@sebastienrousseau/dotfiles 0.2.520 → 0.2.521

package/docs/manual/05-appendices/C-glossary.md

@@ -1,40 +0,0 @@
----
-render_with_liquid: false
----
-
-# Appendix C: Glossary
-
-| Term | Definition |
-|:---|:---|
-| **Age** | Modern file-encryption tool using X25519 + ChaCha20-Poly1305. Stores secrets in the repository encrypted at rest. |
-| **Agent Profile** | A named behaviour template for AI agents (e.g. architect, hardener). Stored in `dot_config/ai/patterns/`. |
-| **ANSI Colors** | The 16 foreground/background color slots (c0 through c15) used by terminal emulators. |
-| **Apple Desktop APR** | XMP metadata in dynamic HEIC wallpapers mapping image indices to light/dark appearance modes. |
-| **Attestation** | Signed JSON document asserting machine identity, policy, tool versions, and Git state at a point in time. |
-| **Baseline (security)** | Reference state used by `detect-secrets` to distinguish new leaks from known acceptable patterns. |
-| **Chaos** | Intentional corruption (`dot chaos`) used to verify `dot heal` recovers to a healthy state. |
-| **Chezmoi** | The templating engine handling per-platform rendering and applying configuration to `$HOME`. |
-| **CIELAB** | Color space designed for perceptual uniformity. Used by the theme engine for K-Means clustering. |
-| **CycloneDX** | SBOM format used by the repository for machine-readable dependency inventories. |
-| **Dank Material Shell (DMS)** | A shell for the Niri Wayland compositor that provides polished theming hooks. |
-| **Drift** | Local changes to managed files that diverge from the source tree. Detected by `dot status`. |
-| **Dynamic HEIC** | Apple's single-file wallpaper format that contains both light and dark variants with appearance metadata. |
-| **Fleet** | Two or more workstations sharing a single `.dotfiles` source repository. |
-| **Gitleaks** | Secret-pattern scanner that blocks commits containing obvious secret patterns. |
-| **Golden Ratio** | 1.618... Used as the target brightness ratio between dark and light theme variants. |
-| **Heal** | The `dot heal` command's action of auto-fixing drift, missing tools, and broken symlinks. |
-| **Idempotent** | Property where running an operation twice has the same result as running it once. |
-| **K-Means** | Clustering algorithm partitioning data into k groups by proximity to centroids. Used for dominant color extraction. |
-| **K-Means++** | Variant of K-Means with smart initialization that reduces sensitivity to random seeding. |
-| **MCP** | Model Context Protocol — standard for connecting AI models to external tools and data. |
-| **Mise** | User-space language and tool version manager. Replaces asdf, nvm, rbenv, pyenv. |
-| **Nix Flakes** | Nix's reproducible-build system. Used for strict repeatability when Mise's approximations aren't enough. |
-| **Niri** | Wayland compositor with scrollable tiling layout. |
-| **Policy Hash** | SHA-256 of the active MCP policy JSON. Included in attestations for drift detection. |
-| **Prewarm** | `dot prewarm` regenerates shell init caches, eliminating slow first-shell startup. |
-| **Profile** | Named collection of settings in `.chezmoidata.toml` selectable via `dot profile`. |
-| **SOPS** | "Secrets OPerationS" — YAML-aware envelope encryption tool that wraps Age (or PGP/AWS KMS). |
-| **SBOM** | Software Bill of Materials — machine-readable dependency list, generated by Syft, scanned by Grype. |
-| **Trust Anchor** | The root public key from which all other trust derives. For `.dotfiles`, the user's SSH ED25519 signing key. |
-| **WCAG AAA** | Web Content Accessibility Guidelines Level AAA — 7:1 text contrast ratio, the highest accessibility tier. |
-| **XDG Base Directory** | Spec defining `~/.config`, `~/.cache`, `~/.local/share`, `~/.local/state` for app data locations. |

package/docs/manual/05-appendices/D-bibliography.md

@@ -1,58 +0,0 @@
----
-render_with_liquid: false
----
-
-# Appendix D: Bibliography
-
-Cited works and recommended reading.
-
-## Algorithms
-
-- **MacQueen, J. (1967).** *Some methods for classification and analysis of multivariate observations.* Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability. — The original K-Means paper.
-- **Arthur, D. & Vassilvitskii, S. (2007).** *K-Means++: The advantages of careful seeding.* ACM-SIAM Symposium on Discrete Algorithms. <https://theory.stanford.edu/~sergei/papers/kMeansPP-soda.pdf>
-- **Heckbert, P. (1982).** *Color image quantization for frame buffer display.* Computer Graphics 16(3). — Median cut algorithm, the alternative to K-Means.
-
-## Color Science
-
-- **CIE (1976).** *Recommendations on uniform color spaces, color-difference equations, psychometric color terms.* Supplement No. 2 to CIE Publication No. 15. — Defines CIELAB.
-- **Lindbloom, B. J.** *RGB/XYZ matrices.* <http://www.brucelindbloom.com/index.html?Eqn_RGB_XYZ_Matrix.html> — sRGB → XYZ conversion reference.
-- **Fairchild, M. D. (2013).** *Color Appearance Models, 3rd Edition.* Wiley. — Comprehensive treatment of perceptual color spaces.
-
-## Accessibility
-
-- **W3C (2023).** *Web Content Accessibility Guidelines (WCAG) 2.2.* <https://www.w3.org/TR/WCAG22/> — Accessibility standards including contrast ratios.
-- **W3C.** *Techniques for WCAG 2.2: G17 Using a contrast ratio of at least 7:1.* <https://www.w3.org/WAI/WCAG22/Techniques/general/G17>
-
-## Cryptography
-
-- **Valsorda, F. (2020).** *age: A simple, modern and secure encryption tool.* <https://age-encryption.org/>
-- **Mozilla.** *SOPS: Secrets OPerationS.* <https://github.com/getsops/sops>
-- **Barnes, R., et al. (2023).** *RFC 9420: The Messaging Layer Security (MLS) Protocol.* — Modern group-key agreement, relevant to multi-recipient encryption.
-
-## Protocols
-
-- **Anthropic.** *Model Context Protocol specification.* <https://modelcontextprotocol.io/>
-- **OpenID Foundation.** *Model Context Protocol A2A (Agent-to-Agent).* — Referenced in `dot_config/dotfiles/agent-card.json`.
-
-## Tools & Systems
-
-- **Twpayne, T.** *chezmoi: Manage your dotfiles across multiple machines.* <https://chezmoi.io>
-- **jdxcode.** *mise: Dev tools, env vars, task runner.* <https://mise.jdx.dev/>
-- **NixOS.** *Nix Flakes.* <https://nixos.wiki/wiki/Flakes>
-- **Microsoft / CycloneDX.** *CycloneDX SBOM specification.* <https://cyclonedx.org/>
-- **Anchore.** *Syft + Grype.* <https://github.com/anchore/syft>, <https://github.com/anchore/grype>
-
-## Shell Performance
-
-- **Yoo, D.** *How to benchmark shell startup time.* <https://web.archive.org/web/2023/https://hermann.blog/benchmark-shell-startup-time>
-- **Zsh manual.** *Startup files: zshenv, zprofile, zshrc.* <https://zsh.sourceforge.io/Doc/Release/Files.html>
-
-## Documentation Systems
-
-- **GNU Stow documentation.** <https://www.gnu.org/software/stow/manual/> — Inspiration for this manual's multi-format publishing model.
-- **Pandoc.** *Universal document converter.* <https://pandoc.org/>
-- **GNU Texinfo.** <https://www.gnu.org/software/texinfo/> — The original GNU documentation system.
-
-## Author
-
-- **Rousseau, S.** *Dotfiles v0.2.501.* <https://github.com/sebastienrousseau/dotfiles>

package/docs/manual/05-appendices/E-license.md

@@ -1,38 +0,0 @@
----
-render_with_liquid: false
----
-
-# Appendix E: License
-
-## MIT License
-
-Copyright (c) 2015-2026 Sebastien Rousseau
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-## Third-Party Licenses
-
-This repository references, configures, or wraps many third-party tools. Each tool retains its own license:
-
-| Tool | License |
-|:---|:---|
-| Chezmoi | MIT |
-| Mise | MIT |
-| Nix | LGPL-2.1 |
-| Age | BSD-3-Clause |
-| SOPS | MPL-2.0 |
-| Fish shell | GPL-2.0 |
-| Zsh | Zsh License (MIT-like) |
-| Neovim | Apache-2.0 |
-| ImageMagick | ImageMagick License (Apache-2.0-like) |
-| Pandoc | GPL-2.0+ |
-
-Wallpapers referenced from `/System/Library/Desktop Pictures/` or `/usr/share/backgrounds/` retain their original vendors' licenses (Apple, Microsoft, distribution vendors). They are not redistributed by this repository — they are discovered and processed in place.
-
-## Contributions
-
-Contributions are accepted under the MIT License. By submitting a pull request, you assert that your contribution is your own work (or properly attributed) and that it may be relicensed under MIT.

package/docs/manual/_toc.yml

@@ -1,58 +0,0 @@
-# Master ordering for build-manual.sh
-# Determines concatenation order for single-page HTML/PDF/EPUB
-title: "The .dotfiles Manual"
-subtitle: "A Trusted Agent Workstation for macOS, Linux, and WSL"
-version: "0.2.503"
-
-sections:
-  - file: 00-introduction.md
-    title: "Introduction"
-
-  - group: "Concepts"
-    prefix: "01-concepts"
-    files:
-      - 01-architecture.md
-      - 02-trust-model.md
-      - 03-theme-engine.md
-      - 04-fleet.md
-      - 05-self-healing.md
-
-  - group: "Tutorials"
-    prefix: "02-tutorials"
-    files:
-      - 01-first-install.md
-      - 02-add-wallpaper.md
-      - 03-create-profile.md
-      - 04-encrypt-secret.md
-      - 05-deploy-fleet.md
-
-  - group: "Reference"
-    prefix: "03-reference"
-    files:
-      - 01-dot-cli.md
-      - 02-config-files.md
-      - 03-environment.md
-      - 04-templates.md
-      - 05-feature-flags.md
-
-  - group: "Cookbook"
-    prefix: "04-cookbook"
-    files:
-      - 01-recipes.md
-      - 02-troubleshooting.md
-      - 03-faq.md
-
-  - group: "Appendices"
-    prefix: "05-appendices"
-    files:
-      - A-platform-matrix.md
-      - B-security-checklist.md
-      - C-glossary.md
-      - D-bibliography.md
-      - E-license.md
-
-  - file: concept-index.md
-    title: "Concept Index"
-
-  - file: command-index.md
-    title: "Command Index"

package/docs/manual/command-index.md

@@ -1,175 +0,0 @@
----
-render_with_liquid: false
----
-
-# Command Index
-
-Generated from `dot help all` plus the `dot help <command>` detail
-registry, so a command that is routable and has help text is listed
-even when it is absent from the compact overview. To refresh after
-adding or renaming a subcommand, run
-`tools/docs/generate-command-index.sh`. The CI job
-`lint/command-index` fails when this file is stale.
-
-| Command | Summary |
-|---------|---------|
-| `dot add` | Add a file to chezmoi source |
-| `dot agent` | Profile-aware execution, agent card, a2a-card, session log, checkpoints, and conformance |
-| `dot agent` | a2a-card Show or validate the A2A v0.3 agent card |
-| `dot agent` | card Show the local agent card metadata |
-| `dot agent` | checkpoint Manage agent run checkpoints (save/list/show/replay) |
-| `dot agent` | conformance Run the A2A conformance test suite |
-| `dot agent` | delegate Delegate execution to an allowed sub-agent |
-| `dot agent` | log Tail the agent session audit log |
-| `dot agents` | check Verify AGENTS.md tracks CLAUDE.md (exit 1 if drifted) |
-| `dot agents` | list Show recognised AI agent harnesses and their config paths |
-| `dot agents` | render Regenerate AGENTS.md and per-harness config from CLAUDE.md |
-| `dot agy` | Antigravity CLI with context patterns |
-| `dot ai` | AI fleet cockpit, gateway, and cost |
-| `dot ai` | ask Context-aware RAG query over your dotfiles |
-| `dot ai` | chat Start an interactive AI session with a chosen tool |
-| `dot ai` | cost Report AI spend across every provider from the unified run log |
-| `dot ai` | delegate Delegate a coding task to a cheaper AI model under agent policy |
-| `dot ai` | doctor Diagnose AI tooling configuration and connectivity |
-| `dot ai` | install Install AI CLI tools via mise/native installers |
-| `dot ai` | login Interactive setup/authentication for installed AI CLI tools |
-| `dot ai` | run Run a one-shot prompt with an AI tool |
-| `dot ai` | serve Run the local AI gateway/proxy that routes non-Claude providers |
-| `dot ai` | tools Show installed AI CLI tools and their versions |
-| `dot ai-query` | Context-aware RAG query over your dotfiles |
-| `dot ai-setup` | Interactive setup for all AI CLI tools |
-| `dot aider` | Aider with context patterns |
-| `dot aliases` | cheatsheet Generate the alias cheatsheet markdown |
-| `dot aliases` | list List all shell aliases shipped by the dotfiles |
-| `dot aliases` | search Search aliases by term |
-| `dot aliases` | stats Show alias usage counts from shell history |
-| `dot aliases` | tiers Show which alias tiers/ecosystems are enabled |
-| `dot aliases` | why Show details and deprecation status for a single alias |
-| `dot apply` | Apply the current dotfiles to this machine. |
-| `dot attest` | Export workstation attestation evidence (--json |
-| `dot autohand` | Run the Autohand CLI with dotfiles context patterns. |
-| `dot backup` | Create a compressed backup of your home |
-| `dot benchmark` | Benchmark shell startup with per-component profiling |
-| `dot bundle` | Create offline archive of dotfiles environment |
-| `dot cache-refresh` | Regenerate shell caches for ultra-fast startup |
-| `dot cd` | Print source directory path (use: cd $(dot cd)) |
-| `dot chaos` | Simulate config corruption to test self-healing |
-| `dot cl` | Claude CLI with context patterns |
-| `dot claude` | Run the Claude CLI bridge (alias for cl). |
-| `dot codex` | Run the OpenAI Codex CLI with dotfiles context patterns. |
-| `dot commit` | AI-powered conventional commit |
-| `dot completion` | Generate shell completions (bash/zsh/fish/nu) from the command registry |
-| `dot copilot` | GitHub Copilot CLI with context patterns |
-| `dot diff` | Show chezmoi diff with exclusions |
-| `dot dns-doh` | Enable DNS-over-HTTPS [macOS,Linux] |
-| `dot docs` | Show repo README |
-| `dot doctor` | Deep audit: tools, paths, portability, AI analysis (--ai |
-| `dot edit` | Open chezmoi source in $EDITOR |
-| `dot encrypt-check` | Check disk encryption status |
-| `dot env` | Tool versions (mise) |
-| `dot env` | emit Emit a portable workstation environment manifest (SBOM; --format json) |
-| `dot env` | install Install requested tool versions via mise |
-| `dot env` | list List managed tool versions via mise |
-| `dot env` | prune Show or remove orphan tool installs (--yes to commit) |
-| `dot env` | use Pin a tool version globally/locally via mise |
-| `dot firewall` | Apply firewall hardening [macOS,Linux] |
-| `dot fleet` | Show fleet node status, drift, and namespace (--json for machine output) |
-| `dot fleet` | apply SSH to every host in fleet.toml and run dot sync (or a custom --cmd) |
-| `dot fleet` | drift Check for configuration drift across managed files |
-| `dot fleet` | enforce Show or set RBAC enforcement mode (advisory/strict) for agent profiles |
-| `dot fleet` | events Show recent fleet events from local event log |
-| `dot fleet` | namespace Show or set the active namespace for multi-tenant isolation |
-| `dot fleet` | status Show this node's fleet status: id, namespace, version, OS, drift, last apply |
-| `dot fonts` | Install (default) or patch Nerd Fonts (JetBrainsMono by default) |
-| `dot goose` | Run the Goose CLI with dotfiles context patterns. |
-| `dot heal` | Auto-repair common dotfiles problems (missing files, broken links). |
-| `dot health` | Run the health dashboard with optional fixes. |
-| `dot help` | Show this help message |
-| `dot history` | Shell history analysis |
-| `dot init` | Bootstrap a foreign dotfiles repo through chezmoi + dot. |
-| `dot keys` | Keybindings (sign-check: verify git signing) |
-| `dot keys` | sign-check Verify git commit-signing configuration and key availability |
-| `dot kimi` | Kimi CLI with context patterns |
-| `dot kiro` | Kiro CLI with context patterns |
-| `dot learn` | Start the interactive tour of your new tools |
-| `dot lint` | Lint shell scripts (--fix |
-| `dot load-bench` | Measure time to heavy-layer readiness |
-| `dot lock-screen` | Enforce lock screen idle settings [Linux] |
-| `dot manual` | Open or download the dotfiles manual in HTML, PDF, EPUB, or text. |
-| `dot mcp` | Inspect MCP policy, supply chain, and registry; serve MCP over stdio |
-| `dot mcp` | doctor Run the MCP policy/supply-chain/config audit |
-| `dot mcp` | registry Show the configured MCP server registry |
-| `dot mcp` | serve Run the stdio MCP server (JSON-RPC 2.0 on stdin/stdout) |
-| `dot metrics` | Show recent observability metrics (JSONL) |
-| `dot mode` | Set or inspect agent operating profiles (ask/plan/apply/audit) |
-| `dot mode` | current Show the active agent profile and its policy |
-| `dot mode` | doctor Validate the agent-profiles.json config and default profile |
-| `dot mode` | list List available agent operating profiles (ask/plan/apply/audit) |
-| `dot mode` | run Run a command under a given agent profile with a checkpoint |
-| `dot mode` | set Switch the active agent profile |
-| `dot mode` | show Show details of a specific agent profile |
-| `dot new` | Create a new project from a template |
-| `dot ollama` | Ollama with context patterns |
-| `dot opencode` | OpenCode with context patterns |
-| `dot packages` | List installed packages and package managers |
-| `dot patterns` | edit Edit an AI steering pattern in $EDITOR |
-| `dot patterns` | list List AI steering patterns |
-| `dot patterns` | view View an AI steering pattern |
-| `dot perf` | Show performance mode and quick timing |
-| `dot policy` | Check and enforce security policies across the environment |
-| `dot prewarm` | Alias of cache-refresh — regenerate shell init caches. |
-| `dot profile` | Show/switch configuration profile |
-| `dot profile` | set Set the active configuration profile (run dot sync to apply) |
-| `dot profile` | show Show the active configuration profile and feature flags |
-| `dot qwen` | Run the Qwen Coder CLI with dotfiles context patterns. |
-| `dot registry` | info Print full metadata for a registry module |
-| `dot registry` | install Install a registry module (scaffold) |
-| `dot registry` | list List modules in the configured module registry |
-| `dot registry` | search Filter registry modules by keyword |
-| `dot registry` | set-url Override the registry URL (https only; persists) |
-| `dot registry` | url Show the active registry URL |
-| `dot restore` | Restore from a backup or git ref. |
-| `dot rollback` | Rollback dotfiles to a previous state |
-| `dot sandbox` | Launch a safe sandbox preview (Docker/Podman) |
-| `dot score` | System health and security scorecard |
-| `dot search` | Find commands by keyword |
-| `dot secret-audit` | Audit secret hygiene and leakage surface |
-| `dot secrets` | Edit encrypted secrets (age) |
-| `dot secrets` | edit Edit the encrypted secrets file (age) |
-| `dot secrets` | get Retrieve a secret value (--raw for plaintext) |
-| `dot secrets` | list List indexed secret keys |
-| `dot secrets` | load Emit export lines for a secrets bucket (use with eval) |
-| `dot secrets` | provider Show the active secrets provider |
-| `dot secrets` | set Store a secret value under a key |
-| `dot secrets-create` | Create an encrypted secrets file |
-| `dot secrets-init` | Initialize age key for secrets |
-| `dot security-score` | Assess workstation security posture. |
-| `dot sgpt` | Shell-GPT with context patterns |
-| `dot snapshot` | Capture baseline system snapshot |
-| `dot ssh-cert` | Manage short-lived SSH certificates |
-| `dot ssh-key` | Encrypt an SSH key locally with age |
-| `dot status` | Show configuration drift (chezmoi status) |
-| `dot sync` | Apply dotfiles (alias for apply; --pull to fetch, --check to preview) |
-| `dot telemetry` | Disable OS telemetry [macOS,Linux] |
-| `dot teleport` | Deploy the dotfiles environment to a remote host over SSH |
-| `dot theme` | Switch terminal theme (dark/light) |
-| `dot theme` | current Show the current theme info |
-| `dot theme` | family Cycle between theme families |
-| `dot theme` | list Show all available terminal/wallpaper themes |
-| `dot theme` | rebuild Regenerate themes from system and custom wallpapers |
-| `dot theme` | set Set a theme by name (interactive picker if omitted) |
-| `dot theme` | sync Sync the dotfiles theme with system dark/light mode |
-| `dot theme` | toggle Toggle light/dark within the current theme family |
-| `dot tools` | Show or install nix packages |
-| `dot tools` | docs Show the full tools markdown documentation |
-| `dot tools` | install Enter the Nix development shell with all managed tools |
-| `dot tune` | Apply OS tuning (opt-in) [macOS,Linux] |
-| `dot uninstall` | Remove the managed dotfiles environment (prompts unless --force) |
-| `dot upgrade` | Update system toolchains, plugins, and dotfiles |
-| `dot usb-safety` | Disable automount for removable media [Linux] |
-| `dot version` | Show version information. |
-| `dot vibe` | Run the Vibe AI CLI with dotfiles context patterns. |
-| `dot wallpaper` | Apply a wallpaper from your library [macOS,Linux] |
-| `dot wallpaper` | rotate Rotate to the next wallpaper in your library |
-| `dot wallpaper` | sync Sync wallpaper from your library |
-| `dot zai` | Run the ZAI CLI with dotfiles context patterns. |

package/docs/manual/concept-index.md

@@ -1,170 +0,0 @@
----
-render_with_liquid: false
----
-
-# Concept Index
-
-Alphabetical list of concepts covered in the manual.
-
-- Accessibility
-- Adding a New Flag
-- Agent Policy Enforcement
-- Agents
-- AI & Agents
-- Algorithms
-- Apply / Sync
-- Attestation
-- Author
-- Auto-Populated
-- Bibliography
-- Build Artifacts
-- Built-in Chezmoi Functions
-- Built-in Chezmoi Variables
-- Cache Files
-- Caching
-- Changing Presets on an Existing Host
-- Checking Active Flags
-- CI
-- CI-Level Gates
-- CI-Specific
-- Color Science
-- Configuration
-- Contributions
-- Cross-Host Trust
-- Cryptography
-- Daily Use
-- Data Flow
-- Design Principles
-- Development
-- Diagnostics
-- Documentation Systems
-- Drift Detection
-- Dynamic HEIC (Apple Appearance Metadata)
-- Environment Variables
-- Example: Font Size by Preset
-- Example: Platform × Preset
-- Example: Using Theme in Ghostty Config
-- Exit Codes
-- Feature Matrix
-- Flag Catalogue
-- Flag Deprecation
-- Fleet
-- Fleet Attestation
-- Fleet Deployment Workflow
-- Fleet Operational Commands
-- Fleet Trust Propagation
-- From `.chezmoidata.toml`
-- From `.chezmoidata/hardware.toml`
-- From `.chezmoidata/themes.toml`
-- From Feature Flags
-- Gates Enforced by CI
-- General
-- Getting More Help
-- Global Flags
-- Global Flags (`.chezmoidata.toml`)
-- Hardware Presets
-- Helper Templates (in `.chezmoitemplates/`)
-- Identity and Signing
-- Incident Response
-- Inspect & Repair
-- Installation
-- Installation & Update
-- Invocation
-- Limitations
-- Listing Known Presets
-- Log Files
-- Machine-Scoped Secrets
-- Manual
-- MIT License
-- Next
-- Observability
-- Ongoing (monthly)
-- Ongoing (quarterly)
-- Operational Rules
-- Option A: Drop a Static Image
-- Option B: Dynamic HEIC (Recommended)
-- Option C: Golden Ratio Brightness (Advanced)
-- Option D: Install System Wallpapers (Already-Available)
-- Optional Binaries (installed by Mise on first apply)
-- Per-Machine Profiles
-- Per-Preset Overrides (`.chezmoidata/hardware.toml`)
-- Performance
-- Philosophy
-- Post-Install
-- Pre-Install
-- Prerequisites
-- Principles
-- Protocols
-- Read by Tools
-- Recovery
-- Reference
-- Registry
-- Required Binaries
-- Scenario
-- Secret-Related
-- Secrets
-- See Also
-- Shell Performance
-- Single Source, Many Hosts
-- Source Repository
-- Start Here
-- Startup Order
-- Startup Performance Model
-- Step 1: Choose or Create a Preset
-- Step 1: Generate an Age Key (First Time Only)
-- Step 1: Per-Host Install
-- Step 1: Run the Installer
-- Step 2: Choose Encryption Method
-- Step 2: Exchange Signing Keys
-- Step 2: Select the Preset for This Host
-- Step 2: Verify
-- Step 3: Reference the Preset in Templates
-- Step 3: Share the Age Key (for Shared Secrets)
-- Step 3: Take the Tour
-- Step 3A: Chezmoi-Encrypted File
-- Step 3B: SOPS-Encrypted YAML
-- Step 4: Add a New Preset
-- Step 4: Customize
-- Step 4: Reference the Secret in a Template
-- Step 4: Verify Fleet Alignment
-- Step 5: Add Your Identity
-- Step 5: Commit and Verify
-- Step 5: Per-Host Customization
-- Step 5: Per-Preset Feature Flags
-- Step 6: First Theme Switch
-- Step 6: Fleet-Wide Updates
-- Step 6: Multi-Recipient (Fleet)
-- Step 7: Rotate a Compromised Key
-- Step 7: Secrets Rotation
-- Step 8: Decommission a Host
-- Summary
-- Supported Architectures
-- Supported Platforms
-- Supported Shells
-- Template Testing
-- Tested CI Environments
-- The Four Subsystems
-- The Pipeline
-- The Self-Healing Loop
-- The Threat Model
-- The Why
-- Theme
-- Theme Application
-- Themes
-- Third-Party Licenses
-- Threat Model Summary
-- Tools & Systems
-- Troubleshooting
-- Troubleshooting Community
-- Trust Boundaries
-- Unsetting
-- User-Owned Configuration
-- User-Settable
-- Using a Flag in a Template
-- Validation in CI
-- Verified Files
-- Verifying No Plaintext Leaks
-- Verifying the Result
-- Wallpaper Discovery
-- What Got Installed
-- When to Use a Profile

package/docs/manual/index.md

@@ -1,66 +0,0 @@
----
-title: "The .dotfiles Manual"
-description: "A trusted agent workstation baseline for macOS, Linux, and WSL."
-render_with_liquid: false
----
-
-# The .dotfiles Manual
-
-A trusted agent workstation baseline for macOS, Linux, and WSL. Chezmoi handles templating and platform differences; the `dot` CLI coordinates lifecycle operations on top.
-
-This manual is generated from the Markdown sources in [`docs/manual/`](https://github.com/sebastienrousseau/dotfiles/tree/main/docs/manual) and published in nine formats per release. The HTML edition you are reading is the canonical online version.
-
-## Read it your way
-
-- **Web (multi-page)** — browse the chapters below
-- **Single-page HTML, PDF, EPUB, ASCII text** — attached to every [GitHub Release](https://github.com/sebastienrousseau/dotfiles/releases/latest)
-- **CLI** — `dot manual` opens the manual locally; `dot manual pdf` downloads the PDF; `dot manual text` pipes the ASCII edition to your pager
-
-## Contents
-
-### [Introduction](00-introduction.md)
-
-The audience, scope, conventions, and where the manual is published.
-
-### Concepts
-
-- [Architecture](01-concepts/01-architecture.md) — repository layout, chezmoi templating, the `dot` dispatcher
-- [Trust model](01-concepts/02-trust-model.md) — signing, attestation, SBOM, policy gates
-- [Theme engine](01-concepts/03-theme-engine.md) — wallpaper-driven theming across apps
-- [Fleet](01-concepts/04-fleet.md) — multi-workstation coordination and drift detection
-- [Self-healing](01-concepts/05-self-healing.md) — automatic remediation and rollback
-
-### Tutorials
-
-- [First install](02-tutorials/01-first-install.md)
-- [Add a wallpaper-driven theme](02-tutorials/02-add-wallpaper.md)
-- [Create an agent profile](02-tutorials/03-create-profile.md)
-- [Encrypt a secret](02-tutorials/04-encrypt-secret.md)
-- [Deploy to a fleet](02-tutorials/05-deploy-fleet.md)
-
-### Reference
-
-- [`dot` CLI](03-reference/01-dot-cli.md) — every subcommand
-- [Config files](03-reference/02-config-files.md) — every `~/.config/dotfiles/*` path
-- [Environment](03-reference/03-environment.md) — every variable read by the framework
-- [Templates](03-reference/04-templates.md) — every `{{ .var }}` reference
-- [Feature flags](03-reference/05-feature-flags.md)
-
-### Cookbook
-
-- [Recipes](04-cookbook/01-recipes.md)
-- [Troubleshooting](04-cookbook/02-troubleshooting.md)
-- [FAQ](04-cookbook/03-faq.md)
-
-### Appendices
-
-- [A — Platform matrix](05-appendices/A-platform-matrix.md)
-- [B — Security checklist](05-appendices/B-security-checklist.md)
-- [C — Glossary](05-appendices/C-glossary.md)
-- [D — Bibliography](05-appendices/D-bibliography.md)
-- [E — License](05-appendices/E-license.md)
-
-### Indexes
-
-- [Concept index](concept-index.md)
-- [Command index](command-index.md)