Registering the first Mac surfaced problems that would have hit every
future one, not just this machine:
metapac keys off a raw gethostname(), which on macOS carries the mDNS
".local" suffix, while the registry is keyed by chezmoi's
.chezmoi.hostname, which stops at the first dot. A bare key never
matched and metapac refused to run at all. config.toml.tmpl now emits
each host twice, bare and ".local", so nothing in the registry has to
declare which machines are Macs; the spare key is inert elsewhere.
chezmoi was rewriting ~/Library from 0700 to 0755 on every apply,
loosening a directory macOS deliberately closes. Both levels now carry
the private_ prefix.
dot_gitconfig.tmpl would have destroyed real config on adoption: the
git-lfs filters, seven aliases, diff.noprefix, rerere and the gh
credential helper. All folded in. The lfs block and the GitHub helper
are lookPath-gated like the signing block -- lfs filters run on every
checkout and abort wholesale when the binary is missing, so asserting
them unconditionally breaks a minimal box rather than degrading. gh's
path comes from lookPath, not a hardcoded /opt/homebrew/bin/gh.
Laugh-Tale takes common + a new darwin group, the macOS counterpart to
archlinux.toml, holding only the tooling a backend needs. Its baseline
captures 325 packages, 24 taps and 21 App Store apps -- without it
`metapac clean` would offer to remove every one of them.
Verified on Laugh-Tale: chezmoi status clean after apply, ~/Library
still 0700, `metapac unmanaged` reports nothing, `metapac sync` is a
no-op, and the status line renders correctly under macOS bash 3.2.
Shared groups are still arch-only, so this host draws nothing from
common yet; that gap is documented, not closed.
Claude-Session: https://claude.ai/code/session_01BvpSVPsLrUK4N53LVTofR8
Felipe M.
54965e17aa