It defines a signed, local-first workstation baseline for agentic development on
 
 The source of truth lives in tracked JSON artifacts:
 
-- [policy-bundles.json](/home/seb/.dotfiles/dot_config/dotfiles/policy-bundles.json)
-- [agent-profiles.json](/home/seb/.dotfiles/dot_config/dotfiles/agent-profiles.json)
-- [mcp-policy.json](/home/seb/.dotfiles/dot_config/dotfiles/mcp-policy.json)
-- [mcp-registry.json](/home/seb/.dotfiles/dot_config/dotfiles/mcp-registry.json)
-- [model-registry.json](/home/seb/.dotfiles/dot_config/dotfiles/model-registry.json)
-- [prompt-registry.json](/home/seb/.dotfiles/dot_config/dotfiles/prompt-registry.json)
+- [policy-bundles.json](../../defaults/dot_config/dotfiles/policy-bundles.json)
+- [agent-profiles.json](../../defaults/dot_config/dotfiles/agent-profiles.json)
+- [mcp-policy.json](../../defaults/dot_config/dotfiles/mcp-policy.json)
+- [mcp-registry.json](../../defaults/dot_config/dotfiles/mcp-registry.json)
+- [model-registry.json](../../defaults/dot_config/dotfiles/model-registry.json)
+- [prompt-registry.json](../../defaults/dot_config/dotfiles/prompt-registry.json)
 
 ## Enterprise path
 

package/docs/reference/TOOLS.md

@@ -99,7 +99,7 @@ Detailed guide: [AI.md](../AI.md).
 | **Claude CLI** | Anthropic's terminal assistant |
 | **Copilot CLI** | GitHub Copilot in the terminal |
 | **Kiro CLI** | Agentic AI terminal assistant |
-| **Gemini CLI** | Google's multi-modal CLI tool |
+| **Antigravity CLI** | Google's Antigravity CLI (`agy`) |
 | **Mods/Fabric** | Pipeline-friendly AI processing |
 | **sgpt** | Shell-GPT for terminal AI queries |
 | **Ollama** | Run large language models locally |

package/docs/reference/UTILS.md

@@ -56,9 +56,9 @@ The `dot` command is the main interface for managing dotfiles. Run `dot version`
 | `dot history` | Analyse shell history |
 | `dot security-score` | Score workstation security (`--verbose/-v`,`--quiet/-q`,`--json/-j`) |
 | `dot snapshot` | Capture workstation state (`--baseline/-b`,`--force/-f`) |
-| `dot ai` | Show categorized AI CLI status and launch an installed provider |
-| `dot ai-setup` | Bootstrap supported AI CLIs interactively |
-| `dot ai-query` | Run context-aware AI queries over the repo |
+| `dot ai` | Open the AI fleet cockpit; run prompts, serve a local Claude gateway, install, cost |
+| `dot ai-setup` | Bootstrap AI CLIs interactively (deprecated alias for `dot ai login`) |
+| `dot ai-query` | Context-aware RAG query over the repo (deprecated alias for `dot ai ask`) |
 | `dot mode` | Show or switch the active agent profile |
 | `dot agent` | Inspect agent metadata, logs, checkpoints, and conformance |
 | `dot agent checkpoint` | Save, list, show, and replay bounded agent checkpoints |
@@ -110,18 +110,22 @@ POSIX scripts in `~/.local/bin/` that work across macOS, Linux, and WSL.
 
 Themes are auto-generated from wallpapers — `themes.toml` is not hand-edited. See [Theming Guide](../guides/THEMING.md) for the K-Means CIELAB extraction model and Apple-compatible dynamic HEIC support.
 
-## AI Bridges
+## AI Bridges (deprecated aliases)
+
+These run a tool with dotfiles context injection. They still work but are
+**deprecated** in favour of `dot ai <tool>` (e.g. `dot ai claude "…"`); each
+prints a one-line hint. See [AI.md](../AI.md) for the full surface.
 
 | Command | Description |
 |---------|-------------|
-| `dot cl` | Invoke Claude Code with dotfiles context injection |
-| `dot copilot` | Invoke GitHub Copilot CLI with dotfiles context injection |
-| `dot gemini` | Invoke Gemini CLI with dotfiles context injection |
-| `dot kiro` | Invoke Kiro CLI with dotfiles context injection |
-| `dot sgpt` | Invoke Shell-GPT with dotfiles context injection |
-| `dot ollama` | Invoke Ollama with dotfiles context injection |
-| `dot opencode` | Invoke OpenCode with dotfiles context injection |
-| `dot aider` | Invoke Aider with dotfiles context injection |
+| `dot cl` | Claude Code with context injection — use `dot ai claude` |
+| `dot copilot` | GitHub Copilot CLI — use `dot ai copilot` |
+| `dot agy` | Antigravity CLI — use `dot ai agy` |
+| `dot kiro` | Kiro CLI — use `dot ai kiro` |
+| `dot sgpt` | Shell-GPT — use `dot ai sgpt` |
+| `dot ollama` | Ollama — use `dot ai ollama` |
+| `dot opencode` | OpenCode — use `dot ai opencode` |
+| `dot aider` | Aider — use `dot ai aider` |
 
 ## Secrets
 

package/docs/security/AUTOMATION_SECRETS.md

@@ -21,6 +21,6 @@ render_with_liquid: false
 ## Provisioning notes
 
 1. Store the SSH signing private key in GitHub Actions as `ACTIONS_BOT_SIGNING_KEY`.
-2. Store the matching public key in [allowed_signers](/home/seb/.dotfiles/dot_config/git/allowed_signers).
+2. Store the matching public key in [allowed_signers](../../defaults/dot_config/git/allowed_signers.tmpl).
 3. Rotate the key on personnel or workstation change.
 4. Fail closed when secrets are absent.

package/docs/security/MCP_POLICY.md

@@ -21,9 +21,9 @@ Properties:
 
 ## Policy artifact
 
-The source of truth lives in [mcp-policy.json](/home/seb/.dotfiles/dot_config/dotfiles/mcp-policy.json).
-Approved package pins live in [mcp-lock.json](/home/seb/.dotfiles/dot_config/dotfiles/mcp-lock.json).
-Tracked server registry entries live in [mcp-registry.json](/home/seb/.dotfiles/dot_config/dotfiles/mcp-registry.json).
+The source of truth lives in [mcp-policy.json](../../defaults/dot_config/dotfiles/mcp-policy.json).
+Approved package pins live in [mcp-lock.json](../../defaults/dot_config/dotfiles/mcp-lock.json).
+Tracked server registry entries live in [mcp-registry.json](../../defaults/dot_config/dotfiles/mcp-registry.json).
 
 Current defaults:
 
@@ -75,4 +75,4 @@ Current approved refs:
 - active servers match the tracked registry entries
 - remote HTTP transports are HTTPS and OAuth-backed
 
-Policy bundle baselines live in [policy-bundles.json](/home/seb/.dotfiles/dot_config/dotfiles/policy-bundles.json).
+Policy bundle baselines live in [policy-bundles.json](../../defaults/dot_config/dotfiles/policy-bundles.json).

package/docs/security/SECURITY_CHECKLIST.md

@@ -11,7 +11,7 @@ Use this checklist before cutting any new release (e.g., `v0.x.x`) to ensure sup
 - [ ] **Pinned Version**: Update `install.sh` `VERSION` variable to match the release tag.
 - [ ] **Docs Sync**: Ensure `README.md` and `.github/PULL_REQUEST_TEMPLATE.md` installer URLs point to the new tag (not `main`).
 - [ ] **Clean Build**: Verify `install.sh` does not curl random scripts from third parties without pinning.
-- [ ] **SOUP Register**: Review [SOUP_REGISTER.md](/home/seb/.dotfiles/docs/security/SOUP_REGISTER.md) and confirm all active external components have an owner and validation path.
+- [ ] **SOUP Register**: Review [SOUP_REGISTER.md](SOUP_REGISTER.md) and confirm all active external components have an owner and validation path.
 
 ## 2. Secrets & Leak Prevention
 

package/docs/security/SOUP_REGISTER.md

@@ -12,13 +12,13 @@ Controlled inventory for software of unknown pedigree used by the dotfiles platf
 
 | Component | Source | Version control | Verification path | Owner | Status |
 | :--- | :--- | :--- | :--- | :--- | :--- |
-| Homebrew installer | `raw.githubusercontent.com/Homebrew/install` | Moving upstream script, gated by `HOMEBREW_INSTALLER_SHA256` | SHA-256 in [package_managers.sh](/home/seb/.dotfiles/install/lib/package_managers.sh) | Repo maintainer | Conditional |
+| Homebrew installer | `raw.githubusercontent.com/Homebrew/install` | Moving upstream script, gated by `HOMEBREW_INSTALLER_SHA256` | SHA-256 in [package_managers.sh](../../install/lib/package_managers.sh) | Repo maintainer | Conditional |
 | Chezmoi installer | `get.chezmoi.io` | Pinned by `CHEZMOI_INSTALLER_SHA256` when used | SHA-256 in `install/lib/chezmoi.sh` | Repo maintainer | Controlled |
 | GitHub Actions marketplace actions | GitHub Marketplace | Full commit SHA pinning | Workflow `uses:` pins | Repo maintainer | Controlled |
-| Grype container | `anchore/grype` | Pinned tag in workflow | Container tag in [security-enhanced.yml](/home/seb/.dotfiles/.github/workflows/security-enhanced.yml) | Repo maintainer | Controlled |
-| Trivy container | `aquasec/trivy` | Pinned tag in workflow | Container tag in [security-enhanced.yml](/home/seb/.dotfiles/.github/workflows/security-enhanced.yml) | Repo maintainer | Controlled |
+| Grype container | `anchore/grype` | Pinned tag in workflow | Container tag in [security-enhanced.yml](../../.github/workflows/security-enhanced.yml) | Repo maintainer | Controlled |
+| Trivy container | `aquasec/trivy` | Pinned tag in workflow | Container tag in [security-enhanced.yml](../../.github/workflows/security-enhanced.yml) | Repo maintainer | Controlled |
 | Checkov action | GitHub Marketplace | Full commit SHA pinning | Workflow `uses:` pin | Repo maintainer | Controlled |
-| Nix inputs | GitHub flakes | Locked in [flake.lock](/home/seb/.dotfiles/flake.lock) | `narHash` and revision lock | Repo maintainer | Controlled |
+| Nix inputs | GitHub flakes | Locked in [flake.lock](../../flake.lock) | `narHash` and revision lock | Repo maintainer | Controlled |
 | GitHub release metadata queries | GitHub API | Discovery only, not release validation | `update-deps.yml` query path | Repo maintainer | Monitored |
 
 ## Validation record

package/install.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Universal Dotfiles Installer (Zero-Dependency)
 # Usage: bash -c "$(curl -fsSL https://raw.githubusercontent.com/sebastienrousseau/dotfiles/master/install.sh)"
 # (or ./install.sh locally)
@@ -59,7 +60,7 @@ show_help() {
 Usage: install.sh [version] [options]
 
 Arguments:
-  version       The version (tag or branch) to install (default: v0.2.504)
+  version       The version (tag or branch) to install (default: v0.2.507)
 
 Options:
   --help        Show this help message
@@ -75,7 +76,7 @@ EOF
 }
 
 main() {
-  local version="v0.2.504"
+  local version="v0.2.507"
   local version_set=0
   local minimal=0
   local provision="${DOTFILES_PROVISION:-0}"
@@ -105,7 +106,7 @@ main() {
         # like `foobar` doesn't trigger a 30s+ network download attempt.
         # Caught by the install.sh fuzz harness (#881).
         if [[ ! "$arg" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+([-+][a-zA-Z0-9.-]+)?$ ]]; then
-          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.504)."
+          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.507)."
         fi
         version="$arg"
         version_set=1
@@ -350,7 +351,7 @@ main() {
   # 6. Initialize & Apply
   step "Applying Configuration..."
 
-  # ── Auto-migration for v0.2.504 reorg ─────────────────────────────────
+  # ── Auto-migration for v0.2.507 reorg ─────────────────────────────────
   # If the user is upgrading from a pre-0.2.503 install, run the
   # migration script BEFORE `chezmoi apply` so the reorg's source-
   # path moves don't cause chezmoi to delete deployed files.
@@ -359,7 +360,7 @@ main() {
   for migrate_src in "$SOURCE_DIR" "$LEGACY_SOURCE_DIR"; do
     migrate_script="$migrate_src/install/migrate/migrate-v0_2-to-v0_2_503.sh"
     if [[ -x "$migrate_script" ]]; then
-      echo "   Running v0.2.504 migration (idempotent; safe on fresh installs)..."
+      echo "   Running v0.2.507 migration (idempotent; safe on fresh installs)..."
       "$migrate_script" || echo "   migration exited non-zero — continuing apply"
       break
     fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebastienrousseau/dotfiles",
-  "version": "0.2.504",
+  "version": "0.2.507",
   "description": "The Trusted Shell Platform — Universal dotfiles managed by Chezmoi. Features Bash & Zsh for macOS, Linux & WSL. Rust modern tooling & enterprise-grade security.",
   "main": "install.sh",
   "bin": {

package/scripts/ci/check-copyright-headers.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
 # Pinned reusable workflows on master still reference the old path;
 # this delegates so they keep working until the next pin bump.

package/scripts/ci/check-shell-preamble.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
 # Pinned reusable workflows on master still reference the old path;
 # this delegates so they keep working until the next pin bump.

package/scripts/ci/guard-gitleaks-checkout.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
 # Pinned reusable workflows on master still reference the old path;
 # this delegates so they keep working until the next pin bump.

package/scripts/demo/record.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 OUT="${1:-$HOME/.dotfiles/docs/demo/demo.gif}"

package/scripts/diagnostics/a2a-conformance.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## A2A v0.3 and agent card conformance validation.
 
 set -euo pipefail

package/scripts/diagnostics/alias-governance.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Alias governance checks:
 # - duplicate alias names
 # - risky overrides must be gated

package/scripts/diagnostics/aliases-cheatsheet.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/diagnostics/aliases-manifest.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Emit alias manifest as TSV:
 # name<TAB>value<TAB>file<TAB>line
 

package/scripts/diagnostics/benchmark.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Shell Performance Benchmark.
 ##
 ## Measures shell startup time with per-component profiling. Uses hyperfine

package/scripts/diagnostics/conflicts.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Alias/Command Conflicts Report
 # Usage: dot conflicts
 

package/scripts/diagnostics/doctor-unified.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Unified doctor orchestrator — parses flags and dispatches to existing scripts.
 set -euo pipefail
 

package/scripts/diagnostics/doctor.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Dotfiles Doctor.
 ##
 ## Diagnoses dotfiles environment health by checking dependencies, paths,
@@ -168,7 +169,7 @@ fi
 
 # --- AI CLIs ---
 _section "AI CLIs"
-for cmd in claude copilot gemini sgpt ollama opencode aider kiro-cli; do
+for cmd in claude copilot agy sgpt ollama opencode aider kiro-cli; do
   if check_cmd "$cmd"; then
     _ok "$cmd" "$(pretty_path "$(get_cmd_path "$cmd")")"
   else
@@ -732,7 +733,7 @@ else
 $doctor_report
 ---
 Suggest specific shell commands to fix these issues according to our architectural standards."
-    dot cl --pattern hardener "$ai_prompt"
+    dot ai claude --style hardener "$ai_prompt"
   fi
   exit 1
 fi

package/scripts/diagnostics/drift-dashboard.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # =============================================================================
 # drift-dashboard.sh — Consolidated drift report.
 #

package/scripts/diagnostics/health.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles Health Check Dashboard
 # Usage: dot health [--verbose|-v] [--json|-j] [--fix|-f] [--force|-F]
 

package/scripts/diagnostics/history-analysis.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/diagnostics/mcp-doctor.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## MCP configuration diagnostics and hardening checks.
 ##
 ## Validates MCP (Model Context Protocol) server configurations for security

package/scripts/diagnostics/perf.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Shell Performance Profiling
 # Usage: dot perf [--json|-j] [--profile|-p] [--runs|-r N] [--target|-t MS]
 

package/scripts/diagnostics/scorecard.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles Scorecard
 # Usage: dot scorecard [--json|-j]
 

package/scripts/diagnostics/secret-governance.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

package/scripts/diagnostics/security-score.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Security Score Assessment.
 ##
 ## Evaluates system security posture across encryption, SSH, Git, system

package/scripts/diagnostics/smoke-test.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Smoke tests to quickly verify toolchain health after installation/updates.
 
 set -euo pipefail

package/scripts/diagnostics/snapshot.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Snapshot current system/tooling state
 # Usage: dot snapshot [--baseline|-b] [--force|-f]
 

package/scripts/diagnostics/verify.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles post-merge verification checks
 # Runs doctor + status + diff checks and exits non-zero on issues.
 

package/scripts/diagnostics/verify_state.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
 # MIT License
-# Copyright (c) 2026
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # See LICENSE file for details.
 
 # Script: verify_state.sh

package/scripts/diagnostics/version-locks.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Version Locks Summary
 # Usage: dot locks
 

package/scripts/diagnostics/workstation-attestation.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 ## Workstation attestation export.
 ##
 ## Produces a machine-readable evidence record for the current dotfiles

package/scripts/dot/commands/agent.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # Dotfiles CLI - Agent Mode Commands (extracted from meta.sh)
 # mode list|current|show|set|run|doctor|card|log|checkpoint|conformance
 

package/scripts/dot/commands/agents.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Copyright (c) 2015-2026 Dotfiles. All rights reserved.
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2015-2026 Sebastien Rousseau
 # shellcheck shell=bash
 #
 # scripts/dot/commands/agents.sh
@@ -87,7 +88,7 @@ cline	$root/.clinerules
 aider	$root/.aider.conf.yml
 continue	$root/.continuerc.json
 jules	$root/.jules/system.md
-gemini	$root/.gemini/GEMINI.md
+agy	$root/.agy/AGY.md
 EOF
 }
 
@@ -270,9 +271,9 @@ These rules govern Cascade and the Windsurf agent inside this repository."
       _agents_render_markdown_with_header "$root/.jules/system.md" \
         "Jules" "# Jules system prompt"
 
-      # 8. Gemini — looks for `.gemini/GEMINI.md`.
-      _agents_render_markdown_with_header "$root/.gemini/GEMINI.md" \
-        "Gemini" "# Gemini agent rules"
+      # 8. Antigravity — looks for `.agy/AGY.md`.
+      _agents_render_markdown_with_header "$root/.agy/AGY.md" \
+        "Antigravity" "# Antigravity agent rules"
 
       # 9. Zed — config pointer (TOML).
       local zed_dir="$root/.zed"
@@ -323,7 +324,7 @@ standard read by Codex, Copilot, Cursor, Windsurf, Amp, and Devin.
 
 Harnesses covered by 'render':
   agents-md, cursor, codex, windsurf, zed, roo, cline,
-  aider, continue, jules, gemini.
+  aider, continue, jules, agy.
 EOF
       ;;
     *)