configs-all 1.0.0

package/shell/alias/alias-d.zsh

@@ -0,0 +1,333 @@
+#!/bin/zsh
+
+# git
+export GIT_SIGN_CHIEF="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGEDLKukaKrIbAJTyyVNMfHsEzn5AHBxlAiA5wqI9k75"
+export GIT_SIGN_DUPLO="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIgpIcLuet6LaYXPj7vVjoKSAAVYHRY/Ogi09723Yxh7"
+alias chief-sign='git config user.name "Mikl Wolfe" && git config user.email "wolfemikl@gmail.com" && git config user.signingkey "$GIT_SIGN_CHIEF"'
+alias duplo-sign='git config user.name "Mikl Wolfe" && git config user.email "wolfemikl+mikl@gmail.com" && git config user.signingkey "$GIT_SIGN_DUPLO"'
+
+# jit aws
+jaws() {
+  if [ "$1" = "prod" ]; then
+    DUPLO_HOST="https://prod.duplocloud.net"
+    DUPLO_TOKEN="AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAWQwdj647BUeIXQoezFqq3wAAAAACAAAAAAAQZgAAAAEAACAAAAATBvtO55IahcFmFL0vJ9zfbOgc4GrD4DGGRuGWBcxMlAAAAAAOgAAAAAIAACAAAABEfPXfaVYRqai78jTGjfvlnTaiLRKb2vtF4uLC7GKOgZAAAADNGoV00Da0upli0ntNG13C3iB8An2Yf_SXKI2uwfFoNXm7NeNmgxr1yMLu76EoZ4YraKjSDHGPTtsWakOZcPqeF5Y_YVcYp0lPF8D6OTllS5O5rRsmce-I9oqAKT-ICrgPqC2z1bHojeD1H72rJo7AEUvx4cLVVqamHkVc_9qI9_TGnm3O4wYTb-QIJMsuFyxAAAAAjVIOakBrtv9OJUi-XMgFV2OOwoT4oW8nVmZWsIsay65Um8NP9dyoPEcdzE62Fld07ZsL39r79t5OBwe90QD7Xw"
+    DUPLO_TENANT="default"
+  elif [ "$1" = "test10" ]; then
+    DUPLO_HOST="https://test10.duplocloud.net"
+    DUPLO_TOKEN="AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAuQFtxQiLd0CWhiDvU2AKZAAAAAACAAAAAAAQZgAAAAEAACAAAAD6la_KRMJzsor3cQdEfFgl-xtzpai5Po6Bw5FB-VjuvQAAAAAOgAAAAAIAACAAAADjd-CoO4tdoDrX_3X1H8mtWn_R4piXmNi-Q3bBRyOQHZAAAACwsoAVxTt5g3kjxFS6lQICEwvXwn1KMc6zwnMzfUO56fVxSEVWm2Ob9WzGJhHmsecIrGGUrhtIKI0OlYZkNT2GvP0HMl6O2-8F-3fT73EWAXagrPmLeJsUhYf1RznMpskJyWKQha5pEQt0WOj4PsPr_6hGiyvX6qZ-MP-brwvvQNGx0ZFECxcUixme7MkEc99AAAAAIFhYvm8VWMvh8ZvFN2NiZLhtU6ZDWGgW28jYXAH8CQorSKbXQErmCRCVFHzSicYNGLptm2sTf3IHSr3kAYxedg"
+    DUPLO_TENANT="default"
+  fi
+
+  echo DUPLO_HOST: "$DUPLO_HOST"
+
+  duploctl jit web -H "${DUPLO_HOST}" -t "${DUPLO_TOKEN}" -T "${DUPLO_TENANT}" --admin --browser "chrome" | jq -r '.message'
+}
+
+# directories - use LOCAL_DEV (set in variables.zsh from HOST_MAPPINGS)
+export DEVBOX="${LOCAL_DEV}"
+export PROD="${DROPBOX}/${DEVBOX}/prod"
+export MIKL="${DROPBOX}/${DEVBOX}/mikl"
+export UI="${DROPBOX}/${DEVBOX}/prod/duplo-ui"
+export AI="${DROPBOX}/${DEVBOX}/ai-ui"
+export INFRA="${DROPBOX}/${DEVBOX}/duplo-infra"
+export AUTOMATION="${INFRA}/automation"
+
+export DEVOPS_MGR_API_KEY="b16cf87f-43ce-4ff5-b17d-41bfd8b6f45c"
+export USER_EMAIL="mikl@duplocloud.net"
+export SSL_CERT_FILE=$(python3 -c "import certifi; print(certifi.where())")
+
+# Load API keys from secure location
+if [[ -f "${HOME}/.secrets" ]]; then
+    source "${HOME}/.secrets"
+else
+    echo "Warning: ~/.secrets file not found. Add DEVOPS_MGR_API_KEY to it."
+fi
+
+# aliases
+alias devopsmgr='cd ${PROD}/devops-manager'
+alias devopsm="devopsmgr && cd backend && (16 && y) && cd ../ui && (12 && n) && cd .. && exec zsh"
+alias dui="devopsmgr && cd ui && 12"
+alias dbe="devopsmgr && cd backend && 16"
+alias allow="direnv allow"
+alias reload="direnv reload"
+alias prod="cd ${PROD}"
+alias mikl="cd ${MIKL}"
+alias ui="cd ${UI}"
+alias ai="cd ${AI}"
+alias infra="cd ${INFRA}"
+alias automation="cd ${AUTOMATION}"
+alias prod.="pushd ${PROD} && allow && popd"
+alias mikl.="pushd ${MIKL} && allow && popd"
+alias deploy="duplo-deploy"
+
+# get duplo version
+duplo-v() {
+  curl --location "https://${1}.duplocloud.net/build-metadata.json" \
+  --header 'Authorization: Bearer AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAP-7Lg4akeE-x4mfvqZkn0QAAAAACAAAAAAAQZgAAAAEAACAAAACNg4xgEhcUqefAFyO8doFgp7ndKM3mj5v9OAH-lRpxFQAAAAAOgAAAAAIAACAAAADHgv2GHsHGUrIxikXQCIvKUjNUFghZQRjt23p-bJCT6qAAAAB0NBqstb2w3YWKMYMdZUsQMOSz8EjURmEvdfzLY_nvsHP5E75fmaKzqUtRQFEutLbUexb7hdBnjFMe4M02TC3dvoJErFylNehvxkMHmeU0sHlmamB9IQkm4b4cjoRwIs-PUOV305UTnC0E-JJXAzYH9SLwFnPwF8kDfRtYLfcpm4-IJP9sxK-eLzWjeooJq29RHWRWVe9ZHzaJMF8DHbTmQAAAAOLc0cmMrgUMx3FcUj-p7JScBpghSEmKCLPovK0Wbnq576LvOJFS45oAlh_r2Bx8zxM5Cu4daX-ZxhujPt_Kyv8'
+}
+
+# get ui version
+duplo-uiv() {
+  curl --location "https://${1}.duplocloud.net/frontdoor/build-metadata.json" \
+  --header 'Authorization: Bearer AQAAANCMnd8BFdERjHoAwE_Cl-sBAAAAP-7Lg4akeE-x4mfvqZkn0QAAAAACAAAAAAAQZgAAAAEAACAAAACNg4xgEhcUqefAFyO8doFgp7ndKM3mj5v9OAH-lRpxFQAAAAAOgAAAAAIAACAAAADHgv2GHsHGUrIxikXQCIvKUjNUFghZQRjt23p-bJCT6qAAAAB0NBqstb2w3YWKMYMdZUsQMOSz8EjURmEvdfzLY_nvsHP5E75fmaKzqUtRQFEutLbUexb7hdBnjFMe4M02TC3dvoJErFylNehvxkMHmeU0sHlmamB9IQkm4b4cjoRwIs-PUOV305UTnC0E-JJXAzYH9SLwFnPwF8kDfRtYLfcpm4-IJP9sxK-eLzWjeooJq29RHWRWVe9ZHzaJMF8DHbTmQAAAAOLc0cmMrgUMx3FcUj-p7JScBpghSEmKCLPovK0Wbnq576LvOJFS45oAlh_r2Bx8zxM5Cu4daX-ZxhujPt_Kyv8'
+}
+
+duplo-deploy() {
+  pushd "${AUTOMATION}" && AWS_PROFILE="$1" update-duplo && popd && duplo-v "$1" && duplo-uiv "$1"
+}
+
+# test directory aliases
+for i in {01..24}
+do
+    export TEST"$i"="${DEVBOX}/test$i"
+    eval "test$i() { cd \"\${TEST$i}\"; }"
+    eval "test$i.() { pushd \"\${TEST$i}\" && allow && popd; }"
+done
+
+
+
+
+
+# onboarding stuff
+
+# [[ $- == *i* ]] && source ~/.local/share/blesh/ble.sh --noattach
+
+# If not running interactively, don't do anything
+case $- in
+  *i*) ;;
+    *) return;;
+esac
+
+# MYSQL_BIN - use HOMEBREW_PREFIX if available (set in variables.zsh)
+if [[ -n "${HOMEBREW_PREFIX:-}" ]] && [[ -d "${HOMEBREW_PREFIX}/opt/mysql-client/bin" ]]; then
+  MYSQL_BIN="${HOMEBREW_PREFIX}/opt/mysql-client/bin"
+elif [[ -d "/usr/local/opt/mysql-client/bin" ]]; then
+  MYSQL_BIN="/usr/local/opt/mysql-client/bin"
+else
+  MYSQL_BIN=""
+fi
+
+if [[ -n "${MYSQL_BIN}" ]]; then
+  export PATH="${MYSQL_BIN}:${HOME}/.krew/bin:${PATH}"
+else
+  export PATH="${HOME}/.krew/bin:${PATH}"
+fi
+
+export GCL_NEEDS=true
+JAVA_HOME="$(/usr/libexec/java_home -v 21)"
+export JAVA_HOME
+export OP_ACCOUNT='duplocloudinc.1password.com'
+export TERM=xterm-256color
+export XDG_CONFIG_HOME="${HOME}"
+export WORKSPACE_HOME="${DEVBOX}"
+
+# for direnv editor
+export EDITOR="code --wait"
+export VSCODE_GIT_ASKPASS_NODE="/Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper.app/Contents/MacOS/Code Helper"
+
+
+alias k="kubectl"
+# alias tf="terraform"
+alias gcl="${HOME}/.nvm/versions/node/v19.3.0/bin/gitlab-ci-local"
+alias kui="/Applications/Kui.app/Contents/MacOS/kui"
+
+# Load zsh-specific addons
+eval "$(direnv hook zsh)"
+source "${HOME}/scripts/helpers.sh"
+source "${HOME}/scripts/act.sh"
+# source "${HOME}/scripts/theme.sh"
+
+# gcloud config
+export GCP_SDK="${HOME}/google-cloud-sdk"
+if [ -f "${GCP_SDK}/path.zsh.inc" ]; then . "${GCP_SDK}/path.zsh.inc"; fi
+if [ -f "${GCP_SDK}/completion.zsh.inc" ]; then . "${GCP_SDK}/completion.zsh.inc"; fi
+
+flushdns() {
+  sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
+}
+jit() {
+  duplo-jit aws --admin --no-cache --host "https://$1.duplocloud.net" --token "$2" | jq -r .ConsoleUrl | pbcopy
+}
+jitenv() {
+  duplo-jit aws \
+  --admin --host "https://$1.duplocloud.net" \
+  --no-cache \
+  --token "$2"
+}
+jitnow() {
+  duplo-jit aws --admin --no-cache --host "https://$1.duplocloud.net" --interactive | jq -r .ConsoleUrl | pbcopy
+}
+duplo-rdp-master() {
+    local profile="${1:-${AWS_PROFILE}}" instance_id
+    [ -z "$profile" ] && echo "missing AWS profile" && return 1
+
+    echo -n "$profile: duplo-master: searching .. "
+    instance_id="$(
+        aws --profile="$1" ec2 describe-instances --filters "Name=tag:Name,Values=Duplo-Master" \
+            --output=json | jq -r '.Reservations[].Instances[].InstanceId'
+    )"
+    [ -z "$instance_id" ] && echo NOT FOUND && return 1
+    echo "$instance_id"
+
+    echo -n "$profile: duplo-master: starting RDP session .. "
+    if aws --profile="$1" ssm start-session --target "$instance_id" --document-name AWS-StartPortForwardingSession --parameters portNumber=3389,localPortNumber=56789
+    then echo "done"
+    else echo FAILED ; return 1
+    fi
+}
+
+cmd-duplo-master() {
+    local profile="${1:-${AWS_PROFILE}}" instance_id
+    [ -z "$profile" ] && echo "missing AWS profile" && return 1
+    echo -n "$profile: duplo-master: searching .. "
+    instance_id="$(
+        aws --profile="$profile" ec2 describe-instances --filters "Name=tag:Name,Values=Duplo-Master" \
+            --output=json | jq -r '.Reservations[].Instances[].InstanceId'
+    )"
+    [ -z "$instance_id" ] && echo NOT FOUND && return 1
+    echo "$instance_id"
+
+    # Script to run PowerShell script on the Windows instance.
+    # started from https://devops.stackexchange.com/a/3390, but split the meat of it into 3 functions
+    # for better organization and maintainability
+
+    # Create an array with the commands
+    commands=("${@:2}")
+
+    # Convert the array to a JSON string
+    commands_json=$(printf '%s\n' "${commands[@]}" | jq -R . | jq -s .)
+
+    cmdId=$(aws --profile="$profile" ssm send-command --instance-ids "$instance_id" --document-name "AWS-RunPowerShellScript" --query "Command.CommandId" --output text --parameters commands="$commands_json")
+    echo -n "$profile: duplo-master: running command... $cmdId\n"
+    wait-while-cmd-executes "$profile" "$cmdId"
+    get-cmd-output "$profile" "$cmdId"
+}
+
+wait-while-cmd-executes() {
+  while [ true ];
+  do
+    cmdstatus=$(aws --profile="$1" ssm list-command-invocations --command-id "$2" --query "CommandInvocations[].Status" --output text)
+    echo "$cmdstatus"
+    if [ "$cmdstatus" != "InProgress" ]; then
+      #echo "not in progress"
+      break
+    fi
+    sleep 1;
+  done
+}
+
+get-cmd-output() {
+  aws --profile="$1" ssm list-command-invocations --command-id "$2" --details --query "CommandInvocations[*].CommandPlugins[*].Output[]" --output text --no-cli-pager
+}
+
+cmd-no-output-duplo-master() {
+    local profile="${1:-${AWS_PROFILE}}" instance_id
+    [ -z "$profile" ] && echo "missing AWS profile" && return 1
+
+    echo -n "$profile: duplo-master: searching .. "
+    instance_id="$(
+        aws --profile="$profile" ec2 describe-instances --filters "Name=tag:Name,Values=Duplo-Master" \
+            --output=json | jq -r '.Reservations[].Instances[].InstanceId'
+    )"
+    [ -z "$instance_id" ] && echo NOT FOUND && return 1
+    echo "$instance_id"
+
+    # Script to run PowerShell script on the Windows instance.
+    # started from https://devops.stackexchange.com/a/3390, but split the meat of it into 3 functions
+    # for better organization and maintainability
+
+    # Create an array with the commands
+    commands=("${@:2}")
+
+    # Convert the array to a JSON string
+    commands_json=$(printf '%s\n' "${commands[@]}" | jq -R . | jq -s .)
+
+    # Run the AWS CLI command
+    cmdId=$(aws --profile="$profile" ssm send-command --instance-ids "$instance_id" --document-name "AWS-RunPowerShellScript" --query "Command.CommandId" --output text --parameters commands="$commands_json")
+
+    # do not wait for command output
+    # just know the command tried to run
+
+    echo "$(date +%H:%M:%S)"
+}
+
+cmd-no-op() {
+    local profile="${1:-${AWS_PROFILE}}"
+    [ -z "$profile" ] && echo "missing AWS profile" && return 1
+
+    aws --profile="$profile" s3 ls > nul &
+}
+
+all-customers-getwurebootstatus() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-duplo-master "$in" "Get-WURebootStatus -Silent"
+  done
+}
+
+all-customers-rebootnow() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-no-output-duplo-master "$in" "Restart-Computer -Force"
+  done
+}
+
+all-customers-getwindowsupdate() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-duplo-master "$in" "get-windowsupdate | format-table KB, Size, RebootRequired, IsDownloaded, IsInstalled, Title ; get-wurebootstatus -silent"
+  done
+}
+
+all-customers-trigger-getwindowsupdate() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-no-output-duplo-master "$in" "Get-WindowsUpdate"
+  done
+}
+
+all-customers-installwindowsupdate() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-no-output-duplo-master "$in" "Install-WindowsUpdate -AcceptAll -AutoReboot"
+  done
+}
+
+all-customers-installwindowsupdatenoreboot() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-no-output-duplo-master "$in" "Install-WindowsUpdate -AcceptAll"
+  done
+}
+
+just-open-customer-tabs() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-no-op "$in"
+  done
+}
+
+all-customers-nuget-bar() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-duplo-master "$in" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force -Scope AllUsers"
+  done
+}
+
+all-customers-pswindowsupdate() {
+  cat ~/customers.txt |
+  while read -r in; do
+    cmd-duplo-master "$in" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Set-PSRepository -Name PSGallery -InstallationPolicy Trusted"
+    cmd-duplo-master "$in" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Install-Module -Name PSWindowsUpdate"
+    cmd-duplo-master "$in" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Set-PSRepository -Name PSGallery -InstallationPolicy Untrusted"
+  done
+}
+
+specific-customer-pswindowsupdate() {
+    local profile="${1:-${AWS_PROFILE}}"
+    [ -z "$profile" ] && echo "missing AWS profile" && return 1
+
+    cmd-duplo-master "$profile" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Set-PSRepository -Name PSGallery -InstallationPolicy Trusted"
+    cmd-duplo-master "$profile" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Install-Module -Name PSWindowsUpdate"
+    cmd-duplo-master "$profile" "[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12;Set-PSRepository -Name PSGallery -InstallationPolicy Untrusted"
+}

package/shell/alias/alias.zsh

@@ -0,0 +1,36 @@
+#!/bin/zsh
+
+# Shell Alias Configuration - Main Entry Point
+# This file loads all modular alias configurations
+
+# Helper function to load alias files with error checking
+load_alias_category() {
+  local alias_file="$1"
+  local category_name="$2"
+
+  if [[ -f "$alias_file" ]]; then
+    source "$alias_file"
+  else
+    echo "Warning: $category_name aliases not found at $alias_file"
+  fi
+}
+
+# Load environment variables first (other categories depend on these)
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/environment.zsh" "environment"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/path.zsh" "PATH"
+
+# Load host-specific configuration
+if [ "${HOST}" = "duplo" ]; then
+  load_alias_category "${CONFIG_DIR}/shell/alias/alias-d.zsh" "duplo-specific"
+fi
+
+# Load all other alias categories
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/system.zsh" "system"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/git.zsh" "git"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/development.zsh" "development"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/network.zsh" "network"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/github-functions.zsh" "GitHub functions"
+load_alias_category "${CONFIG_DIR}/shell/alias/categories/wolfe-server.zsh" "Wolfe server"
+
+# iTerm2 shell integration
+test -e "${HOME}/.iterm2_shell_integration.zsh" && source "${HOME}/.iterm2_shell_integration.zsh"

package/shell/alias/categories/development.zsh

@@ -0,0 +1,157 @@
+#!/bin/zsh
+
+# Claude Code
+alias c="claude"
+alias cr="claude -c"
+alias claude-resume="claude -c"
+alias cs="claude --dangerously-skip-permissions"
+alias claude-skip="claude --dangerously-skip-permissions"
+
+# Development workflow aliases
+alias n="npm i && dbi-current"
+alias nl="npm i --legacy-peer-deps && dbi-current"
+alias ncuu="ncu -u && n"
+
+# Node.js version management
+alias 12="nvm use 12"
+alias 16="nvm use 16"
+alias 18="nvm use 18"
+
+# Python aliases
+alias py="python3"
+alias python="python3"
+alias pip="pip3"
+alias pipi="pip3 install"
+alias pufreeze="pip freeze | cut -d = -f 1 > upgrades.txt"
+alias pins="pyenv install --list"
+alias plist="pyenv versions"
+alias preq="pipi -m requirements.txt"
+alias pupgrade="pipi -m requirements.txt"
+
+# Python functions
+pfreeze() {
+    pip freeze > "${1}.txt"
+}
+
+envy() {
+    py -m venv "${1}" && source "${1}/bin/activate"
+}
+
+# Lazy load NVM for performance
+run_nvm() {
+  # Check if NVM is already loaded
+  if command -v nvm >/dev/null 2>&1; then
+    nvm "$@"
+    return
+  fi
+
+  # Try Homebrew location first - HOMEBREW_PREFIX is set in variables.zsh
+  if [[ -n "${HOMEBREW_PREFIX:-}" ]] && [[ -s "${HOMEBREW_PREFIX}/opt/nvm/nvm.sh" ]]; then
+    . "${HOMEBREW_PREFIX}/opt/nvm/nvm.sh"
+  # Fallback to Intel Mac location
+  elif [[ -s "/usr/local/opt/nvm/nvm.sh" ]]; then
+    . "/usr/local/opt/nvm/nvm.sh"
+  else
+    echo "Error: nvm not found. Install with 'brew install nvm'"
+    return 1
+  fi
+
+  # Load NVM completion (stored in bash_completion.d by NVM)
+  if [[ -z "${NVM_COMPLETION_LOADED}" ]]; then
+    if [[ -n "${HOMEBREW_PREFIX:-}" ]] && [[ -s "${HOMEBREW_PREFIX}/opt/nvm/etc/bash_completion.d/nvm" ]]; then
+      . "${HOMEBREW_PREFIX}/opt/nvm/etc/bash_completion.d/nvm"
+    elif [[ -s "/usr/local/opt/nvm/etc/bash_completion.d/nvm" ]]; then
+      . "/usr/local/opt/nvm/etc/bash_completion.d/nvm"
+    fi
+    export NVM_COMPLETION_LOADED=1
+  fi
+
+  nvm "$@"
+}
+
+nvm() {
+  run_nvm "$@"
+}
+
+# Wishing Well
+start-ww() {
+  local ww_dir="${HOME}/Dropbox/dev/ww"
+  echo "Starting Wishing Well..."
+
+  # Start postgres + redis via docker compose (just infra, not app services)
+  (cd "$ww_dir" && docker compose up -d postgres redis) || { echo "Failed to start infra"; return 1; }
+
+  # Wait for postgres to be ready
+  echo "Waiting for postgres..."
+  until docker exec wishing-well-postgres pg_isready -U wishing_well -d wishing_well >/dev/null 2>&1; do
+    sleep 1
+  done
+  echo "Postgres ready."
+
+  # Set env vars for native dev (localhost, not Docker hostnames)
+  export DATABASE_URL="postgresql://wishing_well:wishing_well_dev@localhost:5432/wishing_well"
+  export JWT_SECRET="dev-jwt-secret-local-only"
+  export NEXTAUTH_SECRET="dev-nextauth-secret-local-only"
+  export NEXTAUTH_URL="http://localhost:3100"
+  export NEXT_PUBLIC_API_URL="http://localhost:3101"
+  export WW_API_URL="http://localhost:3101"
+
+  # Run API + web concurrently (native, no Docker rebuild)
+  (cd "$ww_dir" && npm run dev)
+}
+
+stop-ww() {
+  echo "Stopping Wishing Well..."
+  (cd "${HOME}/Dropbox/dev/ww" && docker compose down)
+  echo "Stopped."
+}
+
+# Unicorne aliases (QMK)
+alias compile-unicorne='${SCRIPT_DIR}/qmk/sync_unicorne.sh && qmk compile -kb boardsource/unicorne -km chiefmikey'
+alias flash-unicorne='${SCRIPT_DIR}/qmk/sync_unicorne.sh && qmk flash -kb boardsource/unicorne -km chiefmikey'
+
+# Reviung41 aliases (ZMK)
+alias build-reviung='${SCRIPT_DIR}/qmk/build_reviung41.sh'
+
+# Ollama (local AI) — runs on mikpc, accessible locally or via Tailscale
+# Uses native Ollama API (think:false for clean output) + glow for markdown rendering
+if command -v ollama &>/dev/null; then
+  OLLAMA_URL="http://localhost:11434"
+  alias ail="ollama list"
+  alias ais="ollama ps"
+else
+  OLLAMA_URL="http://100.89.204.71:11434"
+  alias ail="curl -s $OLLAMA_URL/api/tags | jq -r '.models[] | \"\\(.name)\\t\\(.details.parameter_size)\\t\\(.details.quantization_level)\"'"
+  alias ais="curl -s $OLLAMA_URL/api/ps | jq -r '.models[] | \"\\(.name)\\t\\(.size_vram / 1073741824 | floor)GB VRAM\"'"
+fi
+
+_ollama_send() {
+  local response
+  response=$(curl -s "$OLLAMA_URL/api/chat" \
+    -d "{\"model\":\"$1\",\"messages\":[{\"role\":\"user\",\"content\":$(printf '%s' "$2" | jq -Rs .)}],\"think\":false,\"stream\":false}" \
+    2>/dev/null | jq -r '.message.content // empty')
+  if command -v glow &>/dev/null; then
+    printf '%s' "$response" | glow -
+  else
+    printf '%s\n' "$response"
+  fi
+}
+
+_ollama_chat() {
+  local model="$1"; shift
+  local prompt="$*"
+  echo "Ollama ($model). Ctrl+C to quit."
+  if [[ -n "$prompt" ]]; then
+    _ollama_send "$model" "$prompt"
+  fi
+  while printf "\n>>> " && IFS= read -r prompt; do
+    [[ -z "$prompt" ]] && continue
+    _ollama_send "$model" "$prompt"
+  done
+}
+
+alias ai="_ollama_chat qwen3:32b"
+alias aif="_ollama_chat glm-4.7-flash"
+alias aic="_ollama_chat qwen2.5-coder:32b"
+alias air="_ollama_chat deepseek-r1:32b"
+alias aib="_ollama_chat qwen2.5:72b"

package/shell/alias/categories/environment.zsh

@@ -0,0 +1,13 @@
+#!/bin/zsh
+
+# Security & API keys - Load from secure location
+# WARNING: Never commit API keys to version control!
+if [[ -f "${HOME}/.secrets" ]]; then
+    source "${HOME}/.secrets"
+else
+    echo "Warning: ~/.secrets file not found. Create it with your API keys."
+    echo "Example:"
+    echo "export OPENAI_API_KEY=\"your-key-here\""
+    echo "export NPM_TOKEN=\"your-token-here\""
+fi
+export ASKPASS="${SCRIPT_DIR}/mac/sudo-askpass/mac-sudo-askpass.sh"

package/shell/alias/categories/git.zsh

@@ -0,0 +1,40 @@
+#!/bin/zsh
+
+# Git aliases and functions
+alias gs="git status"
+alias push='git push -u origin $(git rev-parse --abbrev-ref HEAD)'
+alias goop="git pull ${*}"
+alias tags="git push --tags"
+alias mm="git pull --rebase=false --autostash --no-edit origin main"
+alias mms="git pull --rebase=false --autostash --no-edit origin master"
+alias md="git pull --rebase=false --autostash --no-edit origin develop"
+alias rem="git pull --rebase=merges --autostash origin main"
+alias rems="git pull --rebase=merges --autostash origin master"
+alias pum="git pull upstream main"
+alias pums="git pull upstream master"
+alias gitignore='echo -e "node_modules\n.DS_Store\n.vscode\n.env\ndist" > .gitignore'
+
+# Git workflow aliases
+alias sync-apps="${SCRIPT_DIR}/git/sync-apps/git-sync-apps.sh"
+alias temp-push="${SCRIPT_DIR}/git/temp/git-temp-push.sh"
+alias temp-pull="${SCRIPT_DIR}/git/temp/git-temp-pull.sh"
+alias nsync="pullr && rem && n"
+alias msync="pullm && mms && y"
+alias remote="${SCRIPT_DIR}/git/remote/git-remote-ssh.sh"
+alias mkrepo="${SCRIPT_DIR}/gh/repo/gh-repo-create.sh"
+
+# Git helper functions
+pullr() {
+    # shellcheck disable=SC2086
+    git pull --rebase=merges --autostash ${1} ${2}
+}
+
+pullm() {
+    # shellcheck disable=SC2086
+    git pull --rebase=false --autostash --no-edit ${1} ${2}
+}
+
+pushf() {
+    # shellcheck disable=SC2086
+    git push --force-with-lease --force-if-includes ${1} ${2}
+}