kyber

.env.example

@@ -2,3 +2,4 @@
 # Copy to home-manager/.env and provide real values. The .env file stays local.
 MY_SECRET=replace-me
 # GITHUB_TOKEN=ghp_your_token_here
+CLIPROXY_MANAGEMENT_PASSWORD=your-management-key-here

.github/workflows/shell.yml

@@ -0,0 +1,48 @@
+name: Shell
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.sha }}
+  cancel-in-progress: true
+jobs:
+  shellspec:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Install Nix
+        uses: cachix/install-nix-action@v31
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run ShellSpec Tests (Dev Shell)
+        run: make shell-test-dev
+  shellcheck:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Install Nix
+        uses: cachix/install-nix-action@v31
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run ShellCheck (Dev Shell)
+        run: make shell-check-dev
+  shell-check:
+    if: always()
+    needs:
+      - shellspec
+      - shellcheck
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - name: Alls Green
+        uses: re-actors/alls-green@release/v1
+        with:
+          jobs: ${{ toJSON(needs) }}

.shellspec

@@ -0,0 +1,3 @@
+--require spec_helper
+--format progress
+--shell bash

Makefile

@@ -135,10 +135,10 @@ setup: nix-setup ## Basic Nix setup (alias for nix-setup).
 setup-dev: nix-setup git-submodule-sync shell-install ## Set up local development environment (Nix + submodules + shell).
 
 .PHONY: switch
-switch: nix-switch ## Apply Nix configuration and restart launchd agents.
+switch: nix-switch launchctl ## Apply Nix configuration and restart launchd agents.
 
 .PHONY: test
-test: neovim-test
+test: neovim-test shell-test ## Run all tests (neovim + shell).
 
 .PHONY: update
 update: nix-update shell-update neovim-update ## Update Nix flake and configurations.
@@ -202,8 +202,8 @@ devenv-cli: ## Build the packaged devenv CLI binary.
 .PHONY: nix-install
 nix-install: ## Install Nix if not already installed.
 	@if [ "$(NIX_ENV)" = "not_found" ]; then \
-		echo "🚀 Installing Nix environment for $(NIX_CONFIG_TYPE) on $(OS) $(ARCH) for USER=$(NIX_USERNAME)"; \
-		curl -L https://nixos.org/nix/install | sh; \
+		echo "🚀 Installing Determinate Nix environment for $(NIX_CONFIG_TYPE) on $(OS) $(ARCH) for USER=$(NIX_USERNAME)"; \
+		curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install; \
 	fi
 	@echo "✅ Nix environment installed!"
 
@@ -624,3 +624,25 @@ git-submodule-sync: ## Sync and update git submodules.
 	@git submodule sync
 	@git submodule update --init --recursive
 	@echo "✅ Submodules synced and updated"
+
+##@ Shell
+
+.PHONY: shell-test
+shell-test: ## Run shell script tests using ShellSpec.
+	@echo "🧪 Running shell tests..."
+	@bash -c "shellspec"
+
+.PHONY: shell-test-dev
+shell-test-dev: ## Run shell tests inside the Nix dev shell (mirrors CI).
+	@echo "🧪 Running shell tests inside the Nix dev shell..."
+	@DEVENV_ROOT=$(CURDIR) $(NIX_ALLOW_UNFREE) $(NIX_EXEC) develop $(NIX_FLAGS) .# --command $(MAKE) shell-test
+
+.PHONY: shell-check
+shell-check: ## Run ShellCheck on shell scripts.
+	@echo "🔍 Running ShellCheck..."
+	@find . -name '*.sh' -not -path './node_modules/*' -not -path './.git/*' -not -path './result/*' | xargs shellcheck
+
+.PHONY: shell-check-dev
+shell-check-dev: ## Run ShellCheck inside the Nix dev shell (mirrors CI).
+	@echo "🔍 Running ShellCheck inside the Nix dev shell..."
+	@DEVENV_ROOT=$(CURDIR) $(NIX_ALLOW_UNFREE) $(NIX_EXEC) develop $(NIX_FLAGS) .# --command $(MAKE) shell-check

README-nix.md

@@ -3,8 +3,8 @@
 This repo can build and expose all CLI tools declared in `package.json` using the exact versions from the lockfile, via [dream2nix].
 
 ## Prerequisites
-- Nix installed
-- Flakes enabled (see Nix docs)
+- Nix installed (recommended: [Determinate Nix](https://determinate.systems/nix-installer/))
+- Flakes enabled (automatically enabled with Determinate Nix)
 
 ## Typical usage
 

config/claude/default.nix

@@ -13,4 +13,9 @@
     source = ./notify.sh;
     executable = true;
   };
+
+  home.file.".claude/security.sh" = {
+    source = ./security.sh;
+    executable = true;
+  };
 }

config/claude/notify.sh

@@ -8,6 +8,7 @@
 if [ -z "$PUSHOVER_API_TOKEN" ] || [ -z "$PUSHOVER_USER_KEY" ]; then
   if [ -f "$HOME/dotfiles/.env" ]; then
     set -a
+    # shellcheck source=/dev/null
     source "$HOME/dotfiles/.env" 2>/dev/null
     set +a
   fi

config/claude/pushover.sh

@@ -9,8 +9,8 @@
 # inherit shell environment variables
 if [ -z "$PUSHOVER_API_TOKEN" ] || [ -z "$PUSHOVER_USER_KEY" ]; then
   if [ -f "$HOME/dotfiles/.env" ]; then
-    # shellcheck source=/dev/null
     set -a
+    # shellcheck source=/dev/null
     source "$HOME/dotfiles/.env" 2>/dev/null
     set +a
   fi
@@ -112,8 +112,12 @@ if echo "$input" | jq -e '.message' >/dev/null 2>&1; then
 fi
 
 # Handle SessionEnd hook (priority 0 = normal)
+# Skip "other" reason - it's a generic/unknown reason that's noisy
 if echo "$input" | jq -e '.reason' >/dev/null 2>&1; then
   REASON=$(echo "$input" | jq -r '.reason')
+  if [ "$REASON" = "other" ]; then
+    exit 0
+  fi
   send_notification "👋 Session ended: ${REASON}" 0
   exit 0
 fi

config/claude/security.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+
+# Claude Code Security Hook
+# Blocks dangerous Bash commands by checking against deny patterns
+# Based on: https://wasabeef.jp/blog/claude-code-secure-bash
+#
+# This script runs as a PreToolUse hook and returns:
+# - Exit code 0: Command is allowed
+# - Exit code 2: Command is blocked
+
+set -euo pipefail
+
+# Read JSON input from stdin
+input=$(cat)
+
+# Extract tool name - only process Bash commands
+tool_name=$(echo "$input" | jq -r '.tool.name // empty' 2>/dev/null)
+[[ $tool_name != "Bash" ]] && exit 0
+
+# Extract the command to be executed
+command=$(echo "$input" | jq -r '.tool.input.command // empty' 2>/dev/null)
+[[ -z $command ]] && exit 0
+
+# Path to settings file with deny patterns
+settings="$HOME/.claude/settings.json"
+[[ ! -f $settings ]] && exit 0
+
+# Read deny patterns from settings
+mapfile -t deny_patterns < <(jq -r '.permissions.deny[]?' "$settings" 2>/dev/null)
+
+# Function to check if a command matches a pattern
+# Supports glob-style wildcards
+matches_pattern() {
+  local cmd="$1"
+  local pattern="$2"
+
+  # Extract pattern from Bash(...) format
+  if [[ $pattern =~ ^Bash\((.+)\)$ ]]; then
+    local check_pattern="${BASH_REMATCH[1]}"
+    # Remove trailing :* if present (legacy format)
+    check_pattern="${check_pattern%:*}"
+
+    # Use bash glob matching (extended globbing)
+    shopt -s extglob
+    # shellcheck disable=SC2053
+    if [[ $cmd == $check_pattern ]]; then
+      return 0
+    fi
+    shopt -u extglob
+  fi
+  return 1
+}
+
+# Split command at logical operators to catch hidden dangerous commands
+# This handles: cmd1 ; cmd2, cmd1 && cmd2, cmd1 || cmd2, cmd1 | cmd2
+# shellcheck disable=SC2001
+IFS=$'\n' read -r -d '' -a segments < <(echo "$command" | sed 's/[;&|]\+/\n/g' && printf '\0') || true
+
+for segment in "${segments[@]}"; do
+  # Trim leading/trailing whitespace
+  segment=$(echo "$segment" | xargs 2>/dev/null) || continue
+  [[ -z $segment ]] && continue
+
+  for pattern in "${deny_patterns[@]}"; do
+    if matches_pattern "$segment" "$pattern"; then
+      echo "BLOCKED by security.sh: Command '$segment' matches deny pattern '$pattern'" >&2
+      exit 2
+    fi
+  done
+done
+
+# Command passed all checks
+exit 0

config/claude/settings.json

@@ -1,4 +1,5 @@
 {
+  "cleanupPeriodDays": 99999,
   "permissions": {
     "allow": [
       "Bash(bun:*)",
@@ -37,7 +38,6 @@
       "Bash(git status:*)",
       "Bash(git tag:*)",
       "Bash(git worktree:*)",
-      "Bash(go:*)",
       "Bash(grep:*)",
       "Bash(kubectl:*)",
       "Bash(lsof:*)",
@@ -52,8 +52,6 @@
       "Bash(pip:*)",
       "Bash(pip3:*)",
       "Bash(pnpm:*)",
-      "Bash(python:*)",
-      "Bash(python3:*)",
       "Bash(scutil:*)",
       "Bash(timeout:*)",
       "Bash(uv:*)",
@@ -69,7 +67,30 @@
       "Bash(chmod -R 777:*)",
       "Bash(mkfs:*)",
       "Bash(dd if=:*)"
-    ]
+    ],
+    "read": {
+      "deny": [
+        "**/.env",
+        "**/.env.local",
+        "**/*.pem",
+        "**/*.key",
+        "**/secrets/**",
+        "**/credentials/**",
+        "**/.aws/**",
+        "**/.ssh/**",
+        "**/docker-compose*.yml",
+        "**/config/database.yml"
+      ]
+    },
+    "write": {
+      "deny": [
+        "**/secrets/**",
+        "**/credentials/**",
+        "**/.ssh/**",
+        "**/config/database.yml",
+        "**/docker-compose*.yml"
+      ]
+    }
   },
   "hooks": {
     "UserPromptSubmit": [
@@ -103,6 +124,11 @@
       {
         "matcher": "Bash",
         "hooks": [
+          {
+            "type": "command",
+            "command": "$HOME/.claude/security.sh",
+            "timeout": 5
+          },
           {
             "type": "command",
             "command": "$HOME/.claude/notify.sh",
@@ -201,5 +227,6 @@
     "type": "command",
     "command": "node -e \"const fs=require('fs'),path=require('path'),rl=require('readline');let i='';process.stdin.on('data',c=>i+=c);process.stdin.on('end',async()=>{try{const d=JSON.parse(i);const m=d.model?.display_name||'claude-sonnet-4';const dir=d.workspace?.current_dir?.replace(process.env.HOME,'~')||path.basename(process.cwd());const sid=d.session_id;let t=0;if(sid){const pdir=path.join(process.env.HOME,'.claude','projects');if(fs.existsSync(pdir)){for(const pd of fs.readdirSync(pdir).map(d=>path.join(pdir,d)).filter(d=>fs.statSync(d).isDirectory())){const tf=path.join(pd,sid+'.jsonl');if(fs.existsSync(tf)){const rs=fs.createReadStream(tf);const r=rl.createInterface({input:rs});let lu=null;r.on('line',l=>{try{const e=JSON.parse(l);if(e.type==='assistant'&&e.message?.usage)lu=e.message.usage}catch{}});await new Promise(res=>{r.on('close',()=>{if(lu)t=(lu.input_tokens||0)+(lu.output_tokens||0)+(lu.cache_creation_input_tokens||0)+(lu.cache_read_input_tokens||0);res()})});break}}}}const getContextLimit=m=>{if(m.includes('sonnet-4'))return 500000;if(m.includes('3-5-sonnet')||m.includes('sonnet-3.5'))return 200000;if(m.includes('haiku'))return 200000;if(m.includes('opus'))return 200000;return 200000};const cl=getContextLimit(m);const p=Math.min(100,Math.round(t/cl*100));const td=t>=1000000?(t/1000000).toFixed(1)+'M':t>=1000?(t/1000).toFixed(1)+'K':t.toString();const ld=cl>=1000000?(cl/1000000).toFixed(0)+'M':cl>=1000?(cl/1000).toFixed(0)+'K':cl.toString();const c=p>=90?'\\x1b[31m':p>=70?'\\x1b[33m':'\\x1b[32m';console.log('\\x1b[34m'+process.env.USER+'@'+require('os').hostname().split('.')[0]+'\\x1b[0m:\\x1b[34m'+dir+'\\x1b[0m ['+m+'] 🪙 '+td+'/'+ld+' '+c+p+'%\\x1b[0m '+new Date().toLocaleTimeString('en-US',{hour12:false}))}catch{console.log('\\x1b[34m'+process.env.USER+'@'+require('os').hostname().split('.')[0]+'\\x1b[0m:\\x1b[34m'+(process.cwd().replace(process.env.HOME,'~'))+'\\x1b[0m [claude-sonnet-4] 🪙 0 \\x1b[31m❌\\x1b[0m '+new Date().toLocaleTimeString('en-US',{hour12:false}))}});\""
   },
-  "model": "sonnet"
+  "model": "sonnet",
+  "defaultMode": "bypassPermissions"
 }

config/cliproxyapi/config.yaml

@@ -4,11 +4,11 @@ port: 8317
 remote-management:
   # Whether to allow remote (non-localhost) management access.
   # When false, only localhost can access management endpoints (a key is still required).
-  allow-remote: true
+  allow-remote: false
   # Management key. If a plaintext value is provided here, it will be hashed on startup.
   # All management requests (even from localhost) require this key.
   # Leave empty to disable the Management API entirely (404 for all /v0/management routes).
-  secret-key: ""
+  secret-key: "__CLIPROXY_MANAGEMENT_PASSWORD__"
   # Disable the bundled management control panel asset download and HTTP route when true.
   disable-control-panel: false
 # Authentication directory (supports ~ for home directory). If you use Windows, please set the directory like this: `C:/cli-proxy-api/`

devenv.nix

@@ -5,6 +5,8 @@
     pkgs.nodejs
     pkgs.bun
     pkgs.neovim
+    pkgs.shellcheck
+    pkgs.shellspec
   ];
 
   containers = pkgs.lib.mkIf (!pkgs.stdenv.hostPlatform.isLinux) (pkgs.lib.mkForce { });

home-manager/packages/default.nix

@@ -61,6 +61,8 @@ with pkgs;
   ripgrep
   rustup
   sccache
+  shellcheck
+  shellspec
   speedtest-cli
   sqlite
   stern

home-manager/programs/fish/default.nix

@@ -60,6 +60,7 @@
       grco = "_grco_function";
       grcr = "_grcr_function";
       kyber = "_kyber_function";
+      kybers = "_kybers_function";
       fch = "_fzf_cmd_history --allow-execute";
       fdp = "_fzf_directory_picker --allow-cd --prompt-name Projects ~/";
       ffp = "_fzf_file_picker --allow-open-in-editor --prompt-name Files";
@@ -133,6 +134,7 @@
         "_grcr_function"
         "_hm_load_env_file"
         "_kyber_function"
+        "_kybers_function"
         "fish_user_key_bindings"
       ]
   );

home-manager/programs/fish/functions/_kyber_function.fish

@@ -1,9 +1,3 @@
-function _kyber_function --description "SSH to Kyber server"
-  set -l password (security find-generic-password -s "ssh ubuntu@91.242.214.231" -w 2>/dev/null)
-  if test -n "$password"
-    sshpass -p $password ssh ubuntu@$KYBER_IP_ADDR
-  else
-    echo "Password not found in Keychain. Run: security add-generic-password -s 'ssh ubuntu@91.242.214.231' -a ubuntu -w"
-    ssh ubuntu@$KYBER_IP_ADDR
-  end
+function _kyber_function --description "SSH to Kyber server via Tailscale"
+  tailscale ssh ubuntu@kyber
 end