Skip to content

Latest commit

 

History

History
1413 lines (1219 loc) · 177 KB

File metadata and controls

1413 lines (1219 loc) · 177 KB

Changelog

1.9.0 (2026-05-22)

Features

  • add Zed, Claude Code/Desktop, komorebi support and refactor choco management (3785100)
  • skills: distribute via vercel-labs/skills + modify_ migrations (#72) (9d35651)
  • ssh-signing: Windows commit signing via ssh-tpm-agent (#73) (4d5825f)

Bug Fixes

  • add missing chezmoiignore entries and document Zed MCP target (4429c77)
  • git: create global gitignore to suppress Claude Code worktree artifacts (#89) (6ebface)
  • git: use cross-platform null hooks path on Windows (#68) (5032e2f)
  • komorebi: stop tiling Claude Desktop folder picker dialogs (eeba5da)
  • lint: exclude chezmoi modify_*.json templates from JSON linters (#76) (ab638f2)
  • lint: exclude vendored rtk.ts from ts-standard (#77) (6f7dc5f)
  • lint: forward GITHUB_TOKEN to zizmor for action audits (#84) (9ac5b8d)
  • scripts: quote suffix expansion in choco-review (SC2295) (#75) (286fcef)
  • test: align choco-review bats assertion with script (#74) (232c441)
  • windows-bootstrap: unblock Windows E2E CI by propagating CI=1 to WSL (#78) (0e40f7d)
  • windows: place mise-shim.exe next to choco-installed mise.exe (42529ba)
  • workflows: re-enable zizmor; fix template-injection and unpinned-image findings (#88) (d43cd05)
  • workflows: set persist-credentials: false on actions/checkout (#85) (74d1576)

Miscellaneous

  • agents: add 'diagnose from logs, not theory' to global rules (defe9b7)
  • agents: add rule for inspecting PR diffs against origin/main (146de93)
  • agents: add rules for branch verification and stale git lock files (2611695)
  • agents: add Windows path and mise-trust rules from retrospective (8498a62)
  • agents: anchor subagent bash commands to the worktree path (e5c68eb)
  • agents: apply quality audit findings to memory files (08e400d)
  • agents: apply review fixes to global rules (ae8a7e8)
  • agents: capture two retrospective lessons (9b034ce)
  • agents: check for prior work before starting a fix (e48f44e)
  • agents: forbid disabling linters/tests to make CI green (5dd632c)
  • agents: gate Cursor/Codex/Claude tools to private systems (#71) (2f6a039)
  • agents: generalise perf rule to one-sample-is-not-a-measurement (3d12da5)
  • agents: merge clone-related rules into single authoritative-source rule (a8b43ef)
  • agents: move Twilio IaC lessons to project-local memory (29a4062)
  • agents: no amend or force-push after PR is open (977734e)
  • agents: note mise GOBIN drift for go install fallbacks (8cb1c59)
  • agents: note that git hooks need mise activation (9a48894)
  • agents: pull project-specific rules out of global memory (ec0c027)
  • agents: reconcile scaffolded output + Windows git exec bit (4c00709)
  • agents: require delivering the value, not instructions to derive it (3c706f8)
  • agents: require variance + thread-pinning for perf recommendations (f3fc372)
  • agents: tighten global AGENTS.md after audit (#82) (078f788)
  • agents: verify IaC exporters and browser vs shell auth (bc50ae5)
  • agents: warn against chezmoi apply --source <worktree> (aa8ca93)
  • ci: cancel in-flight E2E install runs when a PR is closed (#86) (6aee9a5)
  • ci: full-scan MegaLinter on its own Renovate update PRs (#81) (795fea6)
  • deps: update dependency @tarquinen/opencode-dcp to v3.1.12 (#58) (f85694f)
  • deps: update dependency chezmoi to v2.70.3 (#60) (06e8c74)
  • deps: update dependency chezmoi to v2.70.4 (#90) (b633440)
  • deps: update dependency chrome-devtools-mcp to v1 (#79) (7078d53)
  • deps: update dependency google/go-containerregistry to v0.21.6 (#83) (3184ea6)
  • deps: update dependency macos to v26 (#69) (f21ae06)
  • deps: update dependency smart-mcp-proxy/mcpproxy-go to v0.32.1 (#63) (831324d)
  • deps: update dependency smart-mcp-proxy/mcpproxy-go to v0.33.1 (#92) (7724e04)
  • deps: update dependency uv to v0.11.15 (#61) (09ed83e)
  • deps: update dependency uv to v0.11.16 (#91) (ab48231)
  • deps: update ghcr.io/chipwolf/badgesort docker digest to e0542e4 (#62) (c355a4e)
  • deps: update github/codeql-action digest to 9e0d7b8 (#59) (c05bdc9)
  • deps: update mcr.microsoft.com/devcontainers/universal docker tag to v6.0.4 (#80) (608f81c)
  • deps: update oxsecurity/megalinter action to v9.5.0 (#70) (68afd67)
  • renovate: restrict update PRs to Friday 11am-1pm window (003cab3)
  • skills: scope memory skill chezmoi apply to AGENTS.md only (b6f80f1)

1.8.1 (2026-05-11)

Bug Fixes

  • ci: pass --source ./home to chezmoi execute-template (#65) (e9e1034)

1.8.0 (2026-05-11)

Features

  • brew: add mcpproxy.app cask for menubar GUI (87da5c6)
  • brew: add rtk CLI proxy to brew configuration and update tmux settings (393c984)
  • claude: add AGENTS.md shim rule and repo-root CLAUDE.md (#64) (c493214)
  • claude: symlink ~/.claude/skills to ~/.agents/skills (341f147)
  • claude: symlink ~/.claude/skills to ~/.agents/skills (297026e)
  • context-mode: wire hooks, plugin, and rules for cursor + opencode (aceff17)
  • cursor: enable git.autofetch (7898cc4)
  • dotfiles: finalize mcpproxy and Windows tooling updates (093705c)
  • mcp: add mcpproxy as MCP render target (6deb9fe)
  • mcp: scaffold pi as MCP render target, add context-mode server (0987c2e)
  • mise: manage context-mode declaratively via mise npm backend (6abdc69)
  • mise: reconcile mise tools on config change via chezmoiscript (fb08ed4)
  • pi: add pi-lens for real-time code feedback (624d4ab)
  • pi: add pi-mcp-adapter for MCP support (049684c)
  • pi: add pi-subagents for task delegation (9dd454d)
  • pi: manage pi-coding-agent and packages declaratively (aa4a9ea)
  • windows: add registry overlay system for HKLM/HKCU patches (7ead4ad)
  • windows: add Yubico Authenticator package metadata (de79991)

Bug Fixes

  • claude: remove template includes, keep symlink only (1e8cecb)

Miscellaneous

  • deps: update dependency cc-safety-net to v0.9.0 (#57) (640842e)
  • deps: update dependency uv to v0.11.11 (#55) (136a6cb)
  • opencode: rule for diagnosing broken MCP subagents (0fdbba9)

1.7.0 (2026-05-06)

Features

  • add ci data flag with overlay-level conditions for brew and agent-permissions (4a2ea02)
  • agent-permissions: adopt GitHub Codespaces terminal auto-approve defaults (5256493)
  • brew: add CI conditions to non-essential base packages (6d52d53)
  • codespaces: add setup bootstrap shim for templated installer (a62897d)
  • windows: refresh YASB and GlazeWM desktop defaults (a85320e)
  • winget: manage WinSCP via base overlay (5a96965)
  • zsh: add chezmoi wrapper for auto Bitwarden unlock on apply (80d8d41)

Bug Fixes

  • bootstrap: always load brew shellenv before post-install tools (fc8e59e)
  • bootstrap: render Brewfile at template time to avoid lock (894c9e8)
  • bootstrap: render Brewfile via stdin with explicit source (86428fd)
  • bootstrap: resolve source context and disable CI brew upgrades (ebded53)
  • bootstrap: resolve source dir and force no-upgrade in CI (36b6258)
  • bootstrap: use CHEZMOI_SOURCE_DIR/Brewfile.tmpl path (ecad242)
  • bootstrap: use grep for neovim Brewfile guard (c156d4e)
  • brew: move neovim and tmux into base overlay (a5caa92)
  • brew: remove iTerm2 in favor of Ghostty (239c2e9)
  • ci: MegaLinter, DevSkim config, and YAML workflow hygiene (da515ee)
  • ci: skip package upgrade maintenance scripts in CI (4ce63a1)
  • ci: stabilize brewfile render in bootstrap path (ac2fd3a)
  • ci: use POSIX grep in repro workflow (4aba020)
  • codespaces: manage gitconfig overrides via source state (ca08bff)
  • e2e: add bitwarden-cli to mise.toml instead of runtime install (17c1194)
  • e2e: add deterministic Brewfile fallback path for bootstrap (9ad02a6)
  • e2e: avoid brittle windows path and brew hash assumptions (545827e)
  • e2e: correct mise tool name from bitwarden-cli to bitwarden (73a2454)
  • e2e: enable volatile storage for Vaultwarden in CI (3785a2f)
  • e2e: exclude scripts and externals when running install.sh in CI (20cc5ea)
  • e2e: force Bitwarden setup in Linux install run (2cd988f)
  • e2e: force CI env through install step for brew gating (5aafdd6)
  • e2e: install bitwarden-cli via mise instead of npm (7c3d91f)
  • e2e: invoke seed script with uv run, not python3 (79d6358)
  • e2e: keep install test single-pass with scripts enabled (8071961)
  • e2e: make install-script workflow pass with Vaultwarden and script phase (ed656ed)
  • e2e: normalize windows managed-target checks and brew guard (f3922ad)
  • e2e: pass --script to uv run so inline metadata is parsed (26ab625)
  • e2e: pin bitwarden CLI to 2025.10.0 for HTTP Vaultwarden tests (cfb5d6c)
  • e2e: render and run the actual install.sh instead of manual chezmoi commands (acd5f58)
  • e2e: render Brewfile from source data (not init context) (ecb8218)
  • e2e: render Brewfile with explicit source and honor excludes (c35c607)
  • e2e: render Brewfile with init data and assert neovim (45a3625)
  • e2e: skip Bitwarden templating during Linux install run (926cfcf)
  • e2e: stabilize Windows home checks and Brewfile rendering (1fe905e)
  • e2e: support Vaultwarden registration endpoint variants (e2d2fc9)
  • e2e: symlink checkout as default chezmoi source dir (1e1e88c)
  • e2e: unlock vault before Linux seed writes (69b68a9)
  • e2e: use Docker health check instead of manual poll loop (7374182)
  • e2e: use uv inline script metadata instead of pip install (65b2b12)
  • e2e: use valid bitwarden CLI version (2026.3.0) (fe280cb)
  • e2e: validate bw session before seeding vault (5fe3c4d)
  • install: check chezmoi exit code instead of printing false Done (2bca1d6)
  • installer: preserve mise path and assert neovim install in bootstrap (73ec017)
  • install: install powershell-core before chezmoi init on Windows (d21d1f0)
  • install: support DOTFILES_CHEZMOI_EXCLUDE for CI and non-interactive runs (9849a69)
  • install: unlock Bitwarden before chezmoi secret templates (40404ab)
  • lint: correct YAML escape in mega-linter config and update brewfile test (a695e4f)
  • lint: resolve all MegaLinter non-blocking warnings (ca887f7)
  • lint: resolve MegaLinter blocking errors (cfc6aff)
  • linux: treat finicky config as macOS-only (22d917c)
  • opencode: render generated config cleanly (c740059)
  • scripts: source brew shellenv in tmux symlinks script (2dd6d49)
  • test: init template data for bootstrap render checks (9ad7838)
  • test: provide explicit codespaces data in bootstrap rendering (fac655f)
  • test: render bootstrap template from home source root (f6f43ff)
  • tests: make source renders deterministic under CI env (9396309)
  • tmux: create config dir before symlink (dbd23ac)
  • tmux: resolve brew shellenv before zsh/antidote checks (7c6fb9c)
  • windows-bootstrap: enforce fail-fast and stabilize WSL package gating (1e5d4bd)
  • windows-bootstrap: harden elevated logging and WSL first-run apply (a2304c3)
  • windows-bootstrap: stabilize WSL provisioning and package gating (76a2a2f)
  • windows-ci: bypass UAC elevation helper in CI (f2096c1)
  • windows-install: preserve chezmoi command after PATH refresh (61258e6)
  • windows: install gnupg so mise can verify tool signatures (751b7df)
  • windows: streamline bootstrap and GlazeWM setup (3fa655f)
  • windows: warn visibly when mise install fails during bootstrap (fd0715f)

Miscellaneous

  • deps: update dependency chezmoi to v2.70.2 (#53) (7f29eb6)
  • deps: update dependency chrome-devtools-mcp to v0.24.0 (#50) (fa902d1)
  • deps: update dependency pipx:pre-commit to v4.6.0 (#51) (bcbb1fb)
  • deps: update dependency uv to v0.11.10 (#48) (b293717)
  • deps: update ghcr.io/chipwolf/badgesort docker digest to ddcd973 (#46) (3c1d8c6)
  • deps: update github/codeql-action digest to e46ed2c (#47) (257cdb6)
  • deps: update googleapis/release-please-action action to v5 (#52) (16d084f)
  • deps: update mcr.microsoft.com/devcontainers/universal docker tag to v6 (#49) (539d221)
  • opencode: don't double-ask when logging to daily note (2e52e16)

1.6.2 (2026-04-13)

Bug Fixes

  • install: split elevation so errors are visible and bw login runs in user context (30a2f67)
  • tests: make bats tests work on Windows (Git Bash + native Ruby) (0fafbac)

1.6.1 (2026-04-13)

Bug Fixes

  • agent-permissions: remove trailing blank line for yamllint (5175421)
  • agent-permissions: satisfy yamllint indentation for merged rulesets (2c45a82)
  • bootstrap: use compatible chezmoi execute-template --file syntax (b6b683a)
  • devskim: use inline ignores for hash command patterns (22cddd5)
  • install: install and authenticate Bitwarden CLI before chezmoi init (368d308)
  • opencode: preserve merged permissions and test full config rendering (77db44b)
  • tests: make template rendering deterministic in CI (8c938f5)
  • tests: pin chezmoi sourceDir in bats setup (a6fbd04)
  • tests: render templates with --file in chezmoi bats (3ae07c6)

Miscellaneous

  • bootstrap: add apply-time package maintenance updates (ab5548f)
  • brew: add template-data hash sentinels to Brewfile (b110762)
  • brew: move to template-only bundle workflow (e2cc62e)
  • brew: use anomalyco tap for opencode formula (012c743)
  • chezmoi: bootstrap Obsidian vault external on Windows (4c8ed6a)
  • chezmoi: migrate profile-driven overlays for brew, MCP, and agent permissions (5f658de)
  • ci: pin runner image and move test deps into mise (5ce7147)
  • ci: use uv-backed pre-commit task across platforms (f59837f)
  • deps: pin jdx/mise-action action to 1648a78 (#38) (9163c95)
  • deps: update dependency @tarquinen/opencode-dcp to v3.1.9 (#41) (0eed64e)
  • deps: update dependency google/go-containerregistry to v0.21.5 (#42) (34bd863)
  • deps: update dependency mcp-atlassian to v0.21.1 (#40) (29afbd1)
  • deps: update dependency uv to v0.11.6 (#39) (c84caf7)
  • git: route GitHub credential helper through mise (21cf1fb)
  • installer: move release scripts to template-only source (727e085)
  • lint: apply MegaLinter autofixes and local report ignore (3484d23)
  • opencode: pin plugin versions and streamline brew drift review (384124a)
  • powertoys: simplify template caveat comment (e1968f5)
  • powertoys: sync settings data with current app output (60dd87a)
  • powertoys: template settings from chezmoidata (610038f)
  • readme: link referenced repo files (f3edd84)
  • schema: update brew overlays schema id (0035b68)
  • skills: harden git-commit-push for Windows shells (558d808)
  • windows: elevate apply-time package updates (d87bca7)

1.6.0 (2026-04-09)

Features

  • config: canonicalize MCP server definitions for Cursor and OpenCode (614a85a)
  • ghostty: set macos-option-as-alt = left for tmux M- chords (5a18011)
  • mcp: canonicalize shared server schema (fd25d04)
  • opencode: add reusable git and skill-authoring workflows (5857704)
  • powertoys: persist keyboard manager launch mapping for wezterm (3e1208f)
  • wakatime: configure bitwarden-backed api key (5cdc9b2)
  • wakatime: standardize WAKATIME_HOME across shells (826d2c4)
  • windows: add treesizefree to bootstrap packages (9c9b078)
  • windows: include sysinternals in bootstrap packages (bf133f7)
  • windows: install treesitter requirements for nvim (7a2d1d2)
  • zsh: bind e in vicmd to edit-command-line; add keybinds doc (2fca0bd)

Bug Fixes

  • ci: use head_ref in MegaLinter concurrency group to prevent self-cancellation (ba25815)
  • git: configure gh as default credential helper (eb7515a)

Miscellaneous

  • ci: remove self-hosted renovate workflow (14b53d0)
  • cursor: make terminal settings cross-platform in template (590f05a)
  • deps: update dependency @mauricio.wolff/mcp-obsidian to v0.8.2 (#33) (d26bad2)
  • deps: update dependency chrome-devtools-mcp to v0.21.0 (#34) (f2b664a)
  • deps: update dependency mcp-atlassian to v0.21.0 (#35) (e6293cc)
  • deps: update dependency pre-commit to v4.5.1 (#31) (ffe832a)
  • docs: remove keybind explorer section (756c082)
  • dotfiles: automate renovate and validate MCP servers (16d43d8)
  • dotfiles: batch dangling workspace updates (a221fd5)
  • ignore CHANGELOG.md from ripgrep searches (24f43fc)
  • mcp: down-bump pinned server versions (68edba8)
  • mcp: simplify server rendering and document wiki sync (90f66e0)
  • mcp: support inline data interpolation in args (37ff874)
  • remove beads directory from source state and add chezmoiremove entry (642055b)
  • remove k9s entry from chezmoiremove file (e59dff4)
  • renovate: uncap hourly PRs and ignore node runtime (1d188e2)

Documentation

  • agents: add repo skills for mcp and homebrew (24ecfa0)
  • agents: require clean worktree at session end (2a20a4d)
  • keybinds: expand tmux and zsh sections; add how-to for listing and modifying binds (db158f8)
  • keybinds: note KEYTIMEOUT caveat for vv binding (9675e90)

1.5.1 (2026-04-07)

Bug Fixes

  • ci: login-shell PATH for brew tools; install Neovim in Codespaces (cc74a8e)

Miscellaneous

  • deps: update dependency google/go-containerregistry to v0.21.4 (#29) (1895360)
  • deps: update docker/login-action digest to 4907a6d (#28) (aef8da0)

1.5.0 (2026-03-30)

Features

  • powertoys: manage settings and keyboard remap (caps-to-ctrl) (754265e)
  • windows: add discord to chocolatey packages (542ff79)
  • windows: add obsidian to chocolatey packages (33dd2fe)

Bug Fixes

  • ci: satisfy megalinter (stylua, ts-standard, shfmt, docker pin, markdown) (581309a)
  • docs: align markdown tables for markdown-table-formatter (cb00674)
  • lint: remediate all MegaLinter failures and warnings (1cfa932)
  • lint: remediate remaining MegaLinter failures and warnings (accd1a1)
  • lint: replace markdownlint-cli2 config with markdownlint-cli format (f8df0a7)
  • windows: set XDG_CONFIG_HOME and fix Lazy sync syntax (ea857e5)
  • windows: use pwsh for ps1 scripts to bypass execution policy (200d75f)

Miscellaneous

  • deps: update dependency gh to v2.89.0 (#25) (a2349f1)
  • deps: update github/codeql-action digest to c10b806 (#22) (a9aca9b)
  • opencode: allow gh run view * in bash permissions (c3b8e53)
  • update badges (3311fc8)

1.4.0 (2026-03-24)

Features

  • tests: add bats test suite for source and container validation (d5db99e)

Bug Fixes

  • bootstrap: preserve --require-sha during brew bundle (a29f777)
  • bootstrap: quote eval $(brew shellenv) to prevent word splitting (21209bb)
  • brewfile: gate tmux formula to macOS only (028801c)
  • gate tmux and ghostty configs to macOS only (f7281cf)
  • git: set core.editor to nvim instead of vim (3918e25)
  • install: use random temp filename to prevent TOCTOU in install.ps1 (1388010)
  • install: verify crane tarball checksum before extraction (b91841e)
  • readme: correct git config path in Forking section (98a2aab)

Miscellaneous

  • renovate: track crane version in install.sh via regex manager (14a986e)

1.3.3 (2026-03-24)

Bug Fixes

  • security: remediate code scanning findings across workflows and scripts (#12) (c22b4de)

Miscellaneous

  • deps: pin dependencies (#5) (3673974)
  • deps: update actions/checkout action to v6 (#6) (75fdeee)
  • deps: update github/codeql-action action to v4 (#9) (6c6dfef)

1.3.2 (2026-03-23)

Miscellaneous

  • container: add cross-reference comments for DIFF_COUNT (9353128)
  • install: add set -x to overlay post-apply block for debugging (16b5fc5)

1.3.1 (2026-03-23)

Bug Fixes

  • container: use hardcoded layer count instead of docker inspect on base image (486c087)

1.3.0 (2026-03-23)

Features

  • container: push delta-only overlay image to GHCR (f8dfebd)
  • install: simplify overlay fast path for delta images (e41aec3)
  • install: trust and install mise tools for workspace after overlay apply (f2b3115)

Bug Fixes

  • container: add layer size cleanup to Dockerfile (e0dcfca)
  • install: kill stale terminal sessions after overlay apply (32dd97b)

1.2.1 (2026-03-23)

Bug Fixes

  • install: preserve file ownership from overlay layers (5adb9e1)

1.2.0 (2026-03-23)

Features

  • release: switch all provenance to GitHub artifact attestations (2ceb30d)
  • release: use reusable workflows for SLSA Build L3 provenance (7dab58a)

Miscellaneous

  • ci: pin runners to ubuntu-24.04 (054f063)

1.1.1 (2026-03-23)

Bug Fixes

  • install: use sudo for overlay tar extraction in Codespaces (c032841)

1.1.0 (2026-03-23)

Features

  • release: pin version strings in install scripts, let release-please bump them (86f52cf)

Miscellaneous

  • agents: clarify Docker containers wording rule (f3e6788)

1.0.0 (2026-03-23)

Features

  • add 7zz wrapper for encryption (b298f64)
  • add BadgeSort workflow and README markers (9d7c1bd)
  • add macOS Cursor settings template and darwin Library ignore guard (64772c8)
  • add native Windows support (d6f9bdd)
  • add release-please workflow with SLSA provenance for scripts and container (28d2649)
  • apply Catppuccin Mocha theme across terminal stack (c52f1ea)
  • brew-review: sort Brewfile after adding an entry (1ee9dfa)
  • brewfile: gate personal-only packages behind HOMEBREW_PRIVATE (31c6778)
  • brew: skip Codespaces-irrelevant packages with ENV["CODESPACES"] guards (2954ce3)
  • codespaces: add GHCR overlay fast path for dotfiles provisioning (7899f47)
  • codespaces: gate tmux/cloud plugins and brew bundle in Codespaces (01c2408)
  • extract Brewfile, add brew-review drift detection on chezmoi apply (ec3762c)
  • finicky: open Slack links in Chrome (8c6df84)
  • install: prefer Homebrew for chezmoi install, prompt to install brew if missing (d770b16)
  • install: verify SLSA provenance attestation before extracting overlay layers (e464bf5)
  • k9s: add Catppuccin Mocha theme (e9e2119)
  • kitty: add kitty terminal config (1175588)
  • mise: skip go/node/ruby global installs in Codespaces (380d485)
  • nvim: add wakatime plugin (ac70e46)
  • opencode: add $ARGUMENTS support to retro custom command (587e7fd)
  • opencode: add cc-safety-net, opencode-beads, and opencode-dcp plugins (f794861)
  • opencode: add integrity check to python-guard plugin (b5085b5)
  • opencode: add permission-persist plugin to save always-allow patterns (30ed141)
  • opencode: add retrospective custom command for post-task improvement loop (2c05312)
  • opencode: convert memory and dotfiles subagents to skills (2776343)
  • opencode: introduce wolf wrapper, simplify python-guard plugin (98b69ab)
  • opencode: replace python-guard regex with PATH-shim approach (7f068c8)
  • opencode: replace wolf command prefix with PATH-based shim injection (e287faf)
  • opencode: templatize config and enable chrome-devtools (89ee90a)
  • persist Cursor settings via chezmoi (a08920a)
  • release: pin README URLs to versioned releases with x-release-please-version (d15c90c)
  • zsh: add is-iterm2 function, gate iterm2 plugin on it (2bec546)

Bug Fixes

  • antidote,zsh: use zstyle for plugins file (4c2c4e4)
  • antitote: correct load order for autocompletions (001aee9)
  • bootstrap: fix set -eu, NVIM_PRE_INSTALLED init, scope pkill to Codespaces (1828d4d)
  • bootstrap: restore template-based Codespaces branch in brew bundle step (c2a9891)
  • bootstrap: use whoami instead of $USER for Docker build compatibility (84ce1f0)
  • brew-review: filter tap contents to installed packages only, add remove option (c003ee3)
  • brew,scripts: add 1password-cli, sync nvim conditionally (f55c089)
  • brew: add 1password for safari, rage, age-plugin-yubikey (26f28cc)
  • brew: add amethyst (828b987)
  • brew: add element, google-drive, ice, lm-studio, lulu, zoom, asitop (b16533c)
  • brew: add ruby-build deps (31f8931)
  • brew: add wakatime-cli (18b0b7c)
  • brew: add whisper, fantastical (819b15e)
  • brew: add work deps (c0c1f3b)
  • brew: add yubico authenticator (ed90b9a)
  • brew: ignore exit code for doctor (575e69b)
  • brew: remove bartender (336901c)
  • brew: remove deprecated no-lock, add sanity checks (c5738e0)
  • brew: use HOMEBREW_CODESPACES instead of CODESPACES in Brewfile (19d2188)
  • codespaces: exclude tmp dir from overlay tar extraction (bef0766)
  • codespaces: suppress tar permission errors on pre-existing dirs (2eb0eb3)
  • disable asitop (b52cc2c)
  • disable exit on unset vars (642284c)
  • disable mas (b2f5599)
  • disable pinentry-mac (9a68374)
  • gitconfig: update email, signing key (802c168)
  • gnupg: correct file permissions (67491e0)
  • gnupg: prevent re-insert prompt (4800fef)
  • gnupg: remove invalid enforce option, private scdaemon file (ab0d3f9)
  • gpg: harden and comment config (33ec99d)
  • install: pass IMAGE@DIGEST to crane blob instead of two args (fd314a1)
  • install: skip metadata updates on pre-existing dirs during overlay extraction (8acb793)
  • k9s: fill missing v0.50 skin fields with Mocha colors (d3cfb6d)
  • mise,zsh: enable auto uv (1f55bee)
  • mise/npm: add hrvst-cli (c530710)
  • mise: add go, node, ruby, remove neovim (87fa380)
  • mise: enable experimental (031a226)
  • nvim: sync plugins (c9029d5)
  • opencode: make wolf wrapping idempotent, drop double-wrap error (b18fe94)
  • opencode: narrow chezmoi config guard path checks (08aaf48)
  • opencode: remove stale retrospective command (76d6377)
  • opencode: run retro in current session (bcd923b)
  • profile: remove stale go and pyenv PATH entries (01021e2)
  • readme: move release-please annotations outside code blocks (9637265)
  • release: add bootstrap-sha to start changelog from chezmoi migration (121ddde)
  • release: bump actions to Node 24, skip overlay fast path during image build (7759db1)
  • release: lowercase image name for Docker tag compatibility (55b5188)
  • release: reset manifest and version strings to 0.0.0 after cleaning up failed releases (68c756d)
  • release: reset manifest to 0.0.0 after cleaning up failed releases (18e4c5c)
  • scripts: use correct gpg brew package (8aff363)
  • self-elevate in install.ps1 to support irm | iex one-liner (b46e158)
  • support one-liner install without local clone (4d8aa46)
  • tmux: correct default-shell to Homebrew zsh path (6513802)
  • use chezmoi apply on subsequent runs for idempotency (2147f67)
  • use default chezmoi source dir on Windows bootstrap (aac60b0)
  • zsh/p10k: remove slants (0facb90)
  • zsh: add brew privacy flags to env (17eddcf)
  • zsh: add chezmoi alias, remove notes alias (29704c0)
  • zsh: add fuck alias (d904497)
  • zsh: add nvim aliases (ad2d5b9)
  • zsh: ensure completions load (a8d09b7)
  • zsh: quote brew shellenv eval (edc4a9f)
  • zsh: remove duplicate and conflicting git aliases (0d12a28)

Miscellaneous

  • add .gitattributes and normalize all line endings to LF (1d1971e)
  • add k9s, nmap, tree, watch; expand opencode bash permissions; set BD_DIR; init beads dir (6dd527b)
  • add mise.toml (gh) and renovate config (21de01c)
  • add yubikey and osx scratch docs, add age identity (bf7cfef)
  • agents: add commit discipline rule for atomic in-scope changes (a7f3d5d)
  • agents: document semantic commit convention in global memory (3dec285)
  • bootstrap: reload running zsh sessions after apply (77296f8)
  • brew: set HOMEBREW_NO_AUTO_UPDATE=1 in all brew scripts (c99d449)
  • brew: sort and deduplicate Brewfile entries (1f59e65)
  • chezmoi: clarify managed file removal workflow (407a92e)
  • chezmoi: clarify managed target removals (4a3ef0d)
  • disable fileMode tracking on Windows bootstrap (c6090ce)
  • enable set -x in Codespaces bootstrap for debug output (ea83645)
  • extract repo URL to variable for fork friendliness (0e8091c)
  • git: comment out gpgsign (de8785d)
  • gitignore: add .DS_Store (a4d833c)
  • normalize line endings (67ed7ab)
  • nvim: remove lazy-lock file (569fed2)
  • nvim: remove LazyVim example.lua stub (4dd9561)
  • nvim: remove stale neodev config (cc1cc28)
  • nvim: update lazy deps (e27ccfc)
  • nvim: update lazy lock (a627b8f)
  • opencode: add bd issue tracking snippet to global AGENTS.md (4757d0e)
  • opencode: add brew bundle fire-and-forget rule from session retrospective (3c83dab)
  • opencode: add context7 and grep.app MCP servers (16d8ceb)
  • opencode: add dotfiles and daily-note subagents, update AGENTS.md (3f87f14)
  • opencode: add memory subagent for AGENTS.md management (d91ab74)
  • opencode: add opencode-antigravity-auth plugin (c631aca)
  • opencode: add post-task retrospective and self-improvement rule to global memory (e19f5a8)
  • opencode: add sequential subagent delegation rule for session close (04ed139)
  • opencode: allow echo * commands without prompting (46faba5)
  • opencode: allow external_directory reads from temp dirs (d28c713)
  • opencode: allow ls * commands without prompting (5cab2cc)
  • opencode: allow mcp-atlassian read-only tools without prompting (26d1d4d)
  • opencode: clarify atomic shell steps (8e8daaf)
  • opencode: clarify atomic shell steps (158797d)
  • opencode: clarify immediate memory delegation (cb027a9)
  • opencode: clarify memory delegation follow-through (7ae1698)
  • opencode: clarify memory scope reconciliation (34090cb)
  • opencode: clarify shell command granularity (0631f00)
  • opencode: clarify subtask command isolation (62b68d5)
  • opencode: document beads-task-agent subagent in global and project AGENTS.md (84d1bcf)
  • opencode: generalize retrospective lesson rules (cf8df2d)
  • opencode: prefer call sites over generated types for SDK conventions (f9493fd)
  • opencode: refine retrospective lesson guidance (13564e9)
  • opencode: remove old retrospective command (c8a8193)
  • opencode: remove session-specific detail from brew bundle rule (0591334)
  • opencode: rename custom command retrospective -> retro (ab39b47)
  • opencode: strengthen retrospective rule to mandate @memory delegation (71d9d98)
  • opencode: strengthen SDK plugin rule with named examples and ground truth note (f556ae8)
  • opencode: thin global memory, extract retrospective and python-toolchain skills (9953d63)
  • p10k: disable gitstatus in Codespaces to skip gitstatusd download (2fdeb7b)
  • prewarm antidote plugin cache during bootstrap (6e882d9)
  • readme: clarify repo purpose and setup paths (c38ed93)
  • release main (#2) (7d65ae2)
  • release main (#3) (635fcb6)
  • release main (#4) (a43be42)
  • release main (#8) (b793cde)
  • remove beads issue tracker (d4eaab5)
  • remove beads/bd integration across all configs and memory files (a230ed7)
  • remove kitty config, replaced by ghostty and wezterm (c88c1f3)
  • remove redundant oh-my-zsh install from bootstrap (f80c21a)
  • remove stale .gitignore entries (01aeefc)
  • skip bash install in Codespaces (96c0b56)
  • skip mise and neovim setup in Codespaces (d24ffca)
  • skip neovim and fd in Codespaces (c30bb55)
  • skip tmux clone plugins in Codespaces (ffef757)
  • sort brewfile (89f95a1)
  • stage pending local changes before brewfile refactor (1ce5941)
  • sync changes from ~/dotfiles working copy (fc7e639)
  • tighten opencode guardrails and shell policies (c85b5d4)
  • tmux: add passthrough, Ghostty/Kitty compat, fix resurrect plugin path (db9c31c)
  • update AGENTS.md for opencode.jsonc.tmpl rename (af36e31)
  • update badges (8caaf59)
  • update badges (8b4749a)
  • zsh: move tmux symlink creation to run_onchange script (9253a98)
  • zsh: set KITTY_WINDOW_ID and TIMG_PIXELATION for Ghostty kitty graphics compat (278f7a4)

Documentation

  • expand README with tool matrix and platform details, add SECURITY.md and docs/ (0ae4c97)
  • fix hyperlink order to wiki style in README (c68099c)
  • move SLSA badge inline with h1 (6133ac1)
  • readme: tighten WARNING callout wording (f77ae44)
  • restructure README, trim verbose sections, remove SECURITY.md and opencode-mcp.md (e6759ec)
  • simplify chezmoi alternative install path (d2780e9)
  • use gh attestation verify instead of slsa-verifier in README (349ec04)

1.1.0 (2026-03-23)

Features

  • add 7zz wrapper for encryption (b298f64)
  • add BadgeSort workflow and README markers (9d7c1bd)
  • add macOS Cursor settings template and darwin Library ignore guard (64772c8)
  • add native Windows support (d6f9bdd)
  • add release-please workflow with SLSA provenance for scripts and container (28d2649)
  • apply Catppuccin Mocha theme across terminal stack (c52f1ea)
  • brew-review: sort Brewfile after adding an entry (1ee9dfa)
  • brewfile: gate personal-only packages behind HOMEBREW_PRIVATE (31c6778)
  • brew: skip Codespaces-irrelevant packages with ENV["CODESPACES"] guards (2954ce3)
  • codespaces: add GHCR overlay fast path for dotfiles provisioning (7899f47)
  • codespaces: gate tmux/cloud plugins and brew bundle in Codespaces (01c2408)
  • extract Brewfile, add brew-review drift detection on chezmoi apply (ec3762c)
  • finicky: open Slack links in Chrome (8c6df84)
  • install: prefer Homebrew for chezmoi install, prompt to install brew if missing (d770b16)
  • install: verify SLSA provenance attestation before extracting overlay layers (e464bf5)
  • k9s: add Catppuccin Mocha theme (e9e2119)
  • kitty: add kitty terminal config (1175588)
  • mise: skip go/node/ruby global installs in Codespaces (380d485)
  • nvim: add wakatime plugin (ac70e46)
  • opencode: add $ARGUMENTS support to retro custom command (587e7fd)
  • opencode: add cc-safety-net, opencode-beads, and opencode-dcp plugins (f794861)
  • opencode: add integrity check to python-guard plugin (b5085b5)
  • opencode: add permission-persist plugin to save always-allow patterns (30ed141)
  • opencode: add retrospective custom command for post-task improvement loop (2c05312)
  • opencode: convert memory and dotfiles subagents to skills (2776343)
  • opencode: introduce wolf wrapper, simplify python-guard plugin (98b69ab)
  • opencode: replace python-guard regex with PATH-shim approach (7f068c8)
  • opencode: replace wolf command prefix with PATH-based shim injection (e287faf)
  • opencode: templatize config and enable chrome-devtools (89ee90a)
  • persist Cursor settings via chezmoi (a08920a)
  • release: pin README URLs to versioned releases with x-release-please-version (d15c90c)
  • zsh: add is-iterm2 function, gate iterm2 plugin on it (2bec546)

Bug Fixes

  • antidote,zsh: use zstyle for plugins file (4c2c4e4)
  • antitote: correct load order for autocompletions (001aee9)
  • bootstrap: fix set -eu, NVIM_PRE_INSTALLED init, scope pkill to Codespaces (1828d4d)
  • bootstrap: restore template-based Codespaces branch in brew bundle step (c2a9891)
  • bootstrap: use whoami instead of $USER for Docker build compatibility (84ce1f0)
  • brew-review: filter tap contents to installed packages only, add remove option (c003ee3)
  • brew,scripts: add 1password-cli, sync nvim conditionally (f55c089)
  • brew: add 1password for safari, rage, age-plugin-yubikey (26f28cc)
  • brew: add amethyst (828b987)
  • brew: add element, google-drive, ice, lm-studio, lulu, zoom, asitop (b16533c)
  • brew: add ruby-build deps (31f8931)
  • brew: add wakatime-cli (18b0b7c)
  • brew: add whisper, fantastical (819b15e)
  • brew: add work deps (c0c1f3b)
  • brew: add yubico authenticator (ed90b9a)
  • brew: ignore exit code for doctor (575e69b)
  • brew: remove bartender (336901c)
  • brew: remove deprecated no-lock, add sanity checks (c5738e0)
  • brew: use HOMEBREW_CODESPACES instead of CODESPACES in Brewfile (19d2188)
  • codespaces: exclude tmp dir from overlay tar extraction (bef0766)
  • codespaces: suppress tar permission errors on pre-existing dirs (2eb0eb3)
  • disable asitop (b52cc2c)
  • disable exit on unset vars (642284c)
  • disable mas (b2f5599)
  • disable pinentry-mac (9a68374)
  • gitconfig: update email, signing key (802c168)
  • gnupg: correct file permissions (67491e0)
  • gnupg: prevent re-insert prompt (4800fef)
  • gnupg: remove invalid enforce option, private scdaemon file (ab0d3f9)
  • gpg: harden and comment config (33ec99d)
  • install: pass IMAGE@DIGEST to crane blob instead of two args (fd314a1)
  • install: skip metadata updates on pre-existing dirs during overlay extraction (8acb793)
  • k9s: fill missing v0.50 skin fields with Mocha colors (d3cfb6d)
  • mise,zsh: enable auto uv (1f55bee)
  • mise/npm: add hrvst-cli (c530710)
  • mise: add go, node, ruby, remove neovim (87fa380)
  • mise: enable experimental (031a226)
  • nvim: sync plugins (c9029d5)
  • opencode: make wolf wrapping idempotent, drop double-wrap error (b18fe94)
  • opencode: narrow chezmoi config guard path checks (08aaf48)
  • opencode: remove stale retrospective command (76d6377)
  • opencode: run retro in current session (bcd923b)
  • profile: remove stale go and pyenv PATH entries (01021e2)
  • release: add bootstrap-sha to start changelog from chezmoi migration (121ddde)
  • release: bump actions to Node 24, skip overlay fast path during image build (7759db1)
  • release: lowercase image name for Docker tag compatibility (55b5188)
  • release: reset manifest to 0.0.0 after cleaning up failed releases (18e4c5c)
  • scripts: use correct gpg brew package (8aff363)
  • self-elevate in install.ps1 to support irm | iex one-liner (b46e158)
  • support one-liner install without local clone (4d8aa46)
  • tmux: correct default-shell to Homebrew zsh path (6513802)
  • use chezmoi apply on subsequent runs for idempotency (2147f67)
  • use default chezmoi source dir on Windows bootstrap (aac60b0)
  • zsh/p10k: remove slants (0facb90)
  • zsh: add brew privacy flags to env (17eddcf)
  • zsh: add chezmoi alias, remove notes alias (29704c0)
  • zsh: add fuck alias (d904497)
  • zsh: add nvim aliases (ad2d5b9)
  • zsh: ensure completions load (a8d09b7)
  • zsh: quote brew shellenv eval (edc4a9f)
  • zsh: remove duplicate and conflicting git aliases (0d12a28)

Miscellaneous

  • add .gitattributes and normalize all line endings to LF (1d1971e)
  • add k9s, nmap, tree, watch; expand opencode bash permissions; set BD_DIR; init beads dir (6dd527b)
  • add mise.toml (gh) and renovate config (21de01c)
  • add yubikey and osx scratch docs, add age identity (bf7cfef)
  • agents: add commit discipline rule for atomic in-scope changes (a7f3d5d)
  • agents: document semantic commit convention in global memory (3dec285)
  • bootstrap: reload running zsh sessions after apply (77296f8)
  • brew: set HOMEBREW_NO_AUTO_UPDATE=1 in all brew scripts (c99d449)
  • brew: sort and deduplicate Brewfile entries (1f59e65)
  • chezmoi: clarify managed file removal workflow (407a92e)
  • chezmoi: clarify managed target removals (4a3ef0d)
  • disable fileMode tracking on Windows bootstrap (c6090ce)
  • enable set -x in Codespaces bootstrap for debug output (ea83645)
  • extract repo URL to variable for fork friendliness (0e8091c)
  • git: comment out gpgsign (de8785d)
  • gitignore: add .DS_Store (a4d833c)
  • normalize line endings (67ed7ab)
  • nvim: remove lazy-lock file (569fed2)
  • nvim: remove LazyVim example.lua stub (4dd9561)
  • nvim: remove stale neodev config (cc1cc28)
  • nvim: update lazy deps (e27ccfc)
  • nvim: update lazy lock (a627b8f)
  • opencode: add bd issue tracking snippet to global AGENTS.md (4757d0e)
  • opencode: add brew bundle fire-and-forget rule from session retrospective (3c83dab)
  • opencode: add context7 and grep.app MCP servers (16d8ceb)
  • opencode: add dotfiles and daily-note subagents, update AGENTS.md (3f87f14)
  • opencode: add memory subagent for AGENTS.md management (d91ab74)
  • opencode: add opencode-antigravity-auth plugin (c631aca)
  • opencode: add post-task retrospective and self-improvement rule to global memory (e19f5a8)
  • opencode: add sequential subagent delegation rule for session close (04ed139)
  • opencode: allow echo * commands without prompting (46faba5)
  • opencode: allow external_directory reads from temp dirs (d28c713)
  • opencode: allow ls * commands without prompting (5cab2cc)
  • opencode: allow mcp-atlassian read-only tools without prompting (26d1d4d)
  • opencode: clarify atomic shell steps (8e8daaf)
  • opencode: clarify atomic shell steps (158797d)
  • opencode: clarify immediate memory delegation (cb027a9)
  • opencode: clarify memory delegation follow-through (7ae1698)
  • opencode: clarify memory scope reconciliation (34090cb)
  • opencode: clarify shell command granularity (0631f00)
  • opencode: clarify subtask command isolation (62b68d5)
  • opencode: document beads-task-agent subagent in global and project AGENTS.md (84d1bcf)
  • opencode: generalize retrospective lesson rules (cf8df2d)
  • opencode: prefer call sites over generated types for SDK conventions (f9493fd)
  • opencode: refine retrospective lesson guidance (13564e9)
  • opencode: remove old retrospective command (c8a8193)
  • opencode: remove session-specific detail from brew bundle rule (0591334)
  • opencode: rename custom command retrospective -> retro (ab39b47)
  • opencode: strengthen retrospective rule to mandate @memory delegation (71d9d98)
  • opencode: strengthen SDK plugin rule with named examples and ground truth note (f556ae8)
  • opencode: thin global memory, extract retrospective and python-toolchain skills (9953d63)
  • p10k: disable gitstatus in Codespaces to skip gitstatusd download (2fdeb7b)
  • prewarm antidote plugin cache during bootstrap (6e882d9)
  • readme: clarify repo purpose and setup paths (c38ed93)
  • release main (#2) (7d65ae2)
  • release main (#3) (635fcb6)
  • release main (#4) (a43be42)
  • remove beads issue tracker (d4eaab5)
  • remove beads/bd integration across all configs and memory files (a230ed7)
  • remove kitty config, replaced by ghostty and wezterm (c88c1f3)
  • remove redundant oh-my-zsh install from bootstrap (f80c21a)
  • remove stale .gitignore entries (01aeefc)
  • skip bash install in Codespaces (96c0b56)
  • skip mise and neovim setup in Codespaces (d24ffca)
  • skip neovim and fd in Codespaces (c30bb55)
  • skip tmux clone plugins in Codespaces (ffef757)
  • sort brewfile (89f95a1)
  • stage pending local changes before brewfile refactor (1ce5941)
  • sync changes from ~/dotfiles working copy (fc7e639)
  • tighten opencode guardrails and shell policies (c85b5d4)
  • tmux: add passthrough, Ghostty/Kitty compat, fix resurrect plugin path (db9c31c)
  • update AGENTS.md for opencode.jsonc.tmpl rename (af36e31)
  • update badges (8caaf59)
  • update badges (8b4749a)
  • zsh: move tmux symlink creation to run_onchange script (9253a98)
  • zsh: set KITTY_WINDOW_ID and TIMG_PIXELATION for Ghostty kitty graphics compat (278f7a4)

Documentation

  • expand README with tool matrix and platform details, add SECURITY.md and docs/ (0ae4c97)
  • fix hyperlink order to wiki style in README (c68099c)
  • move SLSA badge inline with h1 (6133ac1)
  • readme: tighten WARNING callout wording (f77ae44)
  • restructure README, trim verbose sections, remove SECURITY.md and opencode-mcp.md (e6759ec)
  • simplify chezmoi alternative install path (d2780e9)
  • use gh attestation verify instead of slsa-verifier in README (349ec04)

1.0.0 (2026-03-23)

Features

  • add 7zz wrapper for encryption (b298f64)
  • add BadgeSort workflow and README markers (9d7c1bd)
  • add macOS Cursor settings template and darwin Library ignore guard (64772c8)
  • add native Windows support (d6f9bdd)
  • add release-please workflow with SLSA provenance for scripts and container (28d2649)
  • apply Catppuccin Mocha theme across terminal stack (c52f1ea)
  • brew-review: sort Brewfile after adding an entry (1ee9dfa)
  • brewfile: gate personal-only packages behind HOMEBREW_PRIVATE (31c6778)
  • brew: skip Codespaces-irrelevant packages with ENV["CODESPACES"] guards (2954ce3)
  • codespaces: add GHCR overlay fast path for dotfiles provisioning (7899f47)
  • codespaces: gate tmux/cloud plugins and brew bundle in Codespaces (01c2408)
  • extract Brewfile, add brew-review drift detection on chezmoi apply (ec3762c)
  • finicky: open Slack links in Chrome (8c6df84)
  • install: prefer Homebrew for chezmoi install, prompt to install brew if missing (d770b16)
  • install: verify SLSA provenance attestation before extracting overlay layers (e464bf5)
  • k9s: add Catppuccin Mocha theme (e9e2119)
  • kitty: add kitty terminal config (1175588)
  • mise: skip go/node/ruby global installs in Codespaces (380d485)
  • nvim: add wakatime plugin (ac70e46)
  • opencode: add $ARGUMENTS support to retro custom command (587e7fd)
  • opencode: add cc-safety-net, opencode-beads, and opencode-dcp plugins (f794861)
  • opencode: add integrity check to python-guard plugin (b5085b5)
  • opencode: add permission-persist plugin to save always-allow patterns (30ed141)
  • opencode: add retrospective custom command for post-task improvement loop (2c05312)
  • opencode: convert memory and dotfiles subagents to skills (2776343)
  • opencode: introduce wolf wrapper, simplify python-guard plugin (98b69ab)
  • opencode: replace python-guard regex with PATH-shim approach (7f068c8)
  • opencode: replace wolf command prefix with PATH-based shim injection (e287faf)
  • opencode: templatize config and enable chrome-devtools (89ee90a)
  • persist Cursor settings via chezmoi (a08920a)
  • zsh: add is-iterm2 function, gate iterm2 plugin on it (2bec546)

Bug Fixes

  • antidote,zsh: use zstyle for plugins file (4c2c4e4)
  • antitote: correct load order for autocompletions (001aee9)
  • bootstrap: fix set -eu, NVIM_PRE_INSTALLED init, scope pkill to Codespaces (1828d4d)
  • bootstrap: restore template-based Codespaces branch in brew bundle step (c2a9891)
  • brew-review: filter tap contents to installed packages only, add remove option (c003ee3)
  • brew,scripts: add 1password-cli, sync nvim conditionally (f55c089)
  • brew: add 1password for safari, rage, age-plugin-yubikey (26f28cc)
  • brew: add amethyst (828b987)
  • brew: add element, google-drive, ice, lm-studio, lulu, zoom, asitop (b16533c)
  • brew: add ruby-build deps (31f8931)
  • brew: add wakatime-cli (18b0b7c)
  • brew: add whisper, fantastical (819b15e)
  • brew: add work deps (c0c1f3b)
  • brew: add yubico authenticator (ed90b9a)
  • brew: ignore exit code for doctor (575e69b)
  • brew: remove bartender (336901c)
  • brew: remove deprecated no-lock, add sanity checks (c5738e0)
  • brew: use HOMEBREW_CODESPACES instead of CODESPACES in Brewfile (19d2188)
  • codespaces: exclude tmp dir from overlay tar extraction (bef0766)
  • codespaces: suppress tar permission errors on pre-existing dirs (2eb0eb3)
  • disable asitop (b52cc2c)
  • disable exit on unset vars (642284c)
  • disable mas (b2f5599)
  • disable pinentry-mac (9a68374)
  • gitconfig: update email, signing key (802c168)
  • gnupg: correct file permissions (67491e0)
  • gnupg: prevent re-insert prompt (4800fef)
  • gnupg: remove invalid enforce option, private scdaemon file (ab0d3f9)
  • gpg: harden and comment config (33ec99d)
  • install: pass IMAGE@DIGEST to crane blob instead of two args (fd314a1)
  • install: skip metadata updates on pre-existing dirs during overlay extraction (8acb793)
  • k9s: fill missing v0.50 skin fields with Mocha colors (d3cfb6d)
  • mise,zsh: enable auto uv (1f55bee)
  • mise/npm: add hrvst-cli (c530710)
  • mise: add go, node, ruby, remove neovim (87fa380)
  • mise: enable experimental (031a226)
  • nvim: sync plugins (c9029d5)
  • opencode: make wolf wrapping idempotent, drop double-wrap error (b18fe94)
  • opencode: narrow chezmoi config guard path checks (08aaf48)
  • opencode: remove stale retrospective command (76d6377)
  • opencode: run retro in current session (bcd923b)
  • profile: remove stale go and pyenv PATH entries (01021e2)
  • release: add bootstrap-sha to start changelog from chezmoi migration (121ddde)
  • release: bump actions to Node 24, skip overlay fast path during image build (7759db1)
  • release: lowercase image name for Docker tag compatibility (55b5188)
  • release: reset manifest to 0.0.0 after cleaning up failed releases (18e4c5c)
  • scripts: use correct gpg brew package (8aff363)
  • self-elevate in install.ps1 to support irm | iex one-liner (b46e158)
  • support one-liner install without local clone (4d8aa46)
  • tmux: correct default-shell to Homebrew zsh path (6513802)
  • use chezmoi apply on subsequent runs for idempotency (2147f67)
  • use default chezmoi source dir on Windows bootstrap (aac60b0)
  • zsh/p10k: remove slants (0facb90)
  • zsh: add brew privacy flags to env (17eddcf)
  • zsh: add chezmoi alias, remove notes alias (29704c0)
  • zsh: add fuck alias (d904497)
  • zsh: add nvim aliases (ad2d5b9)
  • zsh: ensure completions load (a8d09b7)
  • zsh: quote brew shellenv eval (edc4a9f)
  • zsh: remove duplicate and conflicting git aliases (0d12a28)

Miscellaneous

  • add .gitattributes and normalize all line endings to LF (1d1971e)
  • add k9s, nmap, tree, watch; expand opencode bash permissions; set BD_DIR; init beads dir (6dd527b)
  • add yubikey and osx scratch docs, add age identity (bf7cfef)
  • agents: add commit discipline rule for atomic in-scope changes (a7f3d5d)
  • agents: document semantic commit convention in global memory (3dec285)
  • bootstrap: reload running zsh sessions after apply (77296f8)
  • brew: set HOMEBREW_NO_AUTO_UPDATE=1 in all brew scripts (c99d449)
  • brew: sort and deduplicate Brewfile entries (1f59e65)
  • chezmoi: clarify managed file removal workflow (407a92e)
  • chezmoi: clarify managed target removals (4a3ef0d)
  • disable fileMode tracking on Windows bootstrap (c6090ce)
  • enable set -x in Codespaces bootstrap for debug output (ea83645)
  • extract repo URL to variable for fork friendliness (0e8091c)
  • git: comment out gpgsign (de8785d)
  • gitignore: add .DS_Store (a4d833c)
  • normalize line endings (67ed7ab)
  • nvim: remove lazy-lock file (569fed2)
  • nvim: remove LazyVim example.lua stub (4dd9561)
  • nvim: remove stale neodev config (cc1cc28)
  • nvim: update lazy deps (e27ccfc)
  • nvim: update lazy lock (a627b8f)
  • opencode: add bd issue tracking snippet to global AGENTS.md (4757d0e)
  • opencode: add brew bundle fire-and-forget rule from session retrospective (3c83dab)
  • opencode: add context7 and grep.app MCP servers (16d8ceb)
  • opencode: add dotfiles and daily-note subagents, update AGENTS.md (3f87f14)
  • opencode: add memory subagent for AGENTS.md management (d91ab74)
  • opencode: add opencode-antigravity-auth plugin (c631aca)
  • opencode: add post-task retrospective and self-improvement rule to global memory (e19f5a8)
  • opencode: add sequential subagent delegation rule for session close (04ed139)
  • opencode: allow echo * commands without prompting (46faba5)
  • opencode: allow external_directory reads from temp dirs (d28c713)
  • opencode: allow ls * commands without prompting (5cab2cc)
  • opencode: allow mcp-atlassian read-only tools without prompting (26d1d4d)
  • opencode: clarify atomic shell steps (8e8daaf)
  • opencode: clarify atomic shell steps (158797d)
  • opencode: clarify immediate memory delegation (cb027a9)
  • opencode: clarify memory delegation follow-through (7ae1698)
  • opencode: clarify memory scope reconciliation (34090cb)
  • opencode: clarify shell command granularity (0631f00)
  • opencode: clarify subtask command isolation (62b68d5)
  • opencode: document beads-task-agent subagent in global and project AGENTS.md (84d1bcf)
  • opencode: generalize retrospective lesson rules (cf8df2d)
  • opencode: prefer call sites over generated types for SDK conventions (f9493fd)
  • opencode: refine retrospective lesson guidance (13564e9)
  • opencode: remove old retrospective command (c8a8193)
  • opencode: remove session-specific detail from brew bundle rule (0591334)
  • opencode: rename custom command retrospective -> retro (ab39b47)
  • opencode: strengthen retrospective rule to mandate @memory delegation (71d9d98)
  • opencode: strengthen SDK plugin rule with named examples and ground truth note (f556ae8)
  • opencode: thin global memory, extract retrospective and python-toolchain skills (9953d63)
  • p10k: disable gitstatus in Codespaces to skip gitstatusd download (2fdeb7b)
  • prewarm antidote plugin cache during bootstrap (6e882d9)
  • readme: clarify repo purpose and setup paths (c38ed93)
  • release main (#2) (7d65ae2)
  • release main (#3) (635fcb6)
  • remove beads issue tracker (d4eaab5)
  • remove beads/bd integration across all configs and memory files (a230ed7)
  • remove kitty config, replaced by ghostty and wezterm (c88c1f3)
  • remove redundant oh-my-zsh install from bootstrap (f80c21a)
  • remove stale .gitignore entries (01aeefc)
  • skip bash install in Codespaces (96c0b56)
  • skip mise and neovim setup in Codespaces (d24ffca)
  • skip neovim and fd in Codespaces (c30bb55)
  • skip tmux clone plugins in Codespaces (ffef757)
  • sort brewfile (89f95a1)
  • stage pending local changes before brewfile refactor (1ce5941)
  • sync changes from ~/dotfiles working copy (fc7e639)
  • tighten opencode guardrails and shell policies (c85b5d4)
  • tmux: add passthrough, Ghostty/Kitty compat, fix resurrect plugin path (db9c31c)
  • update AGENTS.md for opencode.jsonc.tmpl rename (af36e31)
  • update badges (8caaf59)
  • update badges (8b4749a)
  • zsh: move tmux symlink creation to run_onchange script (9253a98)
  • zsh: set KITTY_WINDOW_ID and TIMG_PIXELATION for Ghostty kitty graphics compat (278f7a4)

Documentation

  • expand README with tool matrix and platform details, add SECURITY.md and docs/ (0ae4c97)
  • fix hyperlink order to wiki style in README (c68099c)
  • move SLSA badge inline with h1 (6133ac1)
  • restructure README, trim verbose sections, remove SECURITY.md and opencode-mcp.md (e6759ec)
  • simplify chezmoi alternative install path (d2780e9)
  • use gh attestation verify instead of slsa-verifier in README (349ec04)

1.1.0 (2026-03-23)

Features

  • add 7zz wrapper for encryption (b298f64)
  • add BadgeSort workflow and README markers (9d7c1bd)
  • add macOS Cursor settings template and darwin Library ignore guard (64772c8)
  • add native Windows support (d6f9bdd)
  • add release-please workflow with SLSA provenance for scripts and container (28d2649)
  • apply Catppuccin Mocha theme across terminal stack (c52f1ea)
  • brew-review: sort Brewfile after adding an entry (1ee9dfa)
  • brewfile: gate personal-only packages behind HOMEBREW_PRIVATE (31c6778)
  • brew: skip Codespaces-irrelevant packages with ENV["CODESPACES"] guards (2954ce3)
  • codespaces: add GHCR overlay fast path for dotfiles provisioning (7899f47)
  • codespaces: gate tmux/cloud plugins and brew bundle in Codespaces (01c2408)
  • extract Brewfile, add brew-review drift detection on chezmoi apply (ec3762c)
  • finicky: open Slack links in Chrome (8c6df84)
  • install: prefer Homebrew for chezmoi install, prompt to install brew if missing (d770b16)
  • install: verify SLSA provenance attestation before extracting overlay layers (e464bf5)
  • k9s: add Catppuccin Mocha theme (e9e2119)
  • kitty: add kitty terminal config (1175588)
  • mise: skip go/node/ruby global installs in Codespaces (380d485)
  • nvim: add wakatime plugin (ac70e46)
  • opencode: add $ARGUMENTS support to retro custom command (587e7fd)
  • opencode: add cc-safety-net, opencode-beads, and opencode-dcp plugins (f794861)
  • opencode: add integrity check to python-guard plugin (b5085b5)
  • opencode: add permission-persist plugin to save always-allow patterns (30ed141)
  • opencode: add retrospective custom command for post-task improvement loop (2c05312)
  • opencode: convert memory and dotfiles subagents to skills (2776343)
  • opencode: introduce wolf wrapper, simplify python-guard plugin (98b69ab)
  • opencode: replace python-guard regex with PATH-shim approach (7f068c8)
  • opencode: replace wolf command prefix with PATH-based shim injection (e287faf)
  • opencode: templatize config and enable chrome-devtools (89ee90a)
  • persist Cursor settings via chezmoi (a08920a)
  • zsh: add is-iterm2 function, gate iterm2 plugin on it (2bec546)

Bug Fixes

  • antidote,zsh: use zstyle for plugins file (4c2c4e4)
  • antitote: correct load order for autocompletions (001aee9)
  • bootstrap: fix set -eu, NVIM_PRE_INSTALLED init, scope pkill to Codespaces (1828d4d)
  • bootstrap: restore template-based Codespaces branch in brew bundle step (c2a9891)
  • brew-review: filter tap contents to installed packages only, add remove option (c003ee3)
  • brew,scripts: add 1password-cli, sync nvim conditionally (f55c089)
  • brew: add 1password for safari, rage, age-plugin-yubikey (26f28cc)
  • brew: add amethyst (828b987)
  • brew: add element, google-drive, ice, lm-studio, lulu, zoom, asitop (b16533c)
  • brew: add ruby-build deps (31f8931)
  • brew: add wakatime-cli (18b0b7c)
  • brew: add whisper, fantastical (819b15e)
  • brew: add work deps (c0c1f3b)
  • brew: add yubico authenticator (ed90b9a)
  • brew: ignore exit code for doctor (575e69b)
  • brew: remove bartender (336901c)
  • brew: remove deprecated no-lock, add sanity checks (c5738e0)
  • brew: use HOMEBREW_CODESPACES instead of CODESPACES in Brewfile (19d2188)
  • codespaces: exclude tmp dir from overlay tar extraction (bef0766)
  • codespaces: suppress tar permission errors on pre-existing dirs (2eb0eb3)
  • disable asitop (b52cc2c)
  • disable exit on unset vars (642284c)
  • disable mas (b2f5599)
  • disable pinentry-mac (9a68374)
  • gitconfig: update email, signing key (802c168)
  • gnupg: correct file permissions (67491e0)
  • gnupg: prevent re-insert prompt (4800fef)
  • gnupg: remove invalid enforce option, private scdaemon file (ab0d3f9)
  • gpg: harden and comment config (33ec99d)
  • install: pass IMAGE@DIGEST to crane blob instead of two args (fd314a1)
  • install: skip metadata updates on pre-existing dirs during overlay extraction (8acb793)
  • k9s: fill missing v0.50 skin fields with Mocha colors (d3cfb6d)
  • mise,zsh: enable auto uv (1f55bee)
  • mise/npm: add hrvst-cli (c530710)
  • mise: add go, node, ruby, remove neovim (87fa380)
  • mise: enable experimental (031a226)
  • nvim: sync plugins (c9029d5)
  • opencode: make wolf wrapping idempotent, drop double-wrap error (b18fe94)
  • opencode: narrow chezmoi config guard path checks (08aaf48)
  • opencode: remove stale retrospective command (76d6377)
  • opencode: run retro in current session (bcd923b)
  • profile: remove stale go and pyenv PATH entries (01021e2)
  • release: add bootstrap-sha to start changelog from chezmoi migration (121ddde)
  • release: lowercase image name for Docker tag compatibility (55b5188)
  • scripts: use correct gpg brew package (8aff363)
  • self-elevate in install.ps1 to support irm | iex one-liner (b46e158)
  • support one-liner install without local clone (4d8aa46)
  • tmux: correct default-shell to Homebrew zsh path (6513802)
  • use chezmoi apply on subsequent runs for idempotency (2147f67)
  • use default chezmoi source dir on Windows bootstrap (aac60b0)
  • zsh/p10k: remove slants (0facb90)
  • zsh: add brew privacy flags to env (17eddcf)
  • zsh: add chezmoi alias, remove notes alias (29704c0)
  • zsh: add fuck alias (d904497)
  • zsh: add nvim aliases (ad2d5b9)
  • zsh: ensure completions load (a8d09b7)
  • zsh: quote brew shellenv eval (edc4a9f)
  • zsh: remove duplicate and conflicting git aliases (0d12a28)

Miscellaneous

  • add .gitattributes and normalize all line endings to LF (1d1971e)
  • add k9s, nmap, tree, watch; expand opencode bash permissions; set BD_DIR; init beads dir (6dd527b)
  • add yubikey and osx scratch docs, add age identity (bf7cfef)
  • agents: add commit discipline rule for atomic in-scope changes (a7f3d5d)
  • agents: document semantic commit convention in global memory (3dec285)
  • bootstrap: reload running zsh sessions after apply (77296f8)
  • brew: set HOMEBREW_NO_AUTO_UPDATE=1 in all brew scripts (c99d449)
  • brew: sort and deduplicate Brewfile entries (1f59e65)
  • chezmoi: clarify managed file removal workflow (407a92e)
  • chezmoi: clarify managed target removals (4a3ef0d)
  • disable fileMode tracking on Windows bootstrap (c6090ce)
  • enable set -x in Codespaces bootstrap for debug output (ea83645)
  • extract repo URL to variable for fork friendliness (0e8091c)
  • git: comment out gpgsign (de8785d)
  • gitignore: add .DS_Store (a4d833c)
  • normalize line endings (67ed7ab)
  • nvim: remove lazy-lock file (569fed2)
  • nvim: remove LazyVim example.lua stub (4dd9561)
  • nvim: remove stale neodev config (cc1cc28)
  • nvim: update lazy deps (e27ccfc)
  • nvim: update lazy lock (a627b8f)
  • opencode: add bd issue tracking snippet to global AGENTS.md (4757d0e)
  • opencode: add brew bundle fire-and-forget rule from session retrospective (3c83dab)
  • opencode: add context7 and grep.app MCP servers (16d8ceb)
  • opencode: add dotfiles and daily-note subagents, update AGENTS.md (3f87f14)
  • opencode: add memory subagent for AGENTS.md management (d91ab74)
  • opencode: add opencode-antigravity-auth plugin (c631aca)
  • opencode: add post-task retrospective and self-improvement rule to global memory (e19f5a8)
  • opencode: add sequential subagent delegation rule for session close (04ed139)
  • opencode: allow echo * commands without prompting (46faba5)
  • opencode: allow external_directory reads from temp dirs (d28c713)
  • opencode: allow ls * commands without prompting (5cab2cc)
  • opencode: allow mcp-atlassian read-only tools without prompting (26d1d4d)
  • opencode: clarify atomic shell steps (8e8daaf)
  • opencode: clarify atomic shell steps (158797d)
  • opencode: clarify immediate memory delegation (cb027a9)
  • opencode: clarify memory delegation follow-through (7ae1698)
  • opencode: clarify memory scope reconciliation (34090cb)
  • opencode: clarify shell command granularity (0631f00)
  • opencode: clarify subtask command isolation (62b68d5)
  • opencode: document beads-task-agent subagent in global and project AGENTS.md (84d1bcf)
  • opencode: generalize retrospective lesson rules (cf8df2d)
  • opencode: prefer call sites over generated types for SDK conventions (f9493fd)
  • opencode: refine retrospective lesson guidance (13564e9)
  • opencode: remove old retrospective command (c8a8193)
  • opencode: remove session-specific detail from brew bundle rule (0591334)
  • opencode: rename custom command retrospective -> retro (ab39b47)
  • opencode: strengthen retrospective rule to mandate @memory delegation (71d9d98)
  • opencode: strengthen SDK plugin rule with named examples and ground truth note (f556ae8)
  • opencode: thin global memory, extract retrospective and python-toolchain skills (9953d63)
  • p10k: disable gitstatus in Codespaces to skip gitstatusd download (2fdeb7b)
  • prewarm antidote plugin cache during bootstrap (6e882d9)
  • readme: clarify repo purpose and setup paths (c38ed93)
  • release main (#2) (7d65ae2)
  • remove beads issue tracker (d4eaab5)
  • remove beads/bd integration across all configs and memory files (a230ed7)
  • remove kitty config, replaced by ghostty and wezterm (c88c1f3)
  • remove redundant oh-my-zsh install from bootstrap (f80c21a)
  • remove stale .gitignore entries (01aeefc)
  • skip bash install in Codespaces (96c0b56)
  • skip mise and neovim setup in Codespaces (d24ffca)
  • skip neovim and fd in Codespaces (c30bb55)
  • skip tmux clone plugins in Codespaces (ffef757)
  • sort brewfile (89f95a1)
  • stage pending local changes before brewfile refactor (1ce5941)
  • sync changes from ~/dotfiles working copy (fc7e639)
  • tighten opencode guardrails and shell policies (c85b5d4)
  • tmux: add passthrough, Ghostty/Kitty compat, fix resurrect plugin path (db9c31c)
  • update AGENTS.md for opencode.jsonc.tmpl rename (af36e31)
  • update badges (8caaf59)
  • update badges (8b4749a)
  • zsh: move tmux symlink creation to run_onchange script (9253a98)
  • zsh: set KITTY_WINDOW_ID and TIMG_PIXELATION for Ghostty kitty graphics compat (278f7a4)

Documentation

  • expand README with tool matrix and platform details, add SECURITY.md and docs/ (0ae4c97)
  • fix hyperlink order to wiki style in README (c68099c)
  • move SLSA badge inline with h1 (6133ac1)
  • restructure README, trim verbose sections, remove SECURITY.md and opencode-mcp.md (e6759ec)
  • simplify chezmoi alternative install path (d2780e9)
  • use gh attestation verify instead of slsa-verifier in README (349ec04)

1.0.0 (2026-03-23)

Features

  • add 7zz wrapper for encryption (b298f64)
  • add BadgeSort workflow and README markers (9d7c1bd)
  • add macOS Cursor settings template and darwin Library ignore guard (64772c8)
  • add native Windows support (d6f9bdd)
  • add release-please workflow with SLSA provenance for scripts and container (28d2649)
  • apply Catppuccin Mocha theme across terminal stack (c52f1ea)
  • brew-review: sort Brewfile after adding an entry (1ee9dfa)
  • brewfile: gate personal-only packages behind HOMEBREW_PRIVATE (31c6778)
  • brew: skip Codespaces-irrelevant packages with ENV["CODESPACES"] guards (2954ce3)
  • codespaces: add GHCR overlay fast path for dotfiles provisioning (7899f47)
  • codespaces: gate tmux/cloud plugins and brew bundle in Codespaces (01c2408)
  • extract Brewfile, add brew-review drift detection on chezmoi apply (ec3762c)
  • finicky: open Slack links in Chrome (8c6df84)
  • install: prefer Homebrew for chezmoi install, prompt to install brew if missing (d770b16)
  • install: verify SLSA provenance attestation before extracting overlay layers (e464bf5)
  • k9s: add Catppuccin Mocha theme (e9e2119)
  • kitty: add kitty terminal config (1175588)
  • mise: skip go/node/ruby global installs in Codespaces (380d485)
  • nvim: add wakatime plugin (ac70e46)
  • opencode: add $ARGUMENTS support to retro custom command (587e7fd)
  • opencode: add cc-safety-net, opencode-beads, and opencode-dcp plugins (f794861)
  • opencode: add integrity check to python-guard plugin (b5085b5)
  • opencode: add permission-persist plugin to save always-allow patterns (30ed141)
  • opencode: add retrospective custom command for post-task improvement loop (2c05312)
  • opencode: convert memory and dotfiles subagents to skills (2776343)
  • opencode: introduce wolf wrapper, simplify python-guard plugin (98b69ab)
  • opencode: replace python-guard regex with PATH-shim approach (7f068c8)
  • opencode: replace wolf command prefix with PATH-based shim injection (e287faf)
  • opencode: templatize config and enable chrome-devtools (89ee90a)
  • persist Cursor settings via chezmoi (a08920a)
  • zsh: add is-iterm2 function, gate iterm2 plugin on it (2bec546)

Bug Fixes

  • antidote,zsh: use zstyle for plugins file (4c2c4e4)
  • antitote: correct load order for autocompletions (001aee9)
  • bootstrap: fix set -eu, NVIM_PRE_INSTALLED init, scope pkill to Codespaces (1828d4d)
  • bootstrap: restore template-based Codespaces branch in brew bundle step (c2a9891)
  • brew-review: filter tap contents to installed packages only, add remove option (c003ee3)
  • brew,scripts: add 1password-cli, sync nvim conditionally (f55c089)
  • brew: add 1password for safari, rage, age-plugin-yubikey (26f28cc)
  • brew: add amethyst (828b987)
  • brew: add element, google-drive, ice, lm-studio, lulu, zoom, asitop (b16533c)
  • brew: add ruby-build deps (31f8931)
  • brew: add wakatime-cli (18b0b7c)
  • brew: add whisper, fantastical (819b15e)
  • brew: add work deps (c0c1f3b)
  • brew: add yubico authenticator (ed90b9a)
  • brew: ignore exit code for doctor (575e69b)
  • brew: remove bartender (336901c)
  • brew: remove deprecated no-lock, add sanity checks (c5738e0)
  • brew: use HOMEBREW_CODESPACES instead of CODESPACES in Brewfile (19d2188)
  • codespaces: exclude tmp dir from overlay tar extraction (bef0766)
  • codespaces: suppress tar permission errors on pre-existing dirs (2eb0eb3)
  • disable asitop (b52cc2c)
  • disable exit on unset vars (642284c)
  • disable mas (b2f5599)
  • disable pinentry-mac (9a68374)
  • gitconfig: update email, signing key (802c168)
  • gnupg: correct file permissions (67491e0)
  • gnupg: prevent re-insert prompt (4800fef)
  • gnupg: remove invalid enforce option, private scdaemon file (ab0d3f9)
  • gpg: harden and comment config (33ec99d)
  • install: pass IMAGE@DIGEST to crane blob instead of two args (fd314a1)
  • install: skip metadata updates on pre-existing dirs during overlay extraction (8acb793)
  • k9s: fill missing v0.50 skin fields with Mocha colors (d3cfb6d)
  • mise,zsh: enable auto uv (1f55bee)
  • mise/npm: add hrvst-cli (c530710)
  • mise: add go, node, ruby, remove neovim (87fa380)
  • mise: enable experimental (031a226)
  • nvim: sync plugins (c9029d5)
  • opencode: make wolf wrapping idempotent, drop double-wrap error (b18fe94)
  • opencode: narrow chezmoi config guard path checks (08aaf48)
  • opencode: remove stale retrospective command (76d6377)
  • opencode: run retro in current session (bcd923b)
  • profile: remove stale go and pyenv PATH entries (01021e2)
  • release: add bootstrap-sha to start changelog from chezmoi migration (121ddde)
  • scripts: use correct gpg brew package (8aff363)
  • self-elevate in install.ps1 to support irm | iex one-liner (b46e158)
  • support one-liner install without local clone (4d8aa46)
  • tmux: correct default-shell to Homebrew zsh path (6513802)
  • use chezmoi apply on subsequent runs for idempotency (2147f67)
  • use default chezmoi source dir on Windows bootstrap (aac60b0)
  • zsh/p10k: remove slants (0facb90)
  • zsh: add brew privacy flags to env (17eddcf)
  • zsh: add chezmoi alias, remove notes alias (29704c0)
  • zsh: add fuck alias (d904497)
  • zsh: add nvim aliases (ad2d5b9)
  • zsh: ensure completions load (a8d09b7)
  • zsh: quote brew shellenv eval (edc4a9f)
  • zsh: remove duplicate and conflicting git aliases (0d12a28)

Miscellaneous

  • add .gitattributes and normalize all line endings to LF (1d1971e)
  • add k9s, nmap, tree, watch; expand opencode bash permissions; set BD_DIR; init beads dir (6dd527b)
  • add yubikey and osx scratch docs, add age identity (bf7cfef)
  • agents: add commit discipline rule for atomic in-scope changes (a7f3d5d)
  • agents: document semantic commit convention in global memory (3dec285)
  • bootstrap: reload running zsh sessions after apply (77296f8)
  • brew: set HOMEBREW_NO_AUTO_UPDATE=1 in all brew scripts (c99d449)
  • brew: sort and deduplicate Brewfile entries (1f59e65)
  • chezmoi: clarify managed file removal workflow (407a92e)
  • chezmoi: clarify managed target removals (4a3ef0d)
  • disable fileMode tracking on Windows bootstrap (c6090ce)
  • enable set -x in Codespaces bootstrap for debug output (ea83645)
  • extract repo URL to variable for fork friendliness (0e8091c)
  • git: comment out gpgsign (de8785d)
  • gitignore: add .DS_Store (a4d833c)
  • normalize line endings (67ed7ab)
  • nvim: remove lazy-lock file (569fed2)
  • nvim: remove LazyVim example.lua stub (4dd9561)
  • nvim: remove stale neodev config (cc1cc28)
  • nvim: update lazy deps (e27ccfc)
  • nvim: update lazy lock (a627b8f)
  • opencode: add bd issue tracking snippet to global AGENTS.md (4757d0e)
  • opencode: add brew bundle fire-and-forget rule from session retrospective (3c83dab)
  • opencode: add context7 and grep.app MCP servers (16d8ceb)
  • opencode: add dotfiles and daily-note subagents, update AGENTS.md (3f87f14)
  • opencode: add memory subagent for AGENTS.md management (d91ab74)
  • opencode: add opencode-antigravity-auth plugin (c631aca)
  • opencode: add post-task retrospective and self-improvement rule to global memory (e19f5a8)
  • opencode: add sequential subagent delegation rule for session close (04ed139)
  • opencode: allow echo * commands without prompting (46faba5)
  • opencode: allow external_directory reads from temp dirs (d28c713)
  • opencode: allow ls * commands without prompting (5cab2cc)
  • opencode: allow mcp-atlassian read-only tools without prompting (26d1d4d)
  • opencode: clarify atomic shell steps (8e8daaf)
  • opencode: clarify atomic shell steps (158797d)
  • opencode: clarify immediate memory delegation (cb027a9)
  • opencode: clarify memory delegation follow-through (7ae1698)
  • opencode: clarify memory scope reconciliation (34090cb)
  • opencode: clarify shell command granularity (0631f00)
  • opencode: clarify subtask command isolation (62b68d5)
  • opencode: document beads-task-agent subagent in global and project AGENTS.md (84d1bcf)
  • opencode: generalize retrospective lesson rules (cf8df2d)
  • opencode: prefer call sites over generated types for SDK conventions (f9493fd)
  • opencode: refine retrospective lesson guidance (13564e9)
  • opencode: remove old retrospective command (c8a8193)
  • opencode: remove session-specific detail from brew bundle rule (0591334)
  • opencode: rename custom command retrospective -> retro (ab39b47)
  • opencode: strengthen retrospective rule to mandate @memory delegation (71d9d98)
  • opencode: strengthen SDK plugin rule with named examples and ground truth note (f556ae8)
  • opencode: thin global memory, extract retrospective and python-toolchain skills (9953d63)
  • p10k: disable gitstatus in Codespaces to skip gitstatusd download (2fdeb7b)
  • prewarm antidote plugin cache during bootstrap (6e882d9)
  • readme: clarify repo purpose and setup paths (c38ed93)
  • remove beads issue tracker (d4eaab5)
  • remove beads/bd integration across all configs and memory files (a230ed7)
  • remove kitty config, replaced by ghostty and wezterm (c88c1f3)
  • remove redundant oh-my-zsh install from bootstrap (f80c21a)
  • remove stale .gitignore entries (01aeefc)
  • skip bash install in Codespaces (96c0b56)
  • skip mise and neovim setup in Codespaces (d24ffca)
  • skip neovim and fd in Codespaces (c30bb55)
  • skip tmux clone plugins in Codespaces (ffef757)
  • sort brewfile (89f95a1)
  • stage pending local changes before brewfile refactor (1ce5941)
  • sync changes from ~/dotfiles working copy (fc7e639)
  • tighten opencode guardrails and shell policies (c85b5d4)
  • tmux: add passthrough, Ghostty/Kitty compat, fix resurrect plugin path (db9c31c)
  • update AGENTS.md for opencode.jsonc.tmpl rename (af36e31)
  • update badges (8caaf59)
  • update badges (8b4749a)
  • zsh: move tmux symlink creation to run_onchange script (9253a98)
  • zsh: set KITTY_WINDOW_ID and TIMG_PIXELATION for Ghostty kitty graphics compat (278f7a4)

Documentation

  • expand README with tool matrix and platform details, add SECURITY.md and docs/ (0ae4c97)
  • fix hyperlink order to wiki style in README (c68099c)
  • move SLSA badge inline with h1 (6133ac1)
  • restructure README, trim verbose sections, remove SECURITY.md and opencode-mcp.md (e6759ec)
  • simplify chezmoi alternative install path (d2780e9)
  • use gh attestation verify instead of slsa-verifier in README (349ec04)