@sebastienrousseau/dotfiles 0.2.505 → 0.2.507

package/README.md

@@ -9,13 +9,13 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/sebastienrousseau/dotfiles/actions"><img src="https://img.shields.io/github/actions/workflow/status/sebastienrousseau/dotfiles/ci.yml?style=for-the-badge&logo=github" alt="Build" /></a>
-  <a href="https://github.com/sebastienrousseau/dotfiles/releases/latest"><img src="https://img.shields.io/badge/Version-v0.2.505-blue?style=for-the-badge" alt="Version" /></a>
-  <a href="https://github.com/sebastienrousseau/dotfiles/releases"><img src="https://img.shields.io/github/downloads/sebastienrousseau/dotfiles/total?style=for-the-badge" alt="Downloads" /></a>
-  <a href="https://codespaces.new/sebastienrousseau/dotfiles"><img src="https://img.shields.io/badge/Open%20in-Codespaces-blue?style=for-the-badge&logo=github" alt="Open in GitHub Codespaces" /></a>
-  <a href="https://scorecard.dev/viewer/?uri=github.com/sebastienrousseau/dotfiles"><img src="https://img.shields.io/ossf-scorecard/github.com/sebastienrousseau/dotfiles?style=for-the-badge&label=OpenSSF%20Scorecard" alt="OpenSSF Scorecard" /></a>
-  <a href="https://www.bestpractices.dev/projects/12840"><img src="https://img.shields.io/cii/percentage/12840?style=for-the-badge&label=OpenSSF%20Best%20Practices" alt="OpenSSF Best Practices" /></a>
-  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-green?style=for-the-badge" alt="License: MIT" /></a>
+  <a href="https://github.com/sebastienrousseau/dotfiles/actions"><img src="https://img.shields.io/github/actions/workflow/status/sebastienrousseau/dotfiles/ci.yml?style=for-the-badge&logo=githubactions&logoColor=white" alt="Build" /></a>
+  <a href="https://github.com/sebastienrousseau/dotfiles/releases/latest"><img src="https://img.shields.io/badge/Version-v0.2.507-blue?style=for-the-badge&logo=semanticrelease&logoColor=white" alt="Version" /></a>
+  <a href="https://github.com/sebastienrousseau/dotfiles/releases"><img src="https://img.shields.io/github/downloads/sebastienrousseau/dotfiles/total?style=for-the-badge&logo=github&logoColor=white" alt="Downloads" /></a>
+  <a href="https://codespaces.new/sebastienrousseau/dotfiles"><img src="https://img.shields.io/badge/Open%20in-Codespaces-blue?style=for-the-badge&logo=github&logoColor=white" alt="Open in GitHub Codespaces" /></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/sebastienrousseau/dotfiles"><img src="https://img.shields.io/ossf-scorecard/github.com/sebastienrousseau/dotfiles?style=for-the-badge&logo=linuxfoundation&logoColor=white&label=OpenSSF%20Scorecard" alt="OpenSSF Scorecard" /></a>
+  <a href="https://www.bestpractices.dev/projects/12840"><img src="https://img.shields.io/cii/level/12840?style=for-the-badge&logo=linuxfoundation&logoColor=white&label=OpenSSF%20Best%20Practices" alt="OpenSSF Best Practices" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-green?style=for-the-badge&logo=opensourceinitiative&logoColor=white" alt="License: MIT" /></a>
 </p>
 
 ---
@@ -52,7 +52,7 @@
 
 ```bash
 curl -fsSL -o /tmp/dotfiles-install.sh \
-  https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.505/install.sh
+  https://raw.githubusercontent.com/sebastienrousseau/dotfiles/v0.2.507/install.sh
 echo "d5a04c5e2813a93a63c8ecce9655cf3d107f6068862c6eba84a92cf22f801c7e  /tmp/dotfiles-install.sh" \
   | shasum -a 256 -c
 bash /tmp/dotfiles-install.sh
@@ -110,7 +110,7 @@ Most dotfiles repos are personal collections. This one ships as workstation infr
 | **Fleet management** | Multi-node drift dashboard, per-host profiles. | `dot fleet` |
 | **Self-healing** | Auto-repair tools, chezmoi drift, broken symlinks, missing files. | `dot heal`, `dot chaos`, `dot rollback`, `dot bundle` |
 | **Sub-second startup** | Lazy loading, `_cached_eval` pattern, mtime-based cache invalidation, realpath sidecar pins. | `dot perf`, `dot health` |
-| **Multi-shell parity** | Tier-1 (full): zsh, bash. Tier-2 (bridged): fish. Tier-3 (compatible): nushell. PowerShell is supported as a contract-tested parity target. See [ADR-007](docs/adr/ADR-007-multi-shell-parity.md) and [ADR-011](docs/adr/ADR-011-nushell-tier3-keep.md). | `dot env`, `dot profile` |
+| **Multi-shell parity** | Tier-1 (full): zsh, bash. Tier-2 (bridged): fish. Tier-3 (compatible): nushell. PowerShell is supported as a contract-tested parity target. A cross-shell parity contract ([`tests/integration/test_shell_parity.sh`](tests/integration/test_shell_parity.sh)) verifies the canonical command surface and a runtime smoke in every available shell. See [ADR-007](docs/adr/ADR-007-multi-shell-parity.md) and [ADR-011](docs/adr/ADR-011-nushell-tier3-keep.md). | `dot env`, `dot profile` |
 | **Build artifacts → /tmp** | Cargo, Go, pip, uv, and Zig caches redirect to `/tmp/builds/`. Project dirs stay clean. | `~/.config/mise/config.toml`, `~/.cargo/config.toml` |
 | **Encrypted secrets** | Age and SOPS keep per-machine secrets out of plaintext history. | `dot secrets` |
 | **Portable runtimes** | Mise for managed toolchains. Nix Flakes for strict reproducibility. | `dot env`, `dot upgrade` |
@@ -212,7 +212,7 @@ A [Claude Code skill](defaults/dot_claude/skills/dotfiles-bootstrap/SKILL.md) is
 
 | | |
 |:---|:---|
-| `dot ai` | Show installed AI tools |
+| `dot ai` | AI fleet cockpit — run, chat, install, serve a local Claude gateway, cost |
 | `dot mcp` | Inspect MCP policy and registry |
 | `dot mode` | Show or set the agent profile (ask / plan / apply / audit) |
 | `dot agent` | Agent metadata, logs, checkpoints, conformance |
@@ -300,7 +300,7 @@ See the [Migration Guide](docs/operations/MIGRATION.md) for version upgrades.
 - **Pattern library** (`dot patterns`) — architect, hardener, and refactor patterns bundled in `dot_config/ai/patterns/`
 - **MCP policy enforcement** (`dot mcp`) — validate the Model Context Protocol registry against policy
 - **AI commit messages** (`dot commit`) — conventional commits generated from the staged diff
-- **AI tools** (`dot ai`) — Codex, GitHub Copilot, Gemini CLI, and friends managed via Mise; Claude Code via Anthropic's native installer
+- **AI fleet cockpit** (`dot ai`) — install and run Codex, Copilot, Antigravity, Aider, OpenCode, and friends from one Bubble Tea TUI; `dot ai serve` serves your Claude subscription locally to any Anthropic/OpenAI-protocol tool. See [docs/AI.md](docs/AI.md)
 - **Attestation logs** — every agent session is logged with a policy hash and an outcome
 
 </details>

package/docs/AI.md

@@ -6,92 +6,161 @@ render_with_liquid: false
 
 AI helpers are **off by default**. You choose if and when to turn them on.
 
-## Enable AI helpers
-
 ```bash
 export DOTFILES_AI=1
 exec zsh
 ```
 
-This turns on the local helper scripts for context suggestions and error analysis. It does not install any AI tools.
+This enables the local helper scripts and the `dot ai` command surface. It does **not** install any AI tools or run any background service.
+
+## Why `dot ai`?
+
+`claude` is one tool. **`dot ai` is the cockpit for your whole AI-CLI fleet.** Use it to install the tools, launch any of them with one keystroke, meter their cost in one place, and — the headline — run every one of them on your single Claude subscription through a built-in local gateway.
+
+You use `claude` to talk to Claude. You use `dot ai` to run *everything else* on Claude and keep one cockpit over all of it.
+
+## Quick start
+
+```bash
+dot ai install all        # install the fleet (only what's missing)
+dot ai                    # open the cockpit (TUI)
+dot ai "fix the auth bug" # one-shot on Claude — just like `claude "…"`
+dot ai serve              # serve your Claude subscription locally to the fleet
+```
+
+## Command surface
+
+The interface is flat and verb-first, modelled on the Claude CLI: bare opens an interactive view, a prompt runs it, and old commands keep working as deprecated aliases.
+
+| Command | What it does |
+|---------|--------------|
+| `dot ai` | Open the **cockpit** — a Bubble Tea TUI for the fleet, gateway, and cost |
+| `dot ai "<prompt>"` | One-shot prompt on Claude |
+| `dot ai <tool> "<prompt>"` | One-shot prompt on a named tool (e.g. `dot ai codex "add tests"`) |
+| `dot ai chat [tool]` | Open an interactive session (picker if no tool) |
+| `dot ai tools` | Install / manage the fleet |
+| `dot ai install [all\|<tool>]` | Install all missing tools, or one |
+| `dot ai serve [stop\|status]` | Start the local Claude gateway **and** route the fleet through it |
+| `dot ai cost` | Spend report across providers |
+| `dot ai login [tool]` | Authenticate a tool |
+| `dot ai doctor` | Health-check the fleet and the gateway |
+| `--style <name>` | Steer any prompt with a pattern (see [Steering styles](#steering-styles)) |
+
+## The cockpit (`dot ai`)
+
+Running `dot ai` on a terminal opens a glamorous, chat-centric TUI (built with [Bubble Tea](https://github.com/charmbracelet/bubbletea), Charm/Crush-style):
+
+- **Header** — the `◆ dot ai` wordmark plus gateway status (`● :3456` / `○ off`) and today's cost as colour chips.
+- **Left** — the fleet grouped by role, with `●`/`○` install markers and a `▌` selection accent.
+- **Right** — a **chat panel**: pick a tool, type a prompt in the input box, press `Enter`, and the response streams back in the transcript — all without leaving the TUI.
+
+```text
+Tab focus   ↑↓ move   ⏎ send   s serve   i install   c refresh   q quit
+```
+
+Two modes per tool: **Enter on the fleet** opens the tool's *full native session* (where its own `/exit`, `/model`, `/clear`, … work); **Tab / `/`** drops into the quick in-cockpit streaming chat. In the chat input, typing `/` opens a **tool-aware command palette** — the cockpit commands (`/help /clear /style /tool /serve /cost /exit`, which run in-chat) plus the selected provider's common REPL commands (`/compact /model /resume /agents` for claude; `/add /diff /commit` for aider; `/approvals /status` for codex; …), tagged `→ <tool> session`. Navigate with `↑↓`, `Tab` to complete, `Enter` to run. Prompts run through `dot ai <tool>`, so the cockpit and the command line behave identically.
+
+The cockpit also offers a **model picker** (`/model <name>` or the `m` key cycles `default → opus → sonnet → haiku`; the active model shows in the header and is applied to the Claude engine via `ANTHROPIC_MODEL`), **session persistence** (each completed turn is saved to `$XDG_STATE_HOME/dot-ai-tui/session.json`; `/resume` restores your last conversation, `/save` snapshots the current one), and **desktop notifications** when a reply takes longer than ~8s (macOS `osascript` / Linux `notify-send`). In non-interactive contexts (CI, pipes) `dot ai` falls back to a plain text fleet listing. The cockpit binary (`dot-ai-tui`) is built on `chezmoi apply` via the mise-managed Go toolchain; `DOT_AI_SNAPSHOT=1 dot-ai-tui` prints a single frame for previews.
 
-## Steering Patterns
+## Steering styles
 
-Patterns in `~/.dotfiles/dot_config/ai/patterns/` add focused context to AI requests.
+Styles in `~/.dotfiles/dot_config/ai/patterns/` add focused context to any prompt with `--style <name>`:
 
-- **Architect** — shell setup and stack tuning
-- **Hardener** — security, encryption, and compliance
-- **Refactor** — POSIX compatibility, performance, and linting
+- **architect** — shell setup and stack tuning
+- **hardener** — security, encryption, and compliance
+- **refactor** — POSIX compatibility, performance, and linting
+
+```bash
+dot ai claude --style architect "optimize my zshrc"
+dot ai agy --style hardener "audit my ssh config"
+```
 
-### Contextual Bridge
+The bridge also injects system details (OS, architecture, date) so the model has the context it needs. Quick aliases ship for the common combinations: `dcla` (Claude + architect), `dagyh` (Antigravity + hardener), `dkir` (Kiro + refactor).
 
-Use the `dot` CLI to run AI tools with added context:
+## Running tools
 
 ```bash
-# General usage
-dot cl|codex|copilot|gemini|goose|kiro|sgpt|ollama|opencode|aider|autohand|vibe|qwen|zai --pattern <name> "prompt"
+dot ai "explain this stack trace"     # one-shot on Claude
+dot ai codex "add a test for parse()" # one-shot on a specific tool
+dot ai chat                            # pick a tool and open its session
+dot ai chat aider                      # open aider directly
+```
+
+## The local Claude gateway (`dot ai serve`)
 
-# Quick aliases
-dcla "Optimize my zshrc"      # Claude + Architect
-dgmnh "Audit my ssh config"   # Gemini + Hardener
-dkir "Refactor this script"   # Kiro + Refactorer
+Run one Claude subscription locally and point your whole fleet at it — with **no third-party dependency**. `dot-ai-serve` is a small, stdlib-only Python server (no pip packages) that wraps the `claude` CLI you already have and exposes the standard Anthropic (`/v1/messages`) **and** OpenAI (`/v1/chat/completions`) endpoints. Any tool that speaks either protocol — codex, aider, Open WebUI, an OpenAI SDK — connects to `http://127.0.0.1:3456` and gets Claude on your existing subscription.
+
+```bash
+claude login              # one-time: authenticate the engine
+dot ai serve              # start the gateway AND route the non-Claude fleet
+dot ai serve status       # process + /health + routing state
+dot ai serve stop         # stop the gateway and un-route
 ```
 
-The bridge adds system details (OS, architecture, date) to the prompt. This gives the AI the context it needs for accurate answers.
+**Native session, never a key.** The gateway authenticates through your `claude` CLI's native session — there is no API key anywhere. Routing is applied **per-invocation** to non-Claude tools (`dot ai codex "…"`); it is **not** sourced into your interactive shell. The primary `claude` is never routed — it always uses its own native session, so claude.ai connectors stay enabled. (Setting `ANTHROPIC_API_KEY` in your shell would disable those connectors, which is exactly why routing stays scoped to each tool's subprocess.)
+
+**Streaming, routing & metering.** Replies stream **token-by-token** (real SSE for both protocols). Model **aliases/routing** map friendly names to a Claude tier — `cheap`/`fast` → haiku, `smart` → opus, and common OpenAI ids (`gpt-4` → sonnet, `gpt-3.5-turbo` → haiku); extend with `DOT_AI_MODEL_MAP`. Every request is **metered**: `GET /metrics` (Prometheus text) and `GET /v1/usage` (JSON) report requests, tokens, and estimated cost per model. An optional `DOT_AI_DAILY_BUDGET` (USD) caps daily spend — once reached, requests get `429`.
+
+**Config:** `DOT_AI_HOST` (default `127.0.0.1`), `DOT_AI_PORT` (default `3456`), `DOT_AI_DEFAULT_MODEL` (default `sonnet`), `DOT_AI_API_KEY` (optional shared secret), `DOT_AI_DAILY_BUDGET` (USD, `0` = off), `DOT_AI_MODEL_MAP` / `DOT_AI_PRICING` (JSON overrides).
+
+**Security:** the server binds to loopback by default. If you set `DOT_AI_HOST` to a LAN address, both the launcher *and* the server itself refuse to start unless `DOT_AI_API_KEY` is set — an unprotected network proxy leaks your subscription.
 
-Supported bridge commands:
+**Engine limits.** The gateway wraps the `claude` CLI (an agent), not the raw API, so two things are handled gracefully rather than forwarded: **image** blocks are acknowledged inline but not sent (the engine is text-only), and **function/tool-calling** requests are answered in plain text (the CLI can't return caller-defined `tool_use` blocks). Session resumption is still out of scope.
 
-| Command | Provider |
-|---------|----------|
-| `dot cl` | Claude Code |
-| `dot codex` | OpenAI Codex CLI |
-| `dot copilot` | GitHub Copilot CLI |
-| `dot gemini` | Gemini CLI |
-| `dot goose` | Goose (Block) |
-| `dot kiro` | Kiro CLI |
-| `dot sgpt` | Shell-GPT |
-| `dot ollama` | Ollama |
-| `dot opencode` | OpenCode |
-| `dot aider` | Aider |
-| `dot autohand` | Autohand Code |
-| `dot vibe` | Mistral Vibe |
-| `dot qwen` | Qwen Code |
-| `dot zai` | ZAI (Zhipu AI) |
+## The fleet
 
-### `dot ai` status and launcher
+These tools are not installed for you. Install what you want with `dot ai install <tool>` (or `dot ai install all`):
 
-`dot ai` shows which AI CLIs are installed, grouped by category. If `gum` is available, it also opens a quick launcher.
+- **Agents (autonomous)** — full coding agents that plan and execute:
+  - `claude` — Anthropic's flagship agentic coder (Claude Code)
+  - `codex` — OpenAI's autonomous coding agent
+  - `copilot` — GitHub Copilot in the terminal
+  - `goose` — Block's open-source coding agent
+  - `crush` — Charm's glamorous TUI coding agent
+  - `amp` — Sourcegraph's agentic coder
+  - `cursor-agent` — Cursor's terminal agent
+  - `grok` — xAI's terminal coding agent (Grok Build; needs a SuperGrok / X Premium+ plan)
 
-Current categories:
+- **Coding (interactive)** — focused pair-programming assistants:
+  - `aider` — Git-aware AI pair programmer
+  - `opencode` — open-source terminal coding agent
+  - `autohand` — autonomous multi-file coding agent
+  - `vibe` — Mistral's coding agent
+  - `qwen` — Alibaba Qwen coding assistant
+  - `zai` — Zhipu GLM coding agent
 
-- Agents (autonomous)
-- Coding (interactive)
-- General (prompt-based)
-- Runtime (local)
-- Cloud (platform)
+- **General (prompt-based)** — quick prompt/shell helpers:
+  - `agy` — Google's Antigravity agent
+  - `sgpt` — ChatGPT for the shell (Shell-GPT)
 
-The launcher is simple and fast. It shows short role labels like `agent`, `coding`, `general`, `local`, and `cloud` so you can pick quickly.
+- **Runtime (local)**:
+  - `ollama` — run local **and** cloud-hosted open models (`ollama signin` for cloud)
 
-To stay fast, `dot ai` caches provider info in `~/.cache/dotfiles/ai/status.tsv` for 5 minutes. You can change this with `DOTFILES_AI_STATUS_TTL`.
+- **Cloud (platform)**:
+  - `kiro-cli` — AWS's agentic dev assistant
 
-Related AI commands:
+`dot ai tools` shows install status grouped by role and offers an interactive install picker. Status is cached in `~/.cache/dotfiles/ai/status.tsv` for 5 minutes (tune with `DOTFILES_AI_STATUS_TTL`).
 
-- `dot ai` — check status and launch tools
-- `dot ai-setup` — set up AI CLIs step by step
-- `dot ai-query` — run context-aware queries on the dotfiles repo
+## Run cost and telemetry
 
-## Optional AI CLI tools
+Every run through the bridge is logged to a local SQLite database (`~/.local/share/dotfiles-ai.db`). `dot ai cost` reports spend across providers, and the cockpit's cost panel and recent-runs list read from the same log. Token-level cost is populated for providers that surface it (and for everything routed through `dot ai serve`).
 
-These tools are not installed for you. Pick and install only the ones you want:
+## Deprecated commands
 
-- **Agents**: `claude`, `codex`, `copilot`, `goose`
-- **Coding assistants**: `aider`, `opencode`
-- **General AI**: `gemini`, `sgpt`
-- **Local-first**: `ollama`
-- **Coding agents**: `autohand`, `vibe`, `qwen`, `zai`
-- **Cloud / platform**: `kiro-cli`
+The old command shapes still work, but print a one-line hint pointing at the new name. Update your muscle memory when convenient — the shortcut aliases (`dcl`, `dagy`, `dki`, …) already target the new surface.
 
-Once installed, the dotfiles add helper functions and shortcuts. These only load when `DOTFILES_AI=1` is set.
+| Deprecated | Use instead |
+|------------|-------------|
+| `dot cl` | `dot ai claude` |
+| `dot codex` / `dot copilot` / `dot agy` / `dot goose` | `dot ai codex` / `dot ai copilot` / `dot ai agy` / `dot ai goose` |
+| `dot kiro` / `dot sgpt` / `dot ollama` / `dot opencode` | `dot ai kiro` / `dot ai sgpt` / `dot ai ollama` / `dot ai opencode` |
+| `dot aider` / `dot autohand` / `dot vibe` / `dot qwen` / `dot zai` | `dot ai aider` / `dot ai autohand` / `dot ai vibe` / `dot ai qwen` / `dot ai zai` |
+| `dot ai status` | `dot ai tools` |
+| `dot ai dashboard` / `dot ai dash` | `dot ai` (the cockpit) |
+| `dot ai proxy …` / `dot ai local on\|off` | `dot ai serve` |
+| `dot ai-setup` | `dot ai login` |
+| `dot ai-query` | `dot ai ask` |
+| `--pattern <name>` | `--style <name>` |
 
 ## Agentic terminal workflows
 
@@ -104,5 +173,6 @@ If your terminal has built-in AI agents, keep your shell lean and fast:
 ## Privacy and safety
 
 - No AI tools are installed for you.
-- No background services run by default.
+- No background services run by default; the gateway runs only while you keep `dot ai serve` up.
 - You control AI helpers with `DOTFILES_AI=1`.
+- The gateway uses your native Claude session — no API keys are stored or required.

package/docs/COPYRIGHT

@@ -1,5 +1,5 @@
 /*
-* 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.505) - <https://github.com/sebastienrousseau/dotfiles>
+* 🅳🅾🆃🅵🅸🅻🅴🆂 (v0.2.507) - <https://github.com/sebastienrousseau/dotfiles>
 * Made With ❤️ in London, United Kingdom
 * Designed by
 * Copyright (c) 2015-2026. All rights reserved.

package/docs/STRUCTURE.md

@@ -55,7 +55,7 @@ See `docs/operations/ROADMAP_V0_2_503.md` for the full history.
 | `mise.toml` / `mise-versions.lock.json` | ci | Pinned tool versions (mise as the package manager). |
 | **Misc + agents** | | |
 | `AGENTS.md` | docs | Cross-harness AI agent context (the standard read by Codex/Cursor/etc.). |
-| `.cursor/`, `.codex/`, `.windsurf/`, `.zed/`, `.roo/`, `.clinerules`, `.aider.conf.yml`, `.continuerc.json`, `.jules/`, `.gemini/` | agents | Per-harness AGENTS.md renderings. Generated by `dot agents render`. Each one points back at `CLAUDE.md` as canonical. |
+| `.cursor/`, `.codex/`, `.windsurf/`, `.zed/`, `.roo/`, `.clinerules`, `.aider.conf.yml`, `.continuerc.json`, `.jules/`, `.agy/` | agents | Per-harness AGENTS.md renderings. Generated by `dot agents render`. Each one points back at `CLAUDE.md` as canonical. |
 | `CLAUDE.md` | docs | Project guidelines (the canonical source — `dot agents render` propagates it). |
 | `CONTRIBUTING.md` | docs | Contributor guide (must stay at root for GitHub auto-discovery). |
 | `docs/CONFIG_STRATEGY.md`, `docs/OPENCODE.md` | docs | Strategy + OpenCode-CLI guidance. Moved out of root for cleanliness in v0.2.503. |

package/docs/adr/ADR-012-ai-fleet-local-proxy.md

@@ -0,0 +1,79 @@
+---
+render_with_liquid: false
+---
+
+# ADR-012: AI Fleet — Native Local Claude Proxy and Cockpit
+
+## Status
+
+Accepted
+
+## Date
+
+2026-06-27
+
+## Context
+
+The dotfiles manage a fleet of ~18 AI CLIs (claude, codex, copilot, goose,
+crush, amp, cursor-agent, grok, aider, opencode, agy, sgpt, ollama, autohand, vibe,
+qwen, zai, kiro-cli). Three problems had accumulated:
+
+1. **Incoherent command surface.** The fleet was driven by three incompatible
+   shapes — `dot ai <thing>`, `dot <tool>`, and `dot ai-<thing>` — with opaque
+   names (`cl`, `agy`, `dash`) and no stated reason to prefer `dot ai` over
+   running a tool directly.
+2. **No way to share one subscription.** Each tool needed its own provider/key.
+   Running the whole fleet on a single Claude subscription required a gateway,
+   but adding a third-party proxy (e.g. Meridian) meant a new runtime dependency
+   and 7k+ lines of engine to track.
+3. **No unified cockpit.** Status, cost, and launching were scattered.
+
+## Decision
+
+Build the capability **in-tree**, with no third-party runtime dependency, and
+present it behind a flat, verb-first surface modelled on the Claude CLI.
+
+- **Command surface.** A single `dot ai` namespace: bare opens a cockpit; a
+  bare prompt runs a one-shot on Claude; `<tool> "<prompt>"` targets a tool;
+  plus `chat`, `tools`, `install`, `serve`, `cost`, `login`, `doctor`, and a
+  `--style` steering flag. Old forms remain as deprecated aliases that print a
+  one-line hint. (`scripts/dot/commands/ai.sh`, `lib/dot/ai-commands.sh`.)
+- **Local gateway (`dot ai serve`).** `dot-ai-serve` is a stdlib-only Python
+  server that wraps the already-installed `claude` CLI in headless
+  `stream-json` mode and exposes the Anthropic (`/v1/messages`) and OpenAI
+  (`/v1/chat/completions`) protocols. The `claude` CLI owns auth, caching, and
+  rate limits — the server only translates wire formats. There is **no API key
+  anywhere**; the native Claude session is the credential.
+- **Routing safety.** The primary `claude` is **never** routed through the
+  gateway (it keeps its native session and claude.ai connectors). Routing is
+  applied per-invocation to non-Claude tools only and is never written into the
+  interactive shell environment.
+- **Cockpit (`dot-ai-tui`).** A Bubble Tea (Go) TUI built on `chezmoi apply`
+  via the mise-managed Go toolchain. It shells out to the `dot ai` verbs so
+  behaviour has one source of truth.
+
+## Consequences
+
+- **No new dependency for the headline feature.** The gateway leans on the
+  `claude` CLI the user already has; the cockpit is the only Go artefact and is
+  opt-in (built when `DOTFILES_AI` is set or already installed).
+- **Single source of truth.** The cockpit and completions both derive from the
+  `ai.sh` verb dispatch; a completion-parity test and the docs-coverage contract
+  keep them from drifting.
+- **Scope (v2).** The gateway does chat/completions for both protocols with
+  real token-by-token streaming, model routing/aliases, cost metering
+  (`/metrics`, `/v1/usage`), an optional daily budget cap, `/v1/models`, and
+  `/health`. Because it wraps the `claude` CLI (an agent, not the raw API),
+  tool-call passthrough and multimodal image input are handled gracefully but
+  not forwarded, and session resumption stays out of scope — documented in
+  [`docs/AI.md`](../AI.md).
+- **Naming churn.** Existing muscle memory (`dot cl`, `dot ai dashboard`,
+  `dot ai proxy`) is preserved via deprecated aliases, so nothing breaks while
+  users migrate.
+
+## References
+
+- [`docs/AI.md`](../AI.md) — user guide for the full surface
+- [ADR-004](ADR-004-cli-architecture.md) — the `dot` CLI wrapper this extends
+- [ADR-008](ADR-008-alias-system-architecture.md) — the alias system the
+  deprecated bridges live in

package/docs/adr/README.md

@@ -22,6 +22,7 @@ significant architectural decisions made in this project.
 | [ADR-009](ADR-009-wallpaper-driven-theming.md) | Wallpaper-Driven Theming Engine | Accepted |
 | [ADR-010](ADR-010-starship-transient-prompt.md) | Enable Starship Transient Prompt in Zsh and Fish | Accepted |
 | [ADR-011](ADR-011-nushell-tier3-keep.md) | Keep Nushell as Tier-3 Reference with Minimum-Viable Caching | Accepted |
+| [ADR-012](ADR-012-ai-fleet-local-proxy.md) | AI Fleet — Native Local Claude Proxy and Cockpit | Accepted |
 
 ## ADR Format
 

package/docs/index.md

@@ -7,7 +7,7 @@ render_with_liquid: false
 Cross-platform, signed, local-first dotfiles for macOS, Linux, and WSL.
 
 [![Build](https://img.shields.io/github/actions/workflow/status/sebastienrousseau/dotfiles/ci.yml?style=for-the-badge&logo=github)](https://github.com/sebastienrousseau/dotfiles/actions)
-[![Version](https://img.shields.io/badge/Version-v0.2.505-blue?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/releases/tag/v0.2.505)
+[![Version](https://img.shields.io/badge/Version-v0.2.507-blue?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/releases/tag/v0.2.507)
 [![Downloads](https://img.shields.io/github/downloads/sebastienrousseau/dotfiles/total?style=for-the-badge)](https://github.com/sebastienrousseau/dotfiles/releases)
 
 This site is published from the `docs/` directory on `master` and tracks the current workstation baseline, operational guidance, and security material for the repository.
@@ -38,6 +38,6 @@ This site is published from the `docs/` directory on `master` and tracks the cur
 
 ## Current Release
 
-- Current tagged release: [`v0.2.505`](https://github.com/sebastienrousseau/dotfiles/releases/tag/v0.2.505)
+- Current tagged release: [`v0.2.507`](https://github.com/sebastienrousseau/dotfiles/releases/tag/v0.2.507)
 - Latest release feed: [GitHub releases](https://github.com/sebastienrousseau/dotfiles/releases/latest)
 - Source repository: [sebastienrousseau/dotfiles](https://github.com/sebastienrousseau/dotfiles)

package/docs/manual/00-introduction.md

@@ -4,7 +4,7 @@ render_with_liquid: false
 
 # Introduction
 
-This manual describes `.dotfiles` v0.2.505 — a trusted agent workstation baseline for macOS, Linux, and WSL.
+This manual describes `.dotfiles` v0.2.507 — a trusted agent workstation baseline for macOS, Linux, and WSL.
 
 The repository is more than a personal dotfiles collection. It ships as workstation infrastructure: signed, attested, multi-platform, AI-aware, and self-healing. Chezmoi handles templating and platform differences. The `dot` CLI sits on top and coordinates lifecycle operations.
 

package/docs/manual/01-concepts/02-trust-model.md

@@ -70,7 +70,7 @@ All three must pass for a commit to be merged.
 
 ## Agent Policy Enforcement
 
-AI agent operations (Claude Code, Codex, Copilot, Gemini, etc.) are governed by the **Model Context Protocol (MCP)** policy in `dot_config/dotfiles/mcp.json` and validated by `dot mcp`.
+AI agent operations (Claude Code, Codex, Copilot, Antigravity CLI, etc.) are governed by the **Model Context Protocol (MCP)** policy in `dot_config/dotfiles/mcp.json` and validated by `dot mcp`.
 
 ### Policy Structure
 

package/docs/manual/02-tutorials/01-first-install.md

@@ -184,7 +184,7 @@ After `dot doctor` reports a healthy score, you have:
 | **Editor** | Neovim with lazy.nvim + LSP + theme-synced colorscheme |
 | **Terminal** | Ghostty/Alacritty/Kitty/WezTerm configs (pick whichever is installed) |
 | **Git** | Signed commits, delta diff, conventional commit template |
-| **AI tooling** | Codex, Copilot CLI, Gemini CLI via mise; Claude Code via Anthropic's native installer |
+| **AI tooling** | Codex, Copilot CLI, Antigravity CLI (`agy`) via native installer; Claude Code via Anthropic's native installer |
 | **Secret store** | Age key, SOPS config, `dot secrets` command ready |
 | **Security** | Gitleaks, detect-secrets baseline, signed attestation log |
 | **Theme engine** | K-Means wallpaper extractor, system + custom wallpaper discovery |

package/docs/manual/03-reference/01-dot-cli.md

@@ -189,12 +189,27 @@ Measure heavy-layer (nvm, rbenv, direnv) readiness time.
 
 ### `dot ai`
 
-Show installed AI tools with versions and status.
+The cockpit for your AI-CLI fleet. Bare `dot ai` opens a Bubble Tea TUI;
+a prompt runs a one-shot; `dot ai serve` serves your Claude subscription
+locally to any Anthropic/OpenAI-protocol tool.
 
 ```
-dot ai
+dot ai                      # open the cockpit (TUI)
+dot ai "fix the auth bug"   # one-shot on Claude
+dot ai codex "add tests"    # one-shot on a named tool
+dot ai chat [tool]          # interactive session
+dot ai tools                # install / manage the fleet
+dot ai install [all|<tool>] # install fleet tools
+dot ai serve [stop|status]  # local Claude gateway (start also routes the fleet)
+dot ai cost                 # spend report
+dot ai login [tool]         # authenticate
+dot ai doctor               # health-check fleet + gateway
 ```
 
+Add `--style <name>` (architect, hardener, refactor) to steer a prompt.
+Old forms (`dot cl`, `dot ai dashboard`, `dot ai proxy`, `dot ai-setup`, …)
+still work as deprecated aliases. See [AI.md](../../AI.md) for the full guide.
+
 ### `dot mcp`
 
 Inspect MCP policy and registry.
@@ -326,7 +341,7 @@ dot agents check      # exit 0 if AGENTS.md tracks CLAUDE.md; 1 if drifted
 dot agents render     # regenerate AGENTS.md + 10 harness-specific files
 ```
 
-Harnesses covered: `AGENTS.md` (canonical cross-harness), Cursor (`.cursor/rules/dotfiles.mdc`), Codex (`.codex/config.toml`), Windsurf (`.windsurf/rules.md`), Zed (`.zed/agent-config.toml`), Roo (`.roo/rules.md`), Cline (`.clinerules`), Aider (`.aider.conf.yml`), Continue (`.continuerc.json`), Jules (`.jules/system.md`), Gemini (`.gemini/GEMINI.md`).
+Harnesses covered: `AGENTS.md` (canonical cross-harness), Cursor (`.cursor/rules/dotfiles.mdc`), Codex (`.codex/config.toml`), Windsurf (`.windsurf/rules.md`), Zed (`.zed/agent-config.toml`), Roo (`.roo/rules.md`), Cline (`.clinerules`), Aider (`.aider.conf.yml`), Continue (`.continuerc.json`), Jules (`.jules/system.md`), Antigravity (`.agy/AGY.md`).
 
 Edit `CLAUDE.md` first, then run `dot agents render`; do not hand-edit `AGENTS.md` or any of the per-harness files. The check subcommand is suitable for pre-commit hooks.
 

package/docs/manual/command-index.md

@@ -12,7 +12,8 @@ job `lint/command-index` fails when this file is stale.
 |---------|---------|
 | `dot add` | Add a file to chezmoi source |
 | `dot agent` | Profile-aware execution, agent card, a2a-card, session log, checkpoints, and conformance |
-| `dot ai` | AI CLI status, delegate, and cost report |
+| `dot agy` | Antigravity CLI with context patterns |
+| `dot ai` | AI fleet cockpit, gateway, and cost |
 | `dot ai-query` | Context-aware RAG query over your dotfiles |
 | `dot ai-setup` | Interactive setup for all AI CLI tools |
 | `dot aider` | Aider with context patterns |
@@ -38,7 +39,6 @@ job `lint/command-index` fails when this file is stale.
 | `dot fleet` | events Show recent fleet events from local event log |
 | `dot fleet` | namespace Show or set the active namespace for multi-tenant isolation |
 | `dot fonts` | Install Nerd Fonts (JetBrainsMono by default) |
-| `dot gemini` | Gemini CLI with context patterns |
 | `dot help` | Show this help message |
 | `dot history` | Shell history analysis |
 | `dot keys` | Keybindings (sign-check: verify git signing) |

package/docs/reference/TOOLS.md

@@ -99,7 +99,7 @@ Detailed guide: [AI.md](../AI.md).
 | **Claude CLI** | Anthropic's terminal assistant |
 | **Copilot CLI** | GitHub Copilot in the terminal |
 | **Kiro CLI** | Agentic AI terminal assistant |
-| **Gemini CLI** | Google's multi-modal CLI tool |
+| **Antigravity CLI** | Google's Antigravity CLI (`agy`) |
 | **Mods/Fabric** | Pipeline-friendly AI processing |
 | **sgpt** | Shell-GPT for terminal AI queries |
 | **Ollama** | Run large language models locally |

package/docs/reference/UTILS.md

@@ -56,9 +56,9 @@ The `dot` command is the main interface for managing dotfiles. Run `dot version`
 | `dot history` | Analyse shell history |
 | `dot security-score` | Score workstation security (`--verbose/-v`,`--quiet/-q`,`--json/-j`) |
 | `dot snapshot` | Capture workstation state (`--baseline/-b`,`--force/-f`) |
-| `dot ai` | Show categorized AI CLI status and launch an installed provider |
-| `dot ai-setup` | Bootstrap supported AI CLIs interactively |
-| `dot ai-query` | Run context-aware AI queries over the repo |
+| `dot ai` | Open the AI fleet cockpit; run prompts, serve a local Claude gateway, install, cost |
+| `dot ai-setup` | Bootstrap AI CLIs interactively (deprecated alias for `dot ai login`) |
+| `dot ai-query` | Context-aware RAG query over the repo (deprecated alias for `dot ai ask`) |
 | `dot mode` | Show or switch the active agent profile |
 | `dot agent` | Inspect agent metadata, logs, checkpoints, and conformance |
 | `dot agent checkpoint` | Save, list, show, and replay bounded agent checkpoints |
@@ -110,18 +110,22 @@ POSIX scripts in `~/.local/bin/` that work across macOS, Linux, and WSL.
 
 Themes are auto-generated from wallpapers — `themes.toml` is not hand-edited. See [Theming Guide](../guides/THEMING.md) for the K-Means CIELAB extraction model and Apple-compatible dynamic HEIC support.
 
-## AI Bridges
+## AI Bridges (deprecated aliases)
+
+These run a tool with dotfiles context injection. They still work but are
+**deprecated** in favour of `dot ai <tool>` (e.g. `dot ai claude "…"`); each
+prints a one-line hint. See [AI.md](../AI.md) for the full surface.
 
 | Command | Description |
 |---------|-------------|
-| `dot cl` | Invoke Claude Code with dotfiles context injection |
-| `dot copilot` | Invoke GitHub Copilot CLI with dotfiles context injection |
-| `dot gemini` | Invoke Gemini CLI with dotfiles context injection |
-| `dot kiro` | Invoke Kiro CLI with dotfiles context injection |
-| `dot sgpt` | Invoke Shell-GPT with dotfiles context injection |
-| `dot ollama` | Invoke Ollama with dotfiles context injection |
-| `dot opencode` | Invoke OpenCode with dotfiles context injection |
-| `dot aider` | Invoke Aider with dotfiles context injection |
+| `dot cl` | Claude Code with context injection — use `dot ai claude` |
+| `dot copilot` | GitHub Copilot CLI — use `dot ai copilot` |
+| `dot agy` | Antigravity CLI — use `dot ai agy` |
+| `dot kiro` | Kiro CLI — use `dot ai kiro` |
+| `dot sgpt` | Shell-GPT — use `dot ai sgpt` |
+| `dot ollama` | Ollama — use `dot ai ollama` |
+| `dot opencode` | OpenCode — use `dot ai opencode` |
+| `dot aider` | Aider — use `dot ai aider` |
 
 ## Secrets
 

package/install.sh

@@ -60,7 +60,7 @@ show_help() {
 Usage: install.sh [version] [options]
 
 Arguments:
-  version       The version (tag or branch) to install (default: v0.2.505)
+  version       The version (tag or branch) to install (default: v0.2.507)
 
 Options:
   --help        Show this help message
@@ -76,7 +76,7 @@ EOF
 }
 
 main() {
-  local version="v0.2.505"
+  local version="v0.2.507"
   local version_set=0
   local minimal=0
   local provision="${DOTFILES_PROVISION:-0}"
@@ -106,7 +106,7 @@ main() {
         # like `foobar` doesn't trigger a 30s+ network download attempt.
         # Caught by the install.sh fuzz harness (#881).
         if [[ ! "$arg" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+([-+][a-zA-Z0-9.-]+)?$ ]]; then
-          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.505)."
+          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.507)."
         fi
         version="$arg"
         version_set=1
@@ -351,7 +351,7 @@ main() {
   # 6. Initialize & Apply
   step "Applying Configuration..."
 
-  # ── Auto-migration for v0.2.505 reorg ─────────────────────────────────
+  # ── Auto-migration for v0.2.507 reorg ─────────────────────────────────
   # If the user is upgrading from a pre-0.2.503 install, run the
   # migration script BEFORE `chezmoi apply` so the reorg's source-
   # path moves don't cause chezmoi to delete deployed files.
@@ -360,7 +360,7 @@ main() {
   for migrate_src in "$SOURCE_DIR" "$LEGACY_SOURCE_DIR"; do
     migrate_script="$migrate_src/install/migrate/migrate-v0_2-to-v0_2_503.sh"
     if [[ -x "$migrate_script" ]]; then
-      echo "   Running v0.2.505 migration (idempotent; safe on fresh installs)..."
+      echo "   Running v0.2.507 migration (idempotent; safe on fresh installs)..."
       "$migrate_script" || echo "   migration exited non-zero — continuing apply"
       break
     fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebastienrousseau/dotfiles",
-  "version": "0.2.505",
+  "version": "0.2.507",
   "description": "The Trusted Shell Platform — Universal dotfiles managed by Chezmoi. Features Bash & Zsh for macOS, Linux & WSL. Rust modern tooling & enterprise-grade security.",
   "main": "install.sh",
   "bin": {