Overview

This repository sets up one Mac so coding agents can work on it unattended. A human rarely opens a terminal here, so there is no prompt framework, no shell plugins, and nothing that asks for approval mid-run.

What it does

• chezmoi places every file under ~ and runs the bootstrap scripts.
• A Brewfile declares every Homebrew formula and app.
• mise declares every CLI tool and language runtime.
• Homebrew bash is the login shell. See Shell.
• Git signs commits with a local SSH key, and SSH uses Apple’s agent. See Git and SSH.
• Claude Code, Codex, and VS Code get their settings from the repo. See Agents.
• Secrets live in one untracked file that the shell sources. Nothing calls a password manager at render time.

Scope

macOS only, Apple silicon. Earlier versions of this repo targeted Windows and Linux too; that support was removed in October 2026 along with fish, zsh, Ansible, and Karabiner. The installer still serves other people’s repos on any platform.

Rules the repo follows

1. No OS or hostname branching in templates. A template may use the home directory and nothing else.
2. Secrets never render from a template. They come from ~/.config/secrets.env at shell start.
3. Adding a package means editing the Brewfile or the mise config, then chezmoi apply.
4. Files that apps rewrite on their own (VS Code settings, mise config after mise use) are edited in place and pulled back with chezmoi re-add.