@sebastienrousseau/dotfiles 0.2.520 → 0.2.521

package/scripts/ci/check-copyright-headers.sh

@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
-# Pinned reusable workflows on main still reference the old path;
-# this delegates so they keep working until the next pin bump.
-set -euo pipefail
-exec bash "$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)/tools/ci/check-copyright-headers.sh" "$@"

package/scripts/ci/check-shell-preamble.sh

@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
-# Pinned reusable workflows on main still reference the old path;
-# this delegates so they keep working until the next pin bump.
-set -euo pipefail
-exec bash "$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)/tools/ci/check-shell-preamble.sh" "$@"

package/scripts/ci/guard-gitleaks-checkout.sh

@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Compat shim: the canonical script moved to tools/ci/ during the repo reorg.
-# Pinned reusable workflows on main still reference the old path;
-# this delegates so they keep working until the next pin bump.
-set -euo pipefail
-exec bash "$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)/tools/ci/guard-gitleaks-checkout.sh" "$@"

package/scripts/demo/record.sh

@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-OUT="${1:-$HOME/.dotfiles/docs/demo/demo.gif}"
-DURATION="${DURATION:-30}"
-FPS="${FPS:-15}"
-
-record_ffmpeg() {
-  if command -v ffmpeg >/dev/null; then
-    echo "Recording with ffmpeg for ${DURATION}s..."
-    if [ "$(uname -s)" = "Darwin" ]; then
-      # macOS (AVFoundation)
-      ffmpeg -y -t "$DURATION" -f avfoundation -i "1:none" -vf "fps=$FPS,scale=1024:-1:flags=lanczos" "$OUT"
-    else
-      # Linux (X11)
-      ffmpeg -y -t "$DURATION" -f x11grab -i :0.0 -vf "fps=$FPS,scale=1024:-1:flags=lanczos" "$OUT"
-    fi
-  else
-    echo "ffmpeg not found. Install it and retry."
-    exit 1
-  fi
-}
-
-record_wf_recorder() {
-  if command -v wf-recorder >/dev/null; then
-    echo "Recording with wf-recorder for ${DURATION}s..."
-    wf-recorder -f "$OUT" -t "$DURATION"
-  else
-    return 1
-  fi
-}
-
-if [ "$(uname -s)" = "Linux" ]; then
-  if record_wf_recorder; then
-    exit 0
-  fi
-fi
-
-record_ffmpeg
-
-printf "Saved demo to %s\n" "$OUT"

package/scripts/diagnostics/a2a-conformance.sh

@@ -1,163 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-## A2A v0.3 and agent card conformance validation.
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="${REPO_ROOT:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
-
-# shellcheck source=../../lib/dot/ui.sh
-source "$SCRIPT_DIR/../../lib/dot/ui.sh"
-
-JSON_MODE=0
-STRICT_MODE=0
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --json | -j)
-      JSON_MODE=1
-      shift
-      ;;
-    --strict | -s)
-      STRICT_MODE=1
-      shift
-      ;;
-    *)
-      shift
-      ;;
-  esac
-done
-
-command -v jq >/dev/null 2>&1 || {
-  echo "jq is required for A2A conformance checks." >&2
-  exit 1
-}
-
-a2a_card="$REPO_ROOT/.well-known/agent-card.json"
-legacy_doc="$REPO_ROOT/.well-known/agent.json"
-internal_card="$REPO_ROOT/defaults/dot_config/dotfiles/agent-card.json"
-agent_profiles="$REPO_ROOT/defaults/dot_config/dotfiles/agent-profiles.json"
-status="healthy"
-issues=()
-
-# Check primary A2A v0.3 card
-if [[ ! -f "$a2a_card" ]]; then
-  issues+=("missing:.well-known/agent-card.json")
-fi
-
-# Check legacy agent.json
-if [[ ! -f "$legacy_doc" ]]; then
-  issues+=("missing:.well-known/agent.json")
-fi
-
-# Check internal card
-if [[ ! -f "$internal_card" ]]; then
-  issues+=("missing:agent-card.json")
-fi
-
-# Check agent profiles
-if [[ ! -f "$agent_profiles" ]]; then
-  issues+=("missing:agent-profiles.json")
-fi
-
-if [[ "${#issues[@]}" -eq 0 ]]; then
-  # Validate A2A v0.3 card
-  spec_version="$(jq -r '.specVersion // empty' "$a2a_card")"
-  [[ "$spec_version" == "0.3" ]] || issues+=("specVersion:expected 0.3, got $spec_version")
-
-  # Skills array
-  jq -e '.skills | type == "array"' "$a2a_card" >/dev/null 2>&1 || issues+=("skills:missing or not array")
-  skills_count="$(jq '.skills | length' "$a2a_card" 2>/dev/null || echo 0)"
-  [[ "$skills_count" -gt 0 ]] || issues+=("skills:empty array")
-
-  # Authentication block
-  jq -e '.authentication' "$a2a_card" >/dev/null 2>&1 || issues+=("authentication:missing")
-
-  # Signing metadata
-  signing_method="$(jq -r '.signing.method // empty' "$a2a_card")"
-  [[ -n "$signing_method" ]] || issues+=("signing:missing method")
-
-  # Capabilities
-  jq -e '.capabilities' "$a2a_card" >/dev/null 2>&1 || issues+=("capabilities:missing")
-
-  # Protocol must be "a2a" not "a2a-ready"
-  if jq -e '.protocols | index("a2a-ready")' "$a2a_card" >/dev/null 2>&1; then
-    issues+=("protocols:should use 'a2a' not 'a2a-ready'")
-  fi
-  jq -e '.protocols | index("a2a")' "$a2a_card" >/dev/null 2>&1 || issues+=("protocols:missing 'a2a'")
-
-  # Validate internal card also uses v0.3 and "a2a"
-  internal_spec="$(jq -r '.specVersion // empty' "$internal_card")"
-  [[ "$internal_spec" == "0.3" ]] || issues+=("internal-card:specVersion expected 0.3")
-  if jq -e '.protocols | index("a2a-ready")' "$internal_card" >/dev/null 2>&1; then
-    issues+=("internal-card:should use 'a2a' not 'a2a-ready'")
-  fi
-
-  # Validate legacy doc points to new card
-  jq -e '.a2aCard' "$legacy_doc" >/dev/null 2>&1 || issues+=("legacy:missing a2aCard pointer")
-  if jq -e '.protocols | index("a2a-ready")' "$legacy_doc" >/dev/null 2>&1; then
-    issues+=("legacy:should use 'a2a' not 'a2a-ready'")
-  fi
-
-  # Name consistency
-  a2a_name="$(jq -r '.name // empty' "$a2a_card")"
-  internal_name="$(jq -r '.name // empty' "$internal_card")"
-  legacy_name="$(jq -r '.name // empty' "$legacy_doc")"
-  [[ "$a2a_name" == "$internal_name" ]] || issues+=("name:mismatch between a2a-card and internal card")
-  [[ "$a2a_name" == "$legacy_name" ]] || issues+=("name:mismatch between a2a-card and legacy doc")
-
-  # Default profile validation
-  default_profile="$(jq -r '.defaultProfile // empty' "$internal_card")"
-  if [[ -n "$default_profile" ]]; then
-    jq -e --arg profile "$default_profile" '.profiles[$profile]' "$agent_profiles" >/dev/null 2>&1 || issues+=("default-profile:missing in agent-profiles.json")
-  fi
-
-  # Card signing in internal card
-  jq -e '.security.cardSigning' "$internal_card" >/dev/null 2>&1 || issues+=("internal-card:missing cardSigning in security")
-fi
-
-if [[ "${#issues[@]}" -gt 0 ]]; then
-  status="issues"
-fi
-
-# Build issues JSON safely
-if [[ "${#issues[@]}" -gt 0 ]]; then
-  issues_json="$(printf '%s\n' "${issues[@]}" | jq -R . | jq -s .)"
-else
-  issues_json="[]"
-fi
-
-payload="$(jq -n \
-  --arg status "$status" \
-  --arg a2a_card "$a2a_card" \
-  --arg legacy_doc "$legacy_doc" \
-  --arg internal_card "$internal_card" \
-  --arg agent_profiles "$agent_profiles" \
-  --argjson strict "$([[ "$STRICT_MODE" -eq 1 ]] && echo true || echo false)" \
-  --argjson issues "$issues_json" \
-  '{status: $status, strict: $strict, specVersion: "0.3", files: {a2a_card: $a2a_card, legacy_doc: $legacy_doc, internal_card: $internal_card, agent_profiles: $agent_profiles}, issues: $issues}')"
-
-if [[ "$JSON_MODE" -eq 1 ]]; then
-  printf '%s\n' "$payload"
-else
-  ui_dot_banner "AI and Agents"
-  ui_header "A2A v0.3 Conformance"
-  if [[ "$status" == "healthy" ]]; then
-    ui_ok "Status" "healthy"
-    ui_ok "Spec version" "0.3"
-    ui_ok "A2A card" "$a2a_card"
-    ui_ok "Legacy doc" "$legacy_doc"
-    ui_ok "Internal card" "$internal_card"
-  else
-    ui_warn "Status" "issues"
-    while IFS= read -r issue; do
-      [[ -n "$issue" ]] || continue
-      ui_warn "Issue" "$issue"
-    done < <(printf '%s' "$payload" | jq -r '.issues[]')
-  fi
-fi
-
-if [[ "$STRICT_MODE" -eq 1 && "$status" != "healthy" ]]; then
-  exit 1
-fi

package/scripts/diagnostics/alias-governance.sh

@@ -1,165 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Alias governance checks:
-# - duplicate alias names
-# - risky overrides must be gated
-# - no hardcoded /Users paths
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-manifest_script="$SCRIPT_DIR/aliases-manifest.sh"
-deprecations_file="$SCRIPT_DIR/../dot/data/alias-deprecations.tsv"
-policy="${DOTFILES_ALIAS_POLICY:-standard}"
-if [[ -n "${CI:-}" && "${DOTFILES_ALIAS_POLICY:-}" == "" ]]; then
-  policy="strict"
-fi
-
-if [[ ! -x "$manifest_script" ]]; then
-  echo "ERROR: aliases-manifest.sh not found or not executable" >&2
-  exit 1
-fi
-
-tmp_manifest="$(umask 077 && mktemp)"
-trap 'rm -f "$tmp_manifest"' EXIT
-
-bash "$manifest_script" >"$tmp_manifest"
-
-errors=0
-
-echo "Alias Governance"
-echo ""
-echo "Policy: $policy"
-echo ""
-
-version_ge() {
-  local a="${1#v}" b="${2#v}"
-  local IFS=.
-  local i
-  read -r -a av <<<"$a"
-  read -r -a bv <<<"$b"
-  for i in 0 1 2; do
-    local ai="${av[$i]:-0}"
-    local bi="${bv[$i]:-0}"
-    ((10#$ai > 10#$bi)) && return 0
-    ((10#$ai < 10#$bi)) && return 1
-  done
-  return 0
-}
-
-repo_version="0.0.0"
-if [[ -f "$SCRIPT_DIR/../../package.json" ]]; then
-  repo_version="$(sed -n 's/^[[:space:]]*"version"[[:space:]]*:[[:space:]]*"\([0-9][0-9.]*\)".*/\1/p' "$SCRIPT_DIR/../../package.json" | head -1)"
-fi
-repo_version="${repo_version:-0.0.0}"
-
-# ripgrep is preferred but is NOT guaranteed to be installed (the CI
-# runners and minimal setups often lack it, which is why
-# aliases-manifest.sh already carries a grep fallback). Without one
-# here, `rg` exiting 127 reads as "no match": every gated override was
-# reported as ungated, and this gate failed with false errors on any
-# machine without ripgrep.
-_gov_grep_file() { # <ere-pattern> <file>
-  if command -v rg >/dev/null 2>&1; then
-    rg -q "$1" "$2"
-  else
-    grep -qE "$1" "$2"
-  fi
-}
-
-_gov_grep_tree() { # <ere-pattern> <dir>...
-  local pattern="$1"
-  shift
-  if command -v rg >/dev/null 2>&1; then
-    rg -q --glob '*.sh' --glob '*.aliases.sh' --glob '*.tmpl' "$pattern" "$@" 2>/dev/null
-  else
-    grep -rqE --include='*.sh' --include='*.aliases.sh' --include='*.tmpl' \
-      "$pattern" "$@" 2>/dev/null
-  fi
-}
-
-# 1) Duplicate alias names
-dupes="$(awk -F'\t' '{count[$1]++} END {for (k in count) if (count[k] > 1) print k}' "$tmp_manifest" | sort)"
-if [[ -n "$dupes" ]]; then
-  if [[ "$policy" == "strict" ]]; then
-    echo "ERROR: duplicate alias names detected:"
-    printf "%s\n" "$dupes" | sed 's/^/  - /'
-    errors=$((errors + 1))
-  else
-    echo "WARN: duplicate alias names detected (review recommended):"
-    printf "%s\n" "$dupes" | sed 's/^/  - /'
-  fi
-else
-  echo "OK: no duplicate alias names"
-fi
-
-# 2) Risky overrides must be gated
-while IFS=$'\t' read -r name _value file _line; do
-  case "$name" in
-    cd | sudo | su | cp | mv | rm | mkdir | alias)
-      # GNU coreutils aliases are intentionally centralized overrides.
-      if [[ "$file" == *"/aliases/gnu/"* ]]; then
-        continue
-      fi
-      if ! _gov_grep_file 'DOTFILES_(ENABLE|SAFE|ALIAS)' "$file"; then
-        echo "ERROR: risky override '$name' in $file is not gated by a DOTFILES_* flag"
-        errors=$((errors + 1))
-      fi
-      ;;
-  esac
-done <"$tmp_manifest"
-
-if [[ $errors -eq 0 ]]; then
-  echo "OK: risky overrides are gated"
-fi
-
-# 3) Hardcoded /Users path check (alias value only)
-hardcoded="$(awk -F'\t' '$2 ~ /\/Users\// {print $1 "\t" $2 "\t" $3 ":" $4}' "$tmp_manifest")"
-if [[ -n "$hardcoded" ]]; then
-  echo "ERROR: hardcoded /Users paths detected in aliases:"
-  printf "%s\n" "$hardcoded" | sed 's/^/  - /'
-  errors=$((errors + 1))
-else
-  echo "OK: no hardcoded /Users paths in aliases"
-fi
-
-# 4) Deprecation window enforcement
-if [[ -f "$deprecations_file" ]]; then
-  expired_hits=0
-  while IFS=$'\t' read -r alias_name replacement remove_in; do
-    [[ -z "${alias_name:-}" ]] && continue
-    [[ "${alias_name:0:1}" == "#" ]] && continue
-    if version_ge "$repo_version" "$remove_in"; then
-      alias_found=0
-      if awk -F'\t' -v n="$alias_name" '$1==n{found=1} END{exit(found?0:1)}' "$tmp_manifest"; then
-        alias_found=1
-      fi
-      function_found=0
-      if _gov_grep_tree "^[[:space:]]*(function[[:space:]]+)?${alias_name}[[:space:]]*\\(\\)" \
-        "$SCRIPT_DIR/../../defaults/.chezmoitemplates/aliases" \
-        "$SCRIPT_DIR/../../scripts/dot"; then
-        function_found=1
-      fi
-      if [[ $alias_found -eq 1 || $function_found -eq 1 ]]; then
-        [[ $expired_hits -eq 0 ]] && echo "ERROR: expired deprecated aliases still present:"
-        echo "  - $alias_name (remove_in=$remove_in, replacement=$replacement)"
-        expired_hits=$((expired_hits + 1))
-      fi
-    fi
-  done < <(cut -f1-3 "$deprecations_file")
-  if [[ $expired_hits -gt 0 ]]; then
-    errors=$((errors + 1))
-  else
-    echo "OK: no expired deprecated aliases (repo version: v$repo_version)"
-  fi
-fi
-
-echo ""
-if [[ $errors -eq 0 ]]; then
-  echo "Alias governance checks passed."
-  exit 0
-fi
-
-echo "Alias governance checks failed: $errors issue(s)." >&2
-exit 1

package/scripts/diagnostics/aliases-cheatsheet.sh

@@ -1,74 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=../../lib/dot/utils.sh
-# shellcheck disable=SC1091
-source "$SCRIPT_DIR/../../lib/dot/utils.sh"
-
-src_dir="$(require_source_dir)"
-manifest="$src_dir/scripts/diagnostics/aliases-manifest.sh"
-if [[ ! -x "$manifest" ]]; then
-  echo "Alias manifest not found: $manifest" >&2
-  exit 1
-fi
-
-cat <<'HEADER'
-# Alias Cheatsheet
-
-Auto-generated from alias manifest.
-
-## Core shortcuts
-HEADER
-
-# Core list we care about (preserve ordering).
-core_aliases=(c q e h _ i l ll la lr lra lt lta a d)
-
-tmp_manifest="$(umask 077 && mktemp)"
-trap 'rm -f "$tmp_manifest"' EXIT
-bash "$manifest" >"$tmp_manifest"
-
-pick_alias() {
-  local name="$1"
-  shift
-  local value=""
-  local pattern
-  while [[ $# -gt 0 ]]; do
-    pattern="$1"
-    value="$(awk -F$'\t' -v key="$name" -v pat="$pattern" '$1==key && $3 ~ pat {print $2; exit}' "$tmp_manifest")"
-    [[ -n "$value" ]] && {
-      printf '%s\n' "$value"
-      return 0
-    }
-    shift
-  done
-  value="$(awk -F$'\t' -v key="$name" '$1==key {print $2; exit}' "$tmp_manifest")"
-  [[ -n "$value" ]] && printf '%s\n' "$value"
-}
-
-for a in "${core_aliases[@]}"; do
-  case "$a" in
-    a)
-      line="$(pick_alias "$a" "/ai/")"
-      ;;
-    d)
-      line="$(pick_alias "$a" "/system/" "/configuration/" "/docker/")"
-      ;;
-    *)
-      line="$(pick_alias "$a")"
-      ;;
-  esac
-  if [[ -n "$line" ]]; then
-    printf '%s\n' "- \`$a\` $line"
-  fi
-done
-
-cat <<'FOOTER'
-
-## Notes
-
-- Regenerate: `dot aliases cheatsheet`
-- Apply changes: `chezmoi apply`
-FOOTER

package/scripts/diagnostics/aliases-manifest.sh

@@ -1,77 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Emit alias manifest as TSV:
-# name<TAB>value<TAB>file<TAB>line
-
-set -euo pipefail
-
-usage() {
-  cat <<'EOF'
-Usage: aliases-manifest.sh [chezmoi-source-dir]
-
-Emit alias definitions as tab-separated rows:
-  name<TAB>value<TAB>file<TAB>line
-EOF
-}
-
-resolve_source_dir() {
-  if [[ -n "${CHEZMOI_SOURCE_DIR:-}" && -d "${CHEZMOI_SOURCE_DIR}" ]]; then
-    printf "%s\n" "${CHEZMOI_SOURCE_DIR}"
-    return
-  fi
-  if [[ -d "$HOME/.dotfiles" ]]; then
-    printf "%s\n" "$HOME/.dotfiles"
-    return
-  fi
-  if [[ -d "$HOME/.local/share/chezmoi" ]]; then
-    printf "%s\n" "$HOME/.local/share/chezmoi"
-    return
-  fi
-  return 1
-}
-
-# Descend into the chezmoi source subdir (per `.chezmoiroot`) if
-# present — post-Phase-4b (v0.2.503) the aliases + functions trees
-# live under `defaults/.chezmoitemplates/`, not at the repo root.
-# See `resolve_chezmoi_source_dir` in lib/dot/utils.sh.
-resolve_chezmoi_source_dir() {
-  local root="$1"
-  if [[ -f "$root/.chezmoiroot" ]]; then
-    local sub
-    sub="$(head -1 "$root/.chezmoiroot" | tr -d '[:space:]')"
-    if [[ -n "$sub" && -d "$root/$sub" ]]; then
-      printf "%s\n" "$root/$sub"
-      return
-    fi
-  fi
-  printf "%s\n" "$root"
-}
-
-case "${1:-}" in
-  -h | --help)
-    usage
-    exit 0
-    ;;
-  -*)
-    printf 'Unknown option: %s\n' "$1" >&2
-    usage >&2
-    exit 2
-    ;;
-esac
-
-src_root="${1:-$(resolve_source_dir)}"
-src_dir="$(resolve_chezmoi_source_dir "$src_root")"
-
-alias_pattern='^[[:space:]]*alias[[:space:]]+[A-Za-z0-9_.:-]+='
-conditional_alias_pattern='^[[:space:]]*[^#"'\'']*&&[[:space:]]*alias[[:space:]]+[A-Za-z0-9_.:-]+='
-search_paths=(
-  "$src_dir/.chezmoitemplates/aliases"
-  "$src_dir/.chezmoitemplates/functions"
-)
-
-if command -v rg >/dev/null 2>&1; then
-  rg -n -e "$alias_pattern" -e "$conditional_alias_pattern" "${search_paths[@]}"
-else
-  grep -rEn -e "$alias_pattern" -e "$conditional_alias_pattern" "${search_paths[@]}"
-fi | sed -E 's#^([^:]+):([0-9]+):.*alias[[:space:]]+([A-Za-z0-9_.:-]+)=(.*)$#\3\t\4\t\1\t\2#'