dotfiles

Brew

Brewfile intent.

SSOT: rig/brew/Brewfile. Excludes: rig/brew/exclude.txt. Dumps under local/ are evidence only.

just inventory-redacted
just brew-check

rig/brew/Brewfile is the package SSOT. rig/darwin/modules/packages.nix is a tiny nix-darwin bootstrap CLI set (bash, curl, git, jq, ripgrep); overlap with those Brewfile formulae is OK.

Groups

Comment group headers in rig/brew/Brewfile:

HeaderSection
tapsHomebrew taps required by promoted packages
core-cliCore CLI formulae (atuin, ast-grep, mq (harehare Markdown jq — not IBM MQ), bats-core, shellcheck, shfmt, just, mise (versions only), s5cmd, lnav, jc, visidata, duckdb, mtr, neovim, yq (mikefarah), hyperfine, xh, …). GNU gnu-sed / findutils / grep sit next to coreutils; zshrc prepends their gnubin.
shell-pluginsZsh plugin formulae (includes zsh-you-should-use)
shell-aliasesCLIs used from shell aliases
dev-languages / containersLanguages, build tools, optional colima
ai-toolsAI CLI tooling
media-cliMedia conversion CLI
data / dbDatabase servers plus xo/xo/usql (source-built; needs current Xcode; GitHub release fallback). Track highlight in ~/.usqlrc only — DSNs stay local.
security / RESecurity and reverse-engineering CLI (includes gitleaks)
cloud CLIsCloud vendor CLIs
other CLI leavesRemaining CLI formulae (tap-qualified stripe/supabase)
browsers / editors / AI desktopBrowser, editor, and AI desktop casks
comms / collaborationChat and collaboration casks
mediaMedia player and download casks (hammerspoon beside iina)
productivity / filesFiles, notes, and cleanup casks
desktop utilitiesWindow, menu bar, and clipboard casks
dev containers / mobileDocker Desktop and Android tools
creative / AI localLocal creative and AI casks
fontsFont casks
quicklookQuick Look plugins
other casksRemaining casks
trial-agent-deckagent-deck plus tmux; tmux is Agent Deck's backend only (tmux -L agent-deck). Ghostty owns everyday splits. Linux setup.sh skips this trial. Formula is a prebuilt darwin_arm64 tarball, but Homebrew still refuses to pour it when Xcode is older than the macOS SDK. Fallback: GitHub release agent-deck_*_darwin_arm64.tar.gz until brew install asheshgoplani/tap/agent-deck succeeds.
mas — selected App Store apps (requires Apple ID on target Mac)Selected Mac App Store apps

Policy

TopicRule
DockerPrimary is cask "docker-desktop". brew "colima" is optional secondary — do not run both engines together. Formula docker stays in exclude.txt.
KopiaCLI is kopia/test-builds/kopia (nightly job). Keep the kopia/test-builds tap. kopiaui cask is manual restore only. rclone stays the Google Drive backend; s5cmd is high-throughput S3/local — do not retarget Kopia.
VS CodeExtension lines are inventory only under local/ — not tracked in the Brewfile.
Runnersjust is the only task runner (Brew binary; do not install via mise). mise is toolchain shims only — no repo-root mise.toml and no mise [tasks]. go-task stays inventory leftover. direnv is env + layout_uv, not versions.
HTTPcurl stays for scripts; xh is interactive HTTP. Do not apt install yq on Debian — that is a different binary.
AtuinLocal-only. Atuin Cloud / atuin login is out of scope.
DeferredGita — wait until this repo tracks global uv tool installs.

Promote curated names only. See Promote, Shell, Backup, Terminal.

On this page