Skip to content

chore(sync): 2026-05-07 batch - Brewfile + SSH privacy + codex switch#75

Merged
tieubao merged 2 commits intomainfrom
chore/sync-2026-05-07
May 7, 2026
Merged

chore(sync): 2026-05-07 batch - Brewfile + SSH privacy + codex switch#75
tieubao merged 2 commits intomainfrom
chore/sync-2026-05-07

Conversation

@tieubao
Copy link
Copy Markdown
Member

@tieubao tieubao commented May 7, 2026

Summary

  • Brewfile core: drop 8 stale brews + 1 cask not installed on Hans-Air-M4 (ffmpeg, go, librsvg, node, protobuf, ripgrep, sqlite, terraform, codex); add 5 generic dev tools (bats-core, mosh, pandoc, rust, wireguard-tools).
  • SSH privacy gate (PR feat(/dotfiles-sync): privacy gate for SSH fragments + 1P-backup check #72 follow-through): rename trading-egress-tokyo.local; create 1P/Trading Secure Note for egress.local (Tailscale alias). All on-disk SSH fragments now follow privacy convention with 1P restore copies.
  • codex switch: uninstall npm @openai/codex (0.1.2504172351, ~13mo stale), install Homebrew cask codex (0.128.0). Re-add cask "codex" to Brewfile core. Resolves chezmoi apply brew bundle collision at /opt/homebrew/bin/codex.
  • VS Code extensions: sync extensions.txt to current installed (5 added: docker.docker, dwarvesf.md-ar-ext, github.copilot-chat, ms-vsliveshare.vsliveshare, ocamllabs.ocaml-platform; 1 removed: openai.chatgpt).
  • Sync log: entry @ Hans Air M4.

Local additions and skill suppression handled in ~/.Brewfile.local and ~/.config/dotfiles/skills.local (machine-specific, not committed).

Test plan

  • chezmoi execute-template < home/dot_Brewfile.tmpl renders OK
  • chezmoi apply ran successfully (brew bundle had a one-time codex collision warning, expected; resolved by this PR)
  • All on-disk SSH fragments .local + 1P-backed (verified via op item list)
  • ssh egress and ssh trading-egress-tokyo both resolve correctly
  • codex 0.128.0 functional via brew cask
  • No drift after sync (stale brews/casks: 0; untracked extensions: 0)
  • Lint: shellcheck (9 files), fish syntax (27 files) - all OK

🤖 Generated with Claude Code

tieubao and others added 2 commits May 7, 2026 09:27
…ompletion

- SSH: trading-egress-tokyo renamed to .local; egress.local backed up to
  1P/Trading. All on-disk fragments now follow privacy convention.
- Brewfile core: drop 8 stale brews + 1 cask not installed on this Air;
  add 5 generic dev tools (bats-core, mosh, pandoc, rust, wireguard-tools).
- VS Code: sync extensions.txt to current installed (5 added, 1 removed).
- Local additions and skill suppression handled in ~/.Brewfile.local
  and ~/.config/dotfiles/skills.local (not committed).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Replaces the npm-installed codex CLI (was symlinked at /opt/homebrew/bin/codex
to node_modules/@openai/codex from Apr 2025, ~13 months stale at 0.1.2504172351)
with the Homebrew cask (0.128.0, current).

Why: npm install collided with cask install path and broke `chezmoi apply`'s
brew bundle step. Settling on one source of truth (brew) for the codex CLI.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@tieubao tieubao merged commit ace51a4 into main May 7, 2026
2 checks passed
@tieubao tieubao deleted the chore/sync-2026-05-07 branch May 7, 2026 02:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant