This is a public macOS bootstrap framework. Keep changes portable and keep machine identity, credentials, app state, and project checkouts local.
Install the prerequisites and clone the repository:
brew install git gh
gh auth login
gh repo clone uinaf/dotfiles ~/projects/dotfiles
cd ~/projects/dotfiles
./scripts/bootstrap/brew-bundle.sh workstation
mise trust
mise install
mise run verify:domain staticUse the Bootstrap guide for a different profile or a Mac that does not yet have Homebrew, Git, or GitHub CLI.
List the domains and run the focused check that owns the change:
mise run verify:domain config # example; select the owning domain
mise run verify:fast
mise run verifyverify:fastruns every deterministic check in parallel; CI runs the same graph.verifyalso runs the local full-history secret scan.- Live bootstrap checks inspect the active home directory. Run them only when the current machine should satisfy that profile.
- Packages:
Brewfile,Brewfile.developer, andBrewfile.<profile>. - Dotfiles: tracked source under
chezmoi/. - Repo tasks:
mise.toml; machine runtime pins:chezmoi/private_dot_config/mise/config.toml.tmpl. - Global agent setup:
scripts/agents/; repository-local skills remain with their consumer. - Setup behavior:
scripts/bootstrap/; verification and audit behavior:scripts/verify/andscripts/audit/.
Read the matching guide from the documentation map before changing a contract. Keep one-machine preferences local or in a fork.
- Use Conventional Commits. Commit types drive the tag-only release policy in GitHub pipelines.
- Keep pull requests focused and include the verification performed.
- Update the owning guide when a command, path, profile, or security boundary changes.