DotfilesSecure. Fast. Modern.

One repository for a shell, terminal, editor, and AI-agent setup — symlinked into place with dotter and validated in CI on every change.

🚀
Benchmarked Startup
Shell startup is measured with hyperfine on every change and compared against a committed baseline — a regression past the threshold fails CI.
⚡
Cross-Platform Native
The same configuration deploys on Windows, macOS, and Linux. PowerShell, Bash, Zsh, and Nushell share one set of aliases and functions, so your workflow travels with you.
🛠
One Toolchain
Every tool is pinned and installed by mise — Neovim (vim.pack), WezTerm, Starship, Zoxide, Yazi — and the same pinned versions run locally and in CI.
🔐
Security First
Every push runs TruffleHog secret scanning, Trivy, and ClamAV. Agent tools follow default-deny permission rules that keep credentials, SSH keys, and kubeconfigs unreadable.
🧩
Modular Architecture
Configuration is split into small per-topic files — shell logic lives in shell.d fragments, one directory per tool — so a change touches exactly one file.
🎨
Aesthetic Consistency
One theme family (Catppuccin/Gruvbox) is applied across the shell, editor, terminal, and multiplexer, with light and dark variants kept in sync.

Benchmarked Startup