Dotfiles

Appearance

Quality gates ​

just is the shared repo validation entrypoint.

Standard check ​

Run before packaging or committing:

bash
just check

On Unix-like hosts this covers formatting, shell linting, source-only render smoke tests, whitespace checks, and secret scanning. Source-only render smoke tests cover WSL, CachyOS, droplet, and Windows fixture profiles without applying dotfiles.

Focused checks ​

Use focused checks when changing a narrow area:

bash
python3 scripts/validate-codex-config.py
python3 scripts/check-mise-policy.py --source-only
python3 scripts/validate-editor-config-render.py
python3 tests/test_codex_hooks.py
scripts/smoke-test.sh --source-only
pnpm docs:build

Droplet validation is source-only by default: it asserts the rendered lane omits WSL bridge, Windows, GUI editor, and CachyOS desktop files, and statically checks that droplet bootstrap and upgrade paths do not run broad mise commands or terminate processes automatically.

Shell script edits should stay clean under:

bash
shfmt -d scripts/*.sh home/dot_local/bin/executable_*
shellcheck scripts/*.sh home/dot_local/bin/executable_*

Optional checks ​

For broad prose, metadata, or docs changes:

bash
just lint-extra
just docs-check
just actions-lint

After applying dotfiles on a host, use the Codex smoke-test prompt for a read-only post-apply inspection that avoids printing secrets, auth files, session files, or shell history.

For shell-helper changes on Unix-like hosts:

bash
just shell-tests

On native Windows, PowerShell linting is explicit and optional:

powershell
just windows-lint

windows-lint runs PSScriptAnalyzer when the module is installed. If the module is absent, it reports the install command and exits without changing the host.