dot_zshrc.tmpl

# =============================================================================
# ~/.zshrc — Zsh Interactive Shell Configuration
# Managed by chezmoi. Edit dot_zshrc.tmpl in the dotfiles repo, not this file.
#
# PERFORMANCE BUDGET (measured on Apple Silicon, 2026-03):
#   Target:  <100ms   — imperceptible to humans
#   Current: ~60ms    — measured with: /usr/bin/time zsh -i -c exit
#   Profile: zsh -i -c 'zmodload zsh/zprof; source ~/.zshrc; zprof'
#
# TOP COST BREAKDOWN (zprof):
#   compdef calls    ~17ms  36%  — completion defs from plugins
#   __antidote_setup ~12ms  25%  — plugin loading (irreducible floor)
#   _cache_eval×4     ~3ms   7%  — zoxide/direnv/thefuck (cached, fast)
#   p10k              ~1ms   1%  — instant prompt hides this entirely
#
# KEY OPTIMIZATIONS APPLIED:
#   • p10k instant prompt      — renders prompt before zshrc finishes loading
#   • brew shellenv cached     — avoids `brew shellenv` fork on every start
#   • _cache_eval              — caches slow tool init (zoxide, direnv, thefuck)
#   • mise --shims             — replaces hook activation (~14ms) with PATH prepend
#   • kubectl/helm/ansible     — deferred via kind:defer in .zsh_plugins.txt
#   • compinit NOT called here — handled once by use-omz (was #1 bottleneck ~250ms)
#   • ZSH_DISABLE_COMPFIX      — skips compaudit security check (~16ms)
#   • SSH keys loaded in bg    — avoids ssh-add blocking startup (~11ms)
#   • NVM lazy-loaded          — only initialized when `nvm` is first called
# =============================================================================

# Enable Powerlevel10k instant prompt. Should stay at the very top of ~/.zshrc.
# Initialization code that may require console input (password prompts, [y/n]
# confirmations, etc.) must go above this block; everything else may go below.
if [[ -r "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh" ]]; then
  source "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh"
fi

# Ensure PATH entries are unique (auto-deduplication)
typeset -U path

# OPENSPEC:START
# OpenSpec shell completions configuration - fpath only, compinit handled by use-omz
fpath=("$HOME/.zsh/completions" $fpath)
# OPENSPEC:END

# Powerlevel10k shell integration
typeset -g POWERLEVEL9K_TERM_SHELL_INTEGRATION=true

alias python=python3

{{ if eq .chezmoi.os "darwin" -}}
# Homebrew environment (cached to ~/.cache/brew-shellenv.zsh for speed)
# Auto-regenerates when Homebrew is updated -- no manual maintenance needed
_brew_cache="${XDG_CACHE_HOME:-$HOME/.cache}/brew-shellenv.zsh"
{{   if eq .chezmoi.arch "arm64" -}}
_brew_bin="/opt/homebrew/bin/brew"
{{   else -}}
_brew_bin="/usr/local/bin/brew"
{{   end -}}
if [[ -x "$_brew_bin" ]]; then
  if [[ ! -f "$_brew_cache" ]] || [[ "$_brew_bin" -nt "$_brew_cache" ]]; then
    "$_brew_bin" shellenv > "$_brew_cache" 2>/dev/null
  fi
  source "$_brew_cache"
fi
unset _brew_cache _brew_bin
{{ else if eq .chezmoi.os "linux" -}}
# Linuxbrew environment (if installed)
if [ -f /home/linuxbrew/.linuxbrew/bin/brew ]; then
  _brew_cache="${XDG_CACHE_HOME:-$HOME/.cache}/brew-shellenv.zsh"
  _brew_bin="/home/linuxbrew/.linuxbrew/bin/brew"
  if [[ ! -f "$_brew_cache" ]] || [[ "$_brew_bin" -nt "$_brew_cache" ]]; then
    "$_brew_bin" shellenv > "$_brew_cache" 2>/dev/null
  fi
  source "$_brew_cache"
  unset _brew_cache _brew_bin
fi
{{ end -}}

# Skip OMZ compaudit security check (safe on single-user machine, saves ~16ms)
export ZSH_DISABLE_COMPFIX=true

# Disable OMZ auto-update check (saves ~6ms; we manage plugins via antidote, not OMZ)
export DISABLE_AUTO_UPDATE=true

# Disable OMZ magic functions (url pasting slowdown fix from HN discussion)
export DISABLE_MAGIC_FUNCTIONS=true

# Autosuggestions performance tweaks (set before plugin loads)
export ZSH_AUTOSUGGEST_BUFFER_MAX_SIZE=20
export ZSH_AUTOSUGGEST_MANUAL_REBIND=1


# ============================================================================
# ANTIDOTE - Plugin Manager
# ============================================================================
{{ if eq .chezmoi.os "darwin" -}}
if [ -f /opt/homebrew/opt/antidote/share/antidote/antidote.zsh ]; then
  source /opt/homebrew/opt/antidote/share/antidote/antidote.zsh
elif [ -f /usr/local/opt/antidote/share/antidote/antidote.zsh ]; then
  source /usr/local/opt/antidote/share/antidote/antidote.zsh
fi
{{ else if eq .chezmoi.os "linux" -}}
if [ -f /usr/share/zsh-antidote/antidote.zsh ]; then
  source /usr/share/zsh-antidote/antidote.zsh
fi
{{ end -}}

{{ if eq .chezmoi.os "darwin" -}}
_antidote_home="$HOME/Library/Caches/antidote"
{{ else -}}
_antidote_home="${XDG_CACHE_HOME:-$HOME/.cache}/antidote"
{{ end -}}

# Lazy-load: generate static file only when plugins.txt changes
# We also check if the antidote cache directory is missing (e.g. wiped by macOS/CleanMyMac)
zsh_plugins=${ZDOTDIR:-$HOME}/.zsh_plugins
if [[ ! ${zsh_plugins}.zsh -nt ${zsh_plugins}.txt ]] || [[ ! -d "$_antidote_home" ]]; then
  antidote bundle <${zsh_plugins}.txt >${zsh_plugins}.zsh
fi
source ${zsh_plugins}.zsh
unset _antidote_home

# NOTE: compinit is handled by getantidote/use-omz (deferred compinit).
# Do NOT call compinit again here -- it was the #1 bottleneck (~250ms).

# PATH setup (consolidated, typeset -U path prevents duplicates)
export PATH=$HOME/bin:$HOME/.local/bin:/usr/local/bin:$PATH

alias tfswitch='tfswitch -b $HOME/.local/bin/terraform'

load-tfswitch() {
	local tfswitchrc_path=".terraform-version"

	if [ -f "$tfswitchrc_path" ]; then
	tfswitch
	fi
}
add-zsh-hook chpwd load-tfswitch
load-tfswitch

# You may need to manually set your language environment
export LANG=en_GB.UTF-8

# Preferred editor
export EDITOR='vim'

# True color (24-bit) support for all tools (bat, eza, vim, etc.)
# iTerm2 sets this automatically; this ensures SSH and tmux sessions also get it
export COLORTERM=truecolor

{{ if eq .chezmoi.os "darwin" -}}
# curl (using HOMEBREW_PREFIX for correct architecture path)
if [ -n "${HOMEBREW_PREFIX:-}" ]; then
  export PATH="$HOMEBREW_PREFIX/opt/curl/bin:$PATH"
  export LDFLAGS="-L$HOMEBREW_PREFIX/opt/curl/lib"
  export CPPFLAGS="-I$HOMEBREW_PREFIX/opt/curl/include"
  export PATH="$HOMEBREW_PREFIX/opt/mysql-client/bin:$PATH"
fi
{{ end -}}

# Set up fzf key bindings and fuzzy completion (cached for speed)
# Auto-regenerates when fzf is updated -- no manual maintenance needed
_fzf_cache="${XDG_CACHE_HOME:-$HOME/.cache}/fzf.zsh"
_fzf_bin="$(whence -p fzf)"
if [[ -n "$_fzf_bin" ]] && { [[ ! -f "$_fzf_cache" ]] || [[ "$_fzf_bin" -nt "$_fzf_cache" ]]; }; then
  fzf --zsh > "$_fzf_cache" 2>/dev/null
fi
[[ -f "$_fzf_cache" ]] && source "$_fzf_cache"
unset _fzf_cache _fzf_bin

# SSH Agent Configuration
# Start ssh-agent if not already running
if [ -z "$SSH_AUTH_SOCK" ]; then
    eval "$(ssh-agent -s)" > /dev/null
fi

# Function to load default keys (configured via chezmoi data)
load_default_ssh_keys() {
{{ if ne .ssh_keys "" -}}
    local default_keys=({{ range $key := splitList "," .ssh_keys }}{{ $key | trim | quote }} {{ end }})
{{ else -}}
    local default_keys=()
{{ end -}}

    for key in "${default_keys[@]}"; do
        local key_path="$HOME/.ssh/keys/$key"
        if [ -f "$key_path" ]; then
            # Check if key is already loaded
            if ! ssh-add -l 2>/dev/null | grep -q "$(ssh-keygen -lf "$key_path" 2>/dev/null | awk '{print $2}')"; then
                ssh-add "$key_path" 2>/dev/null
            fi
        fi
    done
}

# Function to add any key on demand
ssh_add_key() {
    local key_name="$1"
    local key_path

    if [ -z "$key_name" ]; then
        echo "Usage: ssh_add_key <key_name>"
        echo "Available keys:"
        ls ~/.ssh/keys/*.key 2>/dev/null | xargs -n1 basename | sed 's/\.key$//'
        return 1
    fi

    # Try with .key extension first
    key_path="$HOME/.ssh/keys/${key_name}.key"
    if [ ! -f "$key_path" ]; then
        # Try without extension
        key_path="$HOME/.ssh/keys/$key_name"
    fi

    if [ -f "$key_path" ]; then
        ssh-add "$key_path"
        echo "Added key: $key_path"
    else
        echo "Key not found: $key_name"
        echo "Available keys:"
        ls ~/.ssh/keys/*.key 2>/dev/null | xargs -n1 basename | sed 's/\.key$//'
    fi
}

# Auto-completion for ssh_add_key function
_ssh_add_key_completion() {
    local keys=($(ls ~/.ssh/keys/*.key 2>/dev/null | xargs -n1 basename | sed 's/\.key$//'))
    compadd -a keys
}
compdef _ssh_add_key_completion ssh_add_key

# Load SSH keys in background to avoid blocking shell startup (~11ms saved)
load_default_ssh_keys &!

# To customize prompt, run `p10k configure` or edit ~/.p10k.zsh.
[[ ! -f ~/.p10k.zsh ]] || source ~/.p10k.zsh

# JetBrains VM options
___MY_VMOPTIONS_SHELL_FILE="${HOME}/.jetbrains.vmoptions.sh"
if [ -f "${___MY_VMOPTIONS_SHELL_FILE}" ]; then
  . "${___MY_VMOPTIONS_SHELL_FILE}"
fi

# VS Code Shell Integration
if [[ "$TERM_PROGRAM" == "vscode" ]]; then
  _vscode_si=""
{{ if eq .chezmoi.os "darwin" -}}
  _vscode_si="/Applications/Visual Studio Code.app/Contents/Resources/app/out/vs/workbench/contrib/terminal/common/scripts/shellIntegration-rc.zsh"
{{ else if eq .chezmoi.os "linux" -}}
  for _p in \
    "/usr/share/code/resources/app/out/vs/workbench/contrib/terminal/common/scripts/shellIntegration-rc.zsh" \
    "/opt/visual-studio-code/resources/app/out/vs/workbench/contrib/terminal/common/scripts/shellIntegration-rc.zsh"; do
    [ -f "$_p" ] && _vscode_si="$_p" && break
  done
  unset _p
{{ end -}}

  if [[ -f "$_vscode_si" ]]; then
    . "$_vscode_si"
  elif command -v code &>/dev/null; then
    . "$(code --locate-shell-integration-path zsh 2>/dev/null)"
  fi
  unset _vscode_si
fi

{{ if ne .gcloud_project "" -}}
export GOOGLE_GENAI_USE_VERTEXAI=true
export GOOGLE_CLOUD_PROJECT="{{ .gcloud_project }}"
{{ end -}}
{{ if ne .gcloud_location "" -}}
export GOOGLE_CLOUD_LOCATION="{{ .gcloud_location }}"
{{ end -}}

# ============================================================================
# PRODUCTIVITY ALIASES AND FUNCTIONS
# ============================================================================

# File and Directory Navigation
alias ..='cd ..'
alias ...='cd ../..'
alias ....='cd ../../..'
alias ~='cd ~'
alias -- -='cd -'

# Enhanced ls commands (using eza, a modern ls replacement)
alias ls='eza --color=auto --icons'
alias ll='eza -alF --icons --git'    # Long listing with git status
alias la='eza -a --icons'
alias l='eza -F --icons'
alias lt='eza -l --sort=modified'    # Sort by time, newest last
alias lh='eza -l --icons'            # Human readable sizes (eza default)
alias lsize='eza -l --sort=size'     # Sort by size
alias ltree='eza --tree --level=2 --icons'  # Tree view with eza

# Directory operations
alias md='mkdir -p'
alias rd='rmdir'

# Tree view
alias tree='tree -C'
alias t1='tree -L 1'
alias t2='tree -L 2'
alias t3='tree -L 3'

# Quick access to common directories
alias desktop='cd ~/Desktop'
alias downloads='cd ~/Downloads'
alias documents='cd ~/Documents'
alias projects='cd ~/projects'

# Git Enhancements (beyond what oh-my-zsh provides)
alias gst='git status'
alias gco='git checkout'
alias gcb='git checkout -b'
alias gp='git push'
alias gpl='git pull'
alias gf='git fetch'
alias gm='git merge'
alias gr='git rebase'
alias glog='git log --oneline --graph --decorate'
alias gclean='git clean -fd'
alias greset='git reset --hard HEAD'
alias gb='git branch'
alias gbd='git branch -d'
alias gbD='git branch -D'
alias gba='git branch -a'
alias gwip='git add -A && git commit -m "WIP"'
alias gunwip='git log -n 1 | grep -q -c "WIP" && git reset HEAD~1'
alias gundo='git reset --soft HEAD~1'

# Development Tools

# Python shortcuts
alias py='python3'
alias pip='pip3'
alias venv='python3 -m venv'
alias pipr='pip install -r requirements.txt'
alias pipf='pip freeze > requirements.txt'

# Docker shortcuts (using docker compose v2)
alias d='docker'
alias dc='docker compose'
alias dcu='docker compose up'
alias dcd='docker compose down'
alias dcb='docker compose build'
alias dcr='docker compose restart'
alias dps='docker ps'
alias dpsa='docker ps -a'
alias di='docker images'
alias drm='docker rm'
alias drmi='docker rmi'
alias dprune='docker system prune -f'

# System Utilities
alias psg='procs --tree'       # procs: modern ps with tree view
alias myip='curl -s https://ipinfo.io/ip'
{{ if eq .chezmoi.os "darwin" -}}
alias localip='ipconfig getifaddr en0'
{{ else -}}
alias localip='hostname -I | awk "{print \$1}"'
{{ end -}}
alias ports='netstat -tuln'
alias listening='lsof -i -P | grep LISTEN'

# File operations with safety
alias cp='cp -i'    # Confirm before overwriting
alias mv='mv -i'    # Confirm before overwriting
alias rm='rm -i'    # Confirm before deleting
alias grep='grep --color=auto'
alias fgrep='grep -F --color=auto'
alias egrep='grep -E --color=auto'

# Disk usage (using modern replacements)
alias du='dust'              # dust: intuitive disk usage with bar chart
alias df='duf'               # duf: colorful disk free with table layout
alias ducks='dust -r -n 10'  # Show largest directories
alias diskspace='duf'

{{ if eq .chezmoi.os "darwin" -}}
# macOS Specific
alias showfiles='defaults write com.apple.finder AppleShowAllFiles YES; killall Finder'
alias hidefiles='defaults write com.apple.finder AppleShowAllFiles NO; killall Finder'
alias cleanup='rm -rf ~/.Trash/* 2>/dev/null; echo "Trash cleaned."'
alias flushdns='sudo dscacheutil -flushcache'
alias emptytrash='rm -rfv ~/.Trash/* 2>/dev/null; echo "Trash emptied."'
{{ else if eq .chezmoi.os "linux" -}}
# Linux Specific
alias flushdns='sudo systemd-resolve --flush-caches 2>/dev/null || sudo resolvectl flush-caches 2>/dev/null'
if command -v yay &>/dev/null; then
  alias update='yay -Syu && antidote update'
elif command -v pacman &>/dev/null; then
  alias update='sudo pacman -Syu && antidote update'
fi
alias syslog='journalctl -xe'
{{ end -}}

# Quick edit common files
alias zshrc='code ~/.zshrc'
alias hosts='sudo code /etc/hosts'
alias sshconfig='code ~/.ssh'

# History aliases
alias h='history'
alias hg='history | grep'
alias hs='history | grep'

# Process management
kport() {
    if [ -z "$1" ]; then
        echo "Usage: kport <port_number>"
        echo "Example: kport 3000"
        return 1
    fi

    local pids=$(lsof -ti:$1)
    if [ -z "$pids" ]; then
        echo "No process found running on port $1"
        return 1
    fi

    echo "Killing processes on port $1: $pids"
    echo $pids | xargs kill -15 2>/dev/null
    sleep 1
    local remaining=$(lsof -ti:$1 2>/dev/null)
    if [ -n "$remaining" ]; then
      echo "$remaining" | xargs kill -9 2>/dev/null
    fi
    echo "Done!"
}

# Alternative alias for killport
alias killport='kport'

# ============================================================================
# USEFUL FUNCTIONS
# ============================================================================

# Create and enter directory
mkcd() {
    mkdir -p "$1" && cd "$1"
}

# Extract various archive formats
extract() {
    if [ -f "$1" ] ; then
        case "$1" in
            *.tar.bz2)   tar xjf "$1"     ;;
            *.tar.gz)    tar xzf "$1"     ;;
            *.bz2)       bunzip2 "$1"     ;;
            *.rar)       unrar e "$1"     ;;
            *.gz)        gunzip "$1"      ;;
            *.tar)       tar xf "$1"      ;;
            *.tbz2)      tar xjf "$1"     ;;
            *.tgz)       tar xzf "$1"     ;;
            *.zip)       unzip "$1"       ;;
            *.Z)         uncompress "$1"  ;;
            *.7z)        7z x "$1"        ;;
            *)     echo "'$1' cannot be extracted via extract()" ;;
        esac
    else
        echo "'$1' is not a valid file"
    fi
}

# Find files by name (using fd, a modern find replacement)
findfile() {
    fd --type f "$1"
}

# Find directories by name
finddir() {
    fd --type d "$1"
}

# Weather function
weather() {
    local location=${1:-"Rome"}
    curl -s "wttr.in/$location"
}

# Quick backup function
backup() {
    cp "$1" "$1.backup.$(date +%Y%m%d_%H%M%S)"
}

# Git clone and cd into directory
gclone() {
    git clone "$1" && cd "$(basename "$1" .git)"
}

# Quick note taking
note() {
    echo "$(date): $*" >> ~/notes.txt
}

# Show notes
notes() {
    cat ~/notes.txt
}

# Quick search in files (uses ripgrep for speed)
search() {
    rg "$1" .
}

# Show file size in human readable format
sizeof() {
    du -sh "$1"
}

# ============================================================================
# ENHANCED HISTORY SETTINGS
# ============================================================================
export HISTSIZE=50000
export SAVEHIST=50000
export HISTFILE=~/.zsh_history
setopt HIST_VERIFY
setopt SHARE_HISTORY
setopt APPEND_HISTORY
setopt INC_APPEND_HISTORY
setopt HIST_IGNORE_DUPS
setopt HIST_IGNORE_ALL_DUPS
setopt HIST_REDUCE_BLANKS
setopt HIST_IGNORE_SPACE

# ============================================================================
# ADDITIONAL PRODUCTIVITY SETTINGS
# ============================================================================

# Auto-correction (commands only, not arguments)
setopt CORRECT

# Better completion
setopt AUTO_LIST
setopt AUTO_MENU
setopt ALWAYS_TO_END

# Case insensitive completion
zstyle ':completion:*' matcher-list 'm:{a-zA-Z}={A-Za-z}'

# Colored completion
zstyle ':completion:*' list-colors ${(s.:.)LS_COLORS}

# ============================================================================
# MODERN TOOL INTEGRATIONS
# ============================================================================

# bat: syntax-highlighted cat replacement
alias cat='bat --paging=never'
alias catp='bat'                   # with pager (like less but with syntax highlighting)
alias batdiff='git diff --name-only --diff-filter=d | xargs bat --diff'

# Helper: cache a tool's init output, auto-regenerate when binary updates
_cache_eval() {
  local name="$1" cmd="$2"
  local cache="${XDG_CACHE_HOME:-$HOME/.cache}/${name}.zsh"
  local bin="$(whence -p "$name")"
  if [[ -n "$bin" ]] && { [[ ! -f "$cache" ]] || [[ "$bin" -nt "$cache" ]]; }; then
    eval "$cmd" > "$cache" 2>/dev/null
  fi
  [[ -f "$cache" ]] && source "$cache"
}

# mise: dev toolchain manager — loaded via shims, not hook activation
#
# WHY NOT `mise activate zsh` (hook mode):
#   Hook activation installs _mise_hook as a chpwd+precmd hook, running on
#   every prompt draw and directory change. zprof measured this at ~14ms
#   (29% of total startup). Eliminating it saved ~20ms wall-clock.
#
# WHY SHIMS:
#   Prepending ~/.local/share/mise/shims to PATH is zero-cost at startup.
#   Each shim is a small executable that invokes the right tool version on
#   first call — overhead is per-invocation, not per shell start.
#
# TRADEOFF:
#   No automatic version switching when cd-ing into a project directory.
#   Workarounds:
#     mise shell <version>     — override for current session only
#     mise use --global <ver>  — set global default
#     mise exec -- <cmd>       — run command with project versions loaded
#
# TO RE-ENABLE HOOK MODE (if per-directory switching becomes essential):
#   Replace the PATH line below with: _cache_eval mise "mise activate zsh"
#   Then: rm ~/.cache/mise.zsh && exec zsh
if command -v mise &>/dev/null; then
  export PATH="$HOME/.local/share/mise/shims:$PATH"
fi

# zoxide: smarter cd that learns from your habits (replaces OMZ z plugin)

_cache_eval zoxide 'zoxide init zsh'
alias cd='z'                       # seamless replacement, learns directories
alias cdi='zi'                     # interactive directory picker with fzf

# direnv: auto-load .envrc per directory (useful for terraform/ansible projects)
_cache_eval direnv 'direnv hook zsh'

# thefuck: correct previous command typos (type 'fuck' after a mistake)
_cache_eval thefuck 'thefuck --alias'

# lazygit: TUI for git
alias lg='lazygit'

# lazydocker: TUI for docker
alias lzd='lazydocker'

# Terraform shortcuts
alias tf='terraform'
alias tfi='terraform init'
alias tfp='terraform plan'
alias tfa='terraform apply'
alias tfs='terraform show'
alias tfo='terraform output'
alias tfv='terraform validate'
alias tfw='terraform workspace'

# Ansible shortcuts
alias ap='ansible-playbook'
alias apv='ansible-playbook --ask-vault-pass'
alias apc='ansible-playbook --check --diff'   # dry run with diff
alias av='ansible-vault'
alias ave='ansible-vault encrypt'
alias avd='ansible-vault decrypt'
alias avv='ansible-vault view'
alias al='ansible-lint'
alias ai='ansible-inventory --graph'

# gping: graphical ping
alias ping='gping'

# tldr: simplified man pages (quicker than man for common usage)
alias help='tldr'

# ncdu: interactive disk usage explorer
alias diskexplore='ncdu'

# bottom: system monitor TUI (like htop but better)
alias btm='btm'
alias sysmon='btm'

{{ if eq .chezmoi.os "darwin" -}}
# Upgrade everything: brew formulae + casks + antidote plugins in one command
brewup() {
  brew update
  brew upgrade
  brew upgrade --cask --greedy
  brew cleanup
  
  # brew cleanup deletes old antidote versions, breaking its autoload functions.
  # Re-source it so 'antidote update' works in the same shell session.
  local antidote_path="${HOMEBREW_PREFIX:-/opt/homebrew}/opt/antidote/share/antidote/antidote.zsh"
  if [[ -f "$antidote_path" ]]; then
    source "$antidote_path"
  fi
  
  antidote update
  npm install -g @fission-ai/openspec@latest
}

# Zscaler VPN controls (macOS only)
# zscaler-start: opens the Zscaler.app hidden then loads all system LaunchDaemons
#                (sudo required — daemons run as root)
# zscaler-kill:  unloads user LaunchAgents AND system LaunchDaemons, fully
#                stopping all Zscaler processes without rebooting
alias zscaler-start="open -a /Applications/Zscaler/Zscaler.app --hide; sudo find /Library/LaunchDaemons -name '*zscaler*' -exec launchctl load {} \;"
alias zscaler-kill="find /Library/LaunchAgents -name '*zscaler*' -exec launchctl unload {} \;; sudo find /Library/LaunchDaemons -name '*zscaler*' -exec launchctl unload {} \;"
{{ end -}}

# ============================================================================
# Google Cloud SDK
{{ if eq .chezmoi.os "darwin" -}}
export CLOUDSDK_PYTHON="${HOMEBREW_PREFIX:-/opt/homebrew}/bin/python3"
if [ -n "${HOMEBREW_PREFIX:-}" ] && [ -f "${HOMEBREW_PREFIX}/share/google-cloud-sdk/path.zsh.inc" ]; then
  . "${HOMEBREW_PREFIX}/share/google-cloud-sdk/path.zsh.inc"
fi
if [ -n "${HOMEBREW_PREFIX:-}" ] && [ -f "${HOMEBREW_PREFIX}/share/google-cloud-sdk/completion.zsh.inc" ]; then
  . "${HOMEBREW_PREFIX}/share/google-cloud-sdk/completion.zsh.inc"
fi
{{ else if eq .chezmoi.os "linux" -}}
export CLOUDSDK_PYTHON="/usr/bin/python3"
if [ -f '/opt/google-cloud-sdk/path.zsh.inc' ]; then
  . '/opt/google-cloud-sdk/path.zsh.inc'
fi
if [ -f '/opt/google-cloud-sdk/completion.zsh.inc' ]; then
  . '/opt/google-cloud-sdk/completion.zsh.inc'
fi
{{ end -}}
export CLOUDSDK_PYTHON_SITEPACKAGES=1


{{ if eq .chezmoi.os "darwin" -}}
test -e "${HOME}/.iterm2_shell_integration.zsh" && source "${HOME}/.iterm2_shell_integration.zsh"
{{ end -}}