CI Workflow Improvements and Repository Cleanup (#174)

* chore: remove deprecated files and configs

Remove obsolete cspell word lists, editorconfig, vscode settings,
and retired workflows (rebase, stale, sync-labels, wrangler).
Drop legacy installer scripts i.sh and install_alpha.sh.

* ci: update workflows and trunk configuration

- Bump actions/checkout to v6.0.2 and shellcheck to 2.0.0
- Add lib/zsh/** and tests/** to push/PR path triggers
- Add permissions: contents: read and timeout-minutes: 10
- Use github.ref in concurrency group
- Replace ~/.zi hard-coded paths with XDG_DATA_HOME equivalents
- Add unit-fixture step calling tests/installers.sh
- Remove wrangler deploy job; update trunk linter config

* feat: add sync-init.sh and tests/installers.sh

sync-init.sh verifies (and optionally replaces) the local lib/zsh/init.zsh
against the canonical GitHub raw main copy. Supports --write, --local,
--remote, --checksum-url and --no-checksum flags.

tests/installers.sh provides a POSIX sh test suite covering:
- script syntax validation (sh -n / zsh -n)
- checksum integrity checks
- loader install with XDG path and branch-override assertions
- standalone zpmod delegation test
- sync-init fixture round-trip test

* refactor: migrate installer scripts to XDG paths and harden POSIX

install.sh:
- Add set -eu; use WORKDIR=$(mktemp -d) with safe trap cleanup
- Replace ~/.zi with XDG_DATA_HOME-aware path
- Fix sed command for ZI[STREAM] substitution
- Correct cd fallback from return to exit 1
- Guard branch pull with BOPT; add exit 1 on failed clone
- Fix .zshrc loader snippet variable quoting

install_zpmod.sh:
- Add set -eu, file header and WORKDIR trap
- Add pure-POSIX _zi_ver_ge() replacing expr string comparison
- Honour XDG_DATA_HOME for ZI_HOME default
- Replace exit 255 with exit 1 throughout

lib/zsh/init.zsh:
- Update default branch to use ZI[STREAM] parameter
- Align loader paths with XDG layout

* chore: update gitignore, checksums, and docs

- Exclude AI agent instruction files from git tracking
  (AGENTS.md, CLAUDE.md, GEMINI.md, .github/copilot-instructions.md)
- Add .geminiignore
- Regenerate lib/checksum.txt to reflect updated scripts
- Document sync-init.sh usage in docs/README.md
- Remove deprecated git.io short URLs from README

* Checksum e470ca3

* ci: add org project tracker scripts (#158)

* ci(check-linux): add init.zsh sync-drift detection step

* fix(install.sh): verify zi.zsh exists after clone, not just directory

* ci: add concurrency to checksum.yml; add smoke-test to win-install.yml

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat: add color.zsh from molovo/color (MIT)

* feat: add revolver from molovo/revolver (MIT)

* chore: rename repo references from zi-src to src

Update all internal references to reflect the repository rename:
- .trunk/trunk.yaml repo name
- workflow repository guards (checksum, rclone-action, deploy-gh-pages)
- win-install safe.directory path
- docs/README.md VSCode and jsDelivr URLs

* ci: add org project tracker scripts (label sync + workflow rollout)

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Sall <59910950+ss-o@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Sall <59910950+ss-o@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Sall <59910950+ss-o@users.noreply.github.com>

* fix: address review feedback for revolver process check and installer URLs

Agent-Logs-Url: https://github.com/z-shell/src/sessions/3295a818-69b9-4b0d-99f8-bf27b90e3b7c

Co-authored-by: ss-o <59910950+ss-o@users.noreply.github.com>

* fix: validate revolver pid before liveness check

Agent-Logs-Url: https://github.com/z-shell/src/sessions/3295a818-69b9-4b0d-99f8-bf27b90e3b7c

Co-authored-by: ss-o <59910950+ss-o@users.noreply.github.com>

---------

Signed-off-by: Sall <59910950+ss-o@users.noreply.github.com>

* chore(ci): remove emoji prefixes from workflow names

* build(deps): bump the github-actions group across 1 directory with 5 updates (#173)

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` |
| [z-shell/.github/actions/commit](https://github.com/z-shell/.github) | `1.0.8` | `1.1.1` |
| [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `4.0.0` | `4.1.0` |
| [z-shell/.github/actions/rclone](https://github.com/z-shell/.github) | `1.0.8` | `1.1.1` |
| [egor-tensin/setup-cygwin](https://github.com/egor-tensin/setup-cygwin) | `4.0.1` | `4.0.2` |

Updates `actions/checkout` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...3d3c42e)

Updates `z-shell/.github/actions/commit` from 1.0.8 to 1.1.1
- [Release notes](https://github.com/z-shell/.github/releases)
- [Commits](z-shell/.github@91068ee...3222f53)

Updates `peaceiris/actions-gh-pages` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-gh-pages@4f9cc66...84c30a8)

Updates `z-shell/.github/actions/rclone` from 1.0.8 to 1.1.1
- [Release notes](https://github.com/z-shell/.github/releases)
- [Commits](z-shell/.github@91068ee...3222f53)

Updates `egor-tensin/setup-cygwin` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/egor-tensin/setup-cygwin/releases)
- [Changelog](https://github.com/egor-tensin/setup-cygwin/blob/master/CHANGELOG.md)
- [Commits](egor-tensin/setup-cygwin@d2c752b...fca9069)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: z-shell/.github/actions/commit
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peaceiris/actions-gh-pages
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: z-shell/.github/actions/rclone
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: egor-tensin/setup-cygwin
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: resolve merge conflicts with origin/main

* fix: address code review issues from PR review

- Fix mktemp -d portability: add template to all calls for BSD/macOS
  compat (tests/installers.sh, public/sh/install.sh, install_zpmod.sh,
  sync-init.sh, scripts/add-project-workflow.sh)
- Fix add-project-workflow.sh: fail fast if mktemp fails
- Fix _comps[zi] in public/zsh/init.zsh to register function name _zi
  instead of absolute file path (fixes completion loading)
- Fix ANSI escape sequences in public/sh/sync-init.sh: use printf '%b'
  with real ESC prefix so color codes render correctly
- Fix merged comment with duplicated # in public/zsh/snippets/revolver

* fix: add completion dir to fpath in _zi_comps before registering _zi

* revert: remove fpath manipulation from _zi_comps, defer to zi.zsh

* chore: remove deprecated scripts/ directory

* fix: update checksums to match current script files

---------

Signed-off-by: Sall <59910950+ss-o@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Salvydas Lukosius <ss-o@users.noreply.github.com>
Co-authored-by: digital-teams[bot] <actions@zshell.dev>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 47f0510

Author: 3 people

checksum.txt

@@ -1,4 +1,4 @@
-348b78e992d28ecebd23940d06944629ef7f8f9d93c17ef3469cd6eebd288451 public/sh/install_zpmod.sh
-7408a1045f330a6e73bda55c6c7b48be7873a4e7f1fb00d7db989827cc9224a9 public/sh/install.sh
-f8519bf7e3e42ad67cc9cff6d82a8367641611fc687b2f6793e26bd55dbbb553 public/sh/sync-init.sh
-98f54a779985719e390b3e4559b7b0ac22101caac91d0569d41cd9229a05c6de public/zsh/init.zsh
+0140801e80b2d8767e95d215850b6feab3642ee2b6fd70fbf4aab09afcfe7fca public/sh/install_zpmod.sh
+0cca0bb9f95101b4bf392d6aa3c23123602d99a7cbb0decacaa72973e016d89d public/sh/install.sh
+08cc893ceb982fc99d17db1966c6c30790cc571e16e4f5392352d995f5252952 public/sh/sync-init.sh
+5c7af31d7fc848d80f9fedf69c75e6844503f550a3d5e020bc7cdfdaca624763 public/zsh/init.zsh

sh/install.sh

@@ -4,7 +4,7 @@
 
 set -eu
 
-WORKDIR="$(mktemp -d)" || exit 1
+WORKDIR="$(mktemp -d "${TMPDIR:-/tmp}/zi-install.XXXXXX")" || exit 1
 trap 'rm -rf "${WORKDIR:?}"' EXIT INT TERM
 ZOPT=""
 AOPT=""

sh/install_zpmod.sh

@@ -4,7 +4,7 @@
 
 set -eu
 
-WORKDIR="$(mktemp -d)" || exit 1
+WORKDIR="$(mktemp -d "${TMPDIR:-/tmp}/zi-zpmod.XXXXXX")" || exit 1
 trap 'rm -rf "${WORKDIR:?}"' EXIT INT TERM
 
 # Returns 0 if version $1 >= version $2 (dot-separated integers)

sh/sync-init.sh

@@ -22,7 +22,7 @@
 
 set -eu
 
-WORKDIR="$(mktemp -d)" || exit 1
+WORKDIR="$(mktemp -d "${TMPDIR:-/tmp}/zi-sync.XXXXXX")" || exit 1
 trap 'rm -rf "${WORKDIR:?}"' EXIT INT TERM
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
@@ -70,7 +70,7 @@ _fetch_url() {
   elif command -v wget >/dev/null 2>&1; then
     command wget -qO- "${_url}"
   else
-    printf '%s\n' "[1;31m▓▒░[0m No curl or wget available." >&2
+    printf '%b\n' "[1;31m▓▒░[0m No curl or wget available." >&2
     return 1
   fi
 }
@@ -114,14 +114,14 @@ _fetch() {
         return 0
       fi
     fi
-    printf '%s\n' "[1;31m▓▒░[0m Failed to fetch: ${_src}" >&2
+    printf '%b\n' "[1;31m▓▒░[0m Failed to fetch: ${_src}" >&2
     return 1
     ;;
   *)
     if [ -r "${_src}" ]; then
       command cat "${_src}"
     else
-      printf '%s\n' "[1;31m▓▒░[0m Cannot read local path: ${_src}" >&2
+      printf '%b\n' "[1;31m▓▒░[0m Cannot read local path: ${_src}" >&2
       return 1
     fi
     ;;
@@ -136,7 +136,7 @@ _sha256() {
   elif command -v shasum >/dev/null 2>&1; then
     shasum -a 256 "${_file}" | command awk '{print $1}'
   else
-    printf '%s\n' "[1;31m▓▒░[0m No sha256sum or shasum available." >&2
+    printf '%b\n' "[1;31m▓▒░[0m No sha256sum or shasum available." >&2
     return 1
   fi
 }
@@ -191,8 +191,8 @@ done
 # ── Validate Inputs ───────────────────────────────────────────────────────────
 
 if [ ! -f "${OPT_LOCAL}" ] && [ "${OPT_WRITE}" -eq 0 ]; then
-  printf '%s\n' "[1;31m▓▒░[0m Local file not found: ${OPT_LOCAL}" >&2
-  printf '%s\n' "[1;33m▓▒░[0m Use --write to create it from remote." >&2
+  printf '%b\n' "[1;31m▓▒░[0m Local file not found: ${OPT_LOCAL}" >&2
+  printf '%b\n' "[1;33m▓▒░[0m Use --write to create it from remote." >&2
   exit 1
 fi
 
@@ -202,7 +202,7 @@ REMOTE_FILE="${WORKDIR}/remote-init.zsh"
 printf '%s\n' "▓▒░ Fetching remote: ${OPT_REMOTE}"
 # shellcheck disable=SC2310
 if ! _fetch "${OPT_REMOTE}" >"${REMOTE_FILE}"; then
-  printf '%s\n' "[1;31m▓▒░[0m Failed to fetch remote file." >&2
+  printf '%b\n' "[1;31m▓▒░[0m Failed to fetch remote file." >&2
   exit 1
 fi
 
@@ -213,19 +213,19 @@ if [ "${OPT_NO_CHECKSUM}" -eq 0 ]; then
   printf '%s\n' "▓▒░ Fetching checksum: ${OPT_CHECKSUM_URL}"
   # shellcheck disable=SC2310
   if ! _fetch "${OPT_CHECKSUM_URL}" >"${CHECKSUM_FILE}"; then
-    printf '%s\n' "[1;31m▓▒░[0m Failed to fetch checksum file." >&2
+    printf '%b\n' "[1;31m▓▒░[0m Failed to fetch checksum file." >&2
     exit 1
   fi
 
   EXPECTED_HASH="$(grep "${CHECKSUM_KEY}" "${CHECKSUM_FILE}" | command awk '{print $1}')"
   if [ -z "${EXPECTED_HASH}" ]; then
-    printf '%s\n' "[1;31m▓▒░[0m No checksum entry for '${CHECKSUM_KEY}' in checksum.txt." >&2
+    printf '%b\n' "[1;31m▓▒░[0m No checksum entry for '${CHECKSUM_KEY}' in checksum.txt." >&2
     exit 1
   fi
 
   REMOTE_HASH="$(_sha256 "${REMOTE_FILE}")"
   if [ "${REMOTE_HASH}" != "${EXPECTED_HASH}" ]; then
-    printf '%s\n' "[1;31m▓▒░[0m Remote checksum mismatch!" >&2
+    printf '%b\n' "[1;31m▓▒░[0m Remote checksum mismatch!" >&2
     printf '%s\n' "  expected : ${EXPECTED_HASH}" >&2
     printf '%s\n' "  got      : ${REMOTE_HASH}" >&2
     exit 1
@@ -245,13 +245,13 @@ else
 fi
 
 if [ "${LOCAL_HASH}" = "${REMOTE_HASH}" ]; then
-  printf '%s\n' "[1;32m▓▒░[0m Local file matches remote. No sync needed."
+  printf '%b\n' "[1;32m▓▒░[0m Local file matches remote. No sync needed."
   printf '%s\n' "  hash : ${LOCAL_HASH}"
   printf '%s\n' "  path : ${OPT_LOCAL}"
   exit 0
 fi
 
-printf '%s\n' "[1;33m▓▒░[0m Local and remote differ."
+printf '%b\n' "[1;33m▓▒░[0m Local and remote differ."
 printf '%s\n' "  local  : ${LOCAL_HASH}"
 printf '%s\n' "  remote : ${REMOTE_HASH}"
 printf '%s\n' "  source : ${OPT_REMOTE}"
@@ -286,7 +286,7 @@ fi
 command mv "${TMP_TARGET}" "${OPT_LOCAL}"
 
 NEW_HASH="$(_sha256 "${OPT_LOCAL}")"
-printf '%s\n' "[1;32m▓▒░[0m Sync complete."
+printf '%b\n' "[1;32m▓▒░[0m Sync complete."
 printf '%s\n' "  before : ${LOCAL_HASH}"
 printf '%s\n' "  after  : ${NEW_HASH}"
 printf '%s\n' "  path   : ${OPT_LOCAL}"

zsh/init.zsh

@@ -119,8 +119,8 @@ _zi_pmod() {
 # Register Zi completion if the completion system is active.
 _zi_comps() {
   builtin emulate -L zsh
-  if (( ${+_comps} )) && [[ -f "${ZI[BIN_DIR]}/lib/_zi" ]]; then
-    (( ${+_comps[zi]} )) || _comps[zi]="${ZI[BIN_DIR]}/lib/_zi"
+  if (( ${+_comps} )); then
+    (( ${+_comps[zi]} )) || _comps[zi]=_zi
   fi
   return 0
 }

zsh/snippets/color.zsh

@@ -3,8 +3,6 @@
 # Source: https://github.com/molovo/color
 # License: MIT — Copyright (c) 2015 Joe Letchford
 # Maintained by z-shell/src — https://github.com/z-shell/src
-#
-#!/usr/bin/env zsh
 
 function color() {
   local color=$1 style=$2 b=0

zsh/snippets/revolver

@@ -1,8 +1,8 @@
 #!/usr/bin/env zsh
+
 # Source: https://github.com/molovo/revolver
 # License: MIT — Copyright (c) 2016 Joe Letchford
 # Maintained by z-shell/src — https://github.com/z-shell/src
-#
 
 local -A _revolver_spinners
 _revolver_spinners=(
@@ -79,7 +79,7 @@ function _revolver_usage() {
   echo "  start <message>    Start the spinner"
   echo "  update <message>   Update the message"
   echo "  stop               Stop the spinner"
-  echo "  demo               Display an demo of each style"
+  echo "  demo               Display a demo of each style"
 }
 
 ###
@@ -88,6 +88,10 @@ function _revolver_usage() {
 function _revolver_process() {
   local dir statefile state msg pid="$1" spinner_index=0
 
+  if [[ -z $pid || $pid != <-> ]]; then
+    exit 1
+  fi
+
   # Find the directory and load the statefile
   dir=${REVOLVER_DIR:-"${ZDOTDIR:-$HOME}/.revolver"}
   statefile="$dir/$pid"
@@ -107,11 +111,9 @@ function _revolver_process() {
     fi
 
     # Check for the existence of the parent process
-    $(kill -s 0 $pid 2&>/dev/null)
-
-    # If process doesn't exist, exit the script
-    # to prevent it from being orphaned
-    if [[ $? -ne 0 ]]; then
+    # and exit if process doesn't exist to prevent
+    # the spinner from being orphaned
+    if ! kill -s 0 "$pid" 2>/dev/null; then
       exit 1
     fi