auwsom · May 21, 2026 04:04
diff --git a/.bash_aliases b/.bash_aliases
 #!/bin/bash
 unalias cd 2>/dev/null
 ## WARNING: Never run a script from the internet without reading and understanding it (see last line of file).
 # These lines for importing these command aliases and functions into .bash_aliases (or .bashrc)\wget https://gist.githubusercontent.com/auwsom/fe0a7d9d9fa8140366dd02349805726b/raw/.bash_aliases -O ~/.bash_aliases && source ~/.bashrc
 # \wget https://gist.githubusercontent.com/auwsom/fe0a7d9d9fa8140366dd02349805726b/raw/.bash_aliases -O ~/.bash_aliases && source ~/.bashrc
 # wget -qO- https://gist.githubusercontent.com/auwsom/fe0a7d9d9fa8140366dd02349805726b/raw/deploy_safety.sh | bash
 # wget -qO- https://gist.githubusercontent.com/auwsom/fe0a7d9d9fa8140366dd02349805726b/raw/audit_safety.sh | bash
 # `wget https://raw.githubusercontent.com/auwsom/dotfiles/main/.bash_aliases -O ~/.bash_aliases && source ~/.bashrc`
 # `wget https://bit.ly/3EjgWdx -O ~/.bash_aliases && source ~/.bashrc` # shortened urls
 # `cp -f ~/.bash_aliases /home/user/.bash_aliases && chown user:user /home/user/.bash_aliases` #root
 # `apt install shellcheck` then run `shellcheck ~/.bash_aliases` to check this script for errors. 

 # see further down for more general Linux tips and learning sites.(width is 100 chars vs 80 default)
 # add to sudo -E visudo for cache across tabs.. Defaults:user   timestamp_timeout=30, !tty_tickets, timestamp_type=global
 echo CDPATH dirs: "$CDPATH" # to see which dirs are autofound (can be annoying with tab complete)


 true <<'END' # skips section to next END
 temp notes:
 echo "export EDITOR=vi" >> ~/.bashrc
 sudo -E visudo # no nano
 allow sudo tmux -S /home/user/shared_tmux/shared_tmux_socket attach-session # couldnt get working
 ttyd -W -p 8889 bash

 ps aux (BSD-style options)
 a – Show processes from all users.
 u – Display user-oriented output (includes user, CPU/mem usage, start time, etc.).
 x – Show processes without a controlling terminal (like daemons).
 ps -ef (UNIX-style options)
 -e – Show all processes.
 END
 alias rts="sed -i 's/[[:space:]]*$//'" # <file> remove trailing spaces on every line


 #if ! [[ $- == *i* ]]; then true "<<'ENDI'"; fi # this skips this file when running scripts
 [[ -t 0 ]] && true "<<'ENDI'" # this skips this file when running scripts
 #if [[ $- == *i* ]]; then source ~/.bashrc; fi  # Force bashrc loading for interactive shells (and scripts)

 ## basic Bash settings:
 export HISTSIZE= #11000  # history size in terminal. limits numbering and masks if list is truncated. empty is unlimited.
 export HISTFILESIZE= #11000 #$HISTSIZE  # increase history file size or just leave blank for unlimited
 if ! [[ -f ~/.bash_eternal_history ]]; then cp ~/.bash_history ~/.bash_eternal_history; fi  # if no eternal history, create by copying
 if ! [[ -f ~/.bash_history_backup ]]; then mv ~/.bash_history ~/.bash_history_backup; fi  # move the old to _bak
 if ! [[ -f ~/.bash_history ]]; then ln -s ~/.bash_eternal_history ~/.bash_history; fi  # symlink for hstr or fzf
 HISTFILE=~/.bash_eternal_history # "certain bash sessions truncate .bash_history" (like Screen) SU
 #sed -i 's,HISTFILESIZE=,HISTFILESIZE= #,' ~/.bashrc && sed -i 's,HISTSIZE=,HISTSIZE= #,' ~/.bashrc # run once for unlimited. have to clear the default setting in .bashrc
 HISTCONTROL=ignoreboth:erasedups   # no duplicate entries. ignoredups is only for consecutive. ignore both = ignoredups+ignorespace (will not record commands with space in front)
 #HISTTIMEFORMAT="%h %d %H:%M " # "%F %T " # adds unix epoch timestamp before each history: #1746739135. then "1836  May 08 14:21 cat .bash_history"
 #export HISTIGNORE="!(+(*\ *))" # ignores commands without arguments. not compatible with HISTTIMEFORMAT. should be the same as `grep -v -E "^\S+\s.*" $HISTFILE`
 export HISTIGNORE="c:cdb:cdh:cdu:df:i:h:hh:hhh:l:lll:lld:lsd:lsp:ltr::mount:umount:rebash:path:env:pd:ps1:sd:top:tree1:zr:zz:au:auu:aca:cu:cur:cx:dedup:dmesg:dli:aptli:d:flmh:flmho:flmr:fm:free:lsblk:na:netstat:ping1:wrapon:wrapoff:um:m:hdl" # :"ls *":"hg *" # ignore commands from history
 #export PROMPT_COMMAND='history -a' # ;set +m' # will save (append) unwritten history in memory every time a new shell is opened. unfortunately, it also adds duplicates before they get removed by writing to file. use cron job to erase dups. set +m makes disables job control for aliases in vi.
 #export PROMPT_COMMAND='EC=$? && history -a && test $EC -eq 1 && echo error $HISTCMD && history -d $HISTCMD && history -w' # excludes errors from history
 #export PROMPT_COMMAND='history -a ~/.bash_history_backup' # writes to backup file instead of polluting every terminal with all history. doenst work
 export HISTSIZE=-1
 export HISTFILESIZE=-1
 export PROMPT_COMMAND='history -a; history 1 | sed "s/^[ ]*[0-9]*[ ]*//" >> ~/.bash_history_backup' # writes to central backup file using history 1 for reliability
 # cat .bash_eternal_history .bash_history_bak | awk '!seen[$0]++' > .bash_history_backup # combine all # grep -Fxv -f .bash_merged_history .bash_history_bak #checks if any lines were missed. should see new cmds.
 alias h2='history | fzf' # interactive search similar to hh. sudo apt install fzf

 export LC_ALL="C" # makes ls list dotfiles before others
 dircolors -p | sed 's/;42/;01/' >| ~/.dircolors # remove directory colors
 alias vibashrc='vi ~/.bashrc' 
 alias vibasha='vi ~/.bash_aliases' 
 alias rebash='source ~/.bashrc' # `source` reloads settings. ~ home dir. just type `bash` unless in venv.
 #alias rebashl='exec bash -l' # reloads shell. -l is login shell for completion. just type `bash`.
 alias realias0='\wget https://raw.githubusercontent.com/auwsom/dotfiles/main/.bash_aliases -O ~/.bash_aliases && source ~/.bashrc' # not work when private
 # alias realias='cd ~/git/dotfiles && git fetch origin && git checkout origin/main -- .bash_aliases && cp -f .bash_aliases ~/ && source ~/.bashrc && cd -'
 alias realias='cd ~/git/dotfiles && git fetch origin && git show origin/main:.bash_aliases > ~/.bash_aliases && source ~/.bashrc && cd -'
 alias realiasr0='ba=".bash_aliases";sudo install $HOME/$ba /root/$ba && sudo chmod 0664 /root/$ba' # for root
 alias realiasr2='cd /home/user/git/dotfiles && git fetch origin && git checkout origin/main -- .bash_aliases && cp -f .bash_aliases ~/ && source ~/.bashrc'
 alias revim='rm ~/.vimrc && source ~/.bashrc' # redo vim settings. below import is blocked for existing .vimrc
 ## `shopt` list shell options. `set -o` lists settings. `set -<opt>` enables like flag options.
 #set -o noclobber  # dont let accidental > overwrite. use >| to force redirection even with noclobber
 shopt -s lastpipe; set -o monitor # (set +m). allows last pipe to affect shell; needs Job Control enabled. for the o output alias.
 shopt -s nocaseglob # ignores upper or lower case of globs (*)
 shopt -s dotglob # uses all contents both * and .* for cp, mv, etc. or use `mv /path/{.,}* /path/`
 shopt -s globstar # makes ** be recursive for directories. use lld below for non-recursive ls.
 # for using multiple shells at once. is default set in .bashrc. no good solution: is annoying bc adds noise to all tabs, but will loose commands without i, rh trap doesnt always work?
 shopt -s histappend # append to history, don't overwrite it. 
 #history -w # writes history on every new bash shell to remove duplicates
 alias ha='history -a ' # append current history before opening a new terminal.
 alias hs='history -a; history -c; history -r' # sync history from other terminals to current one.
 shopt -s histverify   # confirm bash history (!number) commands before executing. optional for beginners using bang ! commands. can also use ctrl+alt+e to expand before enter.
 if [ -f ~/.env ]; then source ~/.env ; fi # dont use this or env vars for storing secrets. create dir .env and store files in there, then call with $(cat ~/.env/mykey). see envdir below.
 #function rh { history -a;}; trap rh SIGHUP # saves history on interupt. see functions below.
 #nohist() { e=$BASH_COMMAND; history -d $HISTCMD;}; trap nohist ERR # traps error and deletes from hist before written. $e is line for reuse. ctrl-alt-e expands it. the approach below is better.
 #if [[ -f $HISTFILE ]]; then cp "$HISTFILE" "${HISTFILE}.bak"; awk '!seen[$0]++' "$HISTFILE" > "${HISTFILE}.tmp" && mv "${HISTFILE}.tmp" "$HISTFILE"; history -c; history -r; fi # dedups history on new shell.
 alias hdde='[[ -f $HISTFILE ]] && cp "$HISTFILE" "${HISTFILE}.bak3" && awk "!seen[$0]++" "$HISTFILE" >| "${HISTFILE}.tmp" && mv "${HISTFILE}.tmp" "$HISTFILE" && history -c && history -r && sed -i "/^#.*error$/d" "$HISTFILE"' # removes dups and cmds that errored
 trap 'history -a' SIGHUP # saves history on interupt. see functions below.
 IFS=$' \t\n' # restricts "internal field separator" to tab and newline. handles spaces in filenames.
 #nohist() { e=$BASH_COMMAND; history -d $HISTCMD;}; trap nohist ERR # traps error and deletes from hist before written. $e is line for reuse. ctrl-alt-e expands it. 
 echo -ne "\033[?7h" # set line wrap on


 ## some familiar keyboard shortcuts: 
 stty -ixon # this unsets the ctrl+s to stop(suspend) the terminal. (ctrl+q would start it again).
 stty intr ^S # changes the ctrl+c for interrupt process to ctrl+s, to allow modern ctrl+c for copy.
 stty susp ^Q #stty susp undef; #stty intr undef # for bind ctrl+z to undo have to remove default. https://www.computerhope.com/unix/bash/bind.htm
 [[ $- == *i* ]] && bind '"\C-Z": undo' && bind -x '"\C-c": "printf %s $READLINE_LINE | xclip -selection clipboard"' # this copies (whole line unless region selected by mouse) to desktop clipboard like modern ^c
 # bind '"\C-c": copy-region-as-kill' # use ctrl+space to start mark, then ^c to copy and then ^y to paste
 bind '"\C-f": forward-search-history'
 alias ae='echo "use alt+> for end of bash history"'


 # if [[ $- == *i* ]]; then trap '' SIGINT && bind '"\C-Z": undo' ; fi # crtl+Z (cant remap C-z yet) and alt+z (bash bind wont do ctrl+shift+key, will do alt+shift+key ^[z) \e is es (c&& bind '"\ez": yank' and alt(meta). # dont run in non-inteactive (ie vim) # (usually ctrl+/ is undo in the bash cli)
 stty lnext ^N # changes the ctrl+v for lnext to ctrl+b, to allow modern ctrl+v for paste. lnext shows the keycode of the next key typed.
 #if [[ $- == *i* ]]; then bind '"\C-f": revert-line'; fi# clear line. use ctrl-shift-c or C-c or C-\
 #[ -f ~/.xmodmaprc ] || printf $'keycode 20 = underscore minus underscore minus' > ~/.xmodmaprc && xmodmap ~/.xmodmaprc # swap minus and underscore. nearly impossible to remap ctrl-space to underscore.

 ## short abc's of common commands: (avoid one letter files or variables to avoid conflicts)
 # use \ to escape any alias. `type <command>` is in front to show it's an alias and avoid confusion.
 # cant use type in front with sudo, so same name is used only when least confusion.
 # aliases need space at end for chaining so can be used before alaised directories or files.
 # alias # unalias # extra space at end will look if the next arg is an alias for chaining
 # use `whatis` then command name for official explanation of any command. then command plus `--help` flag or `man`, `info`, `tldr` and `whatis` commands for more info on any command. or q alias below.
 # full list of shell commmands: https://www.computerhope.com/unix.htm or `ls /bin`. https://www.gnu.org/software/coreutils/manual/coreutils.html
 # list all builtins with `\help`. then `\help <builtin>` for any single one.
 #alias ag='alias | grep' # search the aliases for commands. function below shows comments too.
 #function ag(){ grep "$1" ~/.bash_aliases; }
 function ag(){ type ag | tr -d '\n'; echo; grep "$1" ~/.bash_aliases; } # make type declare one line
 alias apt="sudo apt" # also extend sudo timeout: `echo 'Defaults timestamp_timeout=360 #minutes' | sudo EDITOR='tee -a' visudo`
 alias b='bg 1' # put background job 1
 alias f='fg 1' # put foreground job 1
 alias c='clear' # clear terminal
 alias cat='cat ' # concatenate (if more than one file) and display. `tac` cat in reverse order.
 # `<` works the same as `cat` because of "redirection" in either form: `command < in | command2 > out` or `<in command | command2 > out` https://en.wikipedia.org/wiki/Cat_(Unix)#Useless_use_of_cat 
 # `cat file | tee /dev/tty | grep hello` and `< file tee /dev/tty | grep hello` and `tee /dev/tty < file | grep hello` all output the same.
 # redirect sterr and stdout to file `command 2> error.txt 1> output.txt` null `command 2> /dev/null`
 alias cdp='pushd > /dev/null ' # extra space allows aliasing directories `alias fstab='/etc/fstab '`. use `pd` to go back through dir stack.
 alias cdh='cd ~' # cd home.. just use `cd ` with one space to goto home. 
 #alias cdb='pd - ' # cd back
 alias cdb='cd -' # cd back
 alias cdu='cd ..' # change directory up
 alias cpa='type cp; cp -ar ' # achive and recursive. rsync is will show progress (not possible with cp without piping to pv). also try `install` command - copies and keeps permissions of target dir. 
 # type shows the alias to avoid confusion. but cant use type in combo with sudo.
 alias cp='cp -ir' # copy interactive to avoid cp with files unintentionally. use `find <dir> -type f -mmin -1` to find files copied in last 1 min. then add `-exec rm {} \;` once sure to delete. or `find <dir> -maxdepth 1 -type f -exec cmp -s '{}' "$destdir/{}" \; -print` can compare dirs. -a vs -R.
 function cpr { if [[ $# -eq 2 && -d "$1" ]]; then rsync -aAX --info=progress2 "${1%/}/" "$2"; else rsync -aAX --info=progress2 "$@"; fi; } # copy with progress, handles trailing slash for classic cp behavior.
 function install1 { sudo install -o "$(stat -c '%U' "$(dirname "$2")")" -g "$(stat -c '%G' "$(dirname "$2")")" "$1" "$2"; } # copies but uses target dir ownership, though doesnt set group yetv
 alias df='type df; df -h -x"squashfs"' # "disk free" human readable, will exclude show all the snap mounts
 alias du='du -hs' # human readable, summarize. 
 alias du1='\du -cd1 . | sort -n' # du --total --max-depth 1, pipe to sort numerically
 # 'echo' # print <args>. 'exit '. `printf` formatting. > writes, >> appends, >| overwrites no-clobber.
 alias fh='find . -iname' # i means case insensitive. have to use wildcards/globs * to find from partial text. have to be in double quotes (no expansion). -exec needs escaped semicolon \;
 alias fr='find / -iname' # use `tldr find` for basics. -L will follow symlinks
 alias fe='find . -iname "f" -exec echo {} \; -exec grep word {} \;' # execute command(s) on files
 alias fp='find . -path excluded -prune -o -exec echo {} \;' # find with excluded. {} = string. ; added to each line, so must be escaped from primary command.
 alias fn='find . -not -path excluded -o -exec echo {} \;' # find with excluded by not 
 alias fl='find . -cmin -10' # created last 10 min (or use ctime for days). or mmin/mtime, amin/atime
 alias fd='find . -cmin -10 -exec "\rm -r {} ;"' # find recent and delete. see above for alts.
 alias g='grep -i ' # search for text and more. "Global Regular Expressions Print" -i is case-insensitive. use -v to exclude. add mulitple with `-e <pattern>`. use `-C 3` to show 3 lines of context.
 alias i='ip -color a' # network info
 alias h='history 30'
 alias hhh='history 500' # `apt install hstr`. replaces ctrl-r with `hstr --show-configuration >> ~/.bashrc` https://github.com/dvorka/hstr. disables hide by default.
 alias hg='history | grep -i'
 function hg2 { grep -i "$1" ~/.bash_history_backup; } # searches the file accumulating from all terminal before lost by hard exit
 #alias hg2='grep -i --color=auto "$1" ~/.bash_history_backup' # CANT USE "$1" in aliases
 #alias hd='history -d -2--1 ' #not working # delete last line. `history -d -10--2` to del 9 lines from -10 to -2 inclusive, counting itself. or use space in front of command to hide. 
 alias j='jobs' # dont use much unless `ctrl+z` to stop process
 alias k='kill -9' #<id> # or `kill SIGTERM` to terminate process (or job). or `pgreg __` and then `pkill __`
 alias k1='kill %1' # kill job 1 gently
 alias kj='kill -TERM %1' # terminate job 1
 alias loc='locate --limit 5' # `apt install locate` finds common file locations fast (fstab, etc) 
 #alias ls='ls -F ' # list. F is --classify with symbols or colors. already included in most .bashrc
 #alias la='ls -A' # list all. included. 
 alias l='echo $(history -p !!) | xclip' # copies last command line to clipboard. see `o` for output.
 alias ll='ls -alFh --color=auto --group-directories-first' # "list" all, long format. included in .bashrc, added human readable. 
 alias lll='ls -alF ' # "list" all long format. full byte count. 
 alias lst='ls -trla ' # "list" long, time, reverse. bottom latest. c changed, a accessed, m modified. m is content, c is metadata.
 alias lld='ls -dlFh ' # list only directories.
 alias lsd='ls -d ' # list only directories.
 alias lsp='ls -a | xargs -I % realpath % ' # returns full paths. have to be in the directory. 
 alias lns='ln -s' # <target> <symlink>.hardlinks accumulate and dont work across disks. rm symlink wont remove underlying file. see function lnsr for reversed args
 alias mo='more ' # break output into pages. or `less`.
 #alias mf='touch' # make file. or `echo foo | tee $newfile`. `(umask 644; touch file)` to set perms
 #alias md='mkdir -p' # makes all --parents directories necessary
 alias md='install -d' # using `install` keeps same perms as parent dir and -D creates dirs
 alias mf='install -D -m 664 /dev/null' # creates needed dirs with parent perms and owns, and then file. however it makes files executable following parent dir. 
 alias mv='mv -i ' # interactive. -n for no clobber, but cant be used with -i (will not notify)
 alias mvu='install -o user -g user -D -t' # target/ dir/* # this copies while keeping target dir ownersperms and ownership. change <user>
 alias ncdu='type ncdu; ncdu -x' # disk space utility `apt install ncdu` -x exclude other filesytems.
 # alias o='eval $(history -p !!) | read v; echo v=$v' # this var only works with shopt lastpipe and set +m to disable pipe subshells. copies output to $v. 
 alias v='v=$(eval $(history -p !!))' # copies output of last command to $v. also can use xclip and xsel. works without lastpipe and set +m.
 alias p='pwd' # print present working directory
 alias path='type path; sed 's/:/\n/g' <<< "$PATH"' # list with newlines. 'echo $PATH' # show path
 #alias pd='pushd ' # a way to move through directories in a row (https://linux.101hacks.com/cd-command/dirs-pushd-popd/) ..aliased as `cd`
 alias pd='popd' # going back through the 'stack' history
 alias ps1='ps -ef' # show processes. -e/-A all. -f full.
 #alias psp='ps -o ppid= -p ' # <PID> show parent PID
 alias psp='ps -Flww -p' # <PID> show info on just one process
 alias pgrep='pgrep -af' # grep processes - full, list-full. use \pgrep for just the PID.
 alias pkill='pkill -f' # kill processed - full
 # p for pipe `|` powerful feature of shell language. transfers command output to input next command.
 alias q='helpany' # see helpany function
 alias rm='rm0 -Irv ' # -I requires confirmation. -r recursive into directories. -v verbose.
 # ^^^^^ maybe most helpful alias. avoids deleting unintended files. use -i to approve each deletion.
 function rm { type rm | tr -d '\n'; echo; mkdir -p ~/0del && mv "$@" ~/0del/; } # ~/0del is trash bin. escaping with \rm doenst work on functions, so use /usr/bin/rm or which rm).
 function rl { readlink -f "$1"; } # function returns full path of file, very useful
 # `sed` # Stream EDitor `sed -i 's/aaa/bbb/g' file` -i inplace, replace aaa with bbb. g globally. can use any char instead of /, such as `sed -i 's,aaa,bbb,' file`. -E to use re pattern matching.
 alias sudo='sudo '; alias s='sudo '; alias sd='sudo -s ' # elevate privelege for command. see `visudo` to set. And `usermod -aG sudo add`, security caution when adding.
 alias sss='eval sudo $(history -p !!)' # redo with sudo
 alias ssh='ssh -vvv ' # most verbose level
 alias sort1='sort --numeric-sort' # --human-numeric-sort. dups `sort <file> | unique -c | sort -nr`
 # `stat` will show file info including -rwxrwxrwx octet values of permissions and ownership.
 alias t='touch' # new file. see mf also.
 # `tee` allows tee-piping. eg `cat file.txt | tee /dev/tty | grep 'word' > output.txt` will both show the file and pipe it. `echo $(date) | tee file.txt` will pipe to file and output to stdout.
 alias top='htop' # `q` to exit (common in unix). htop allows deleting directly. `apt install htop`
 alias tree1='tree -h --du -L 2' #<dir>. `apt install tree`
 # `type` will show info on commands and show functions.
 alias untar='tar -xvf' # -C /target/directory ..change to dir
 alias vi='vi ' # `vimtutor` (`esc` then `:q` to quit. `ctrl+w` if type q:). (or use `nano` editor)
 #alias w='whatis' # display one-line manual page descriptions
 #alias w='whereis' # locate the binary, source, and manual page files for a...
 #alias w='which' # locate a command
 alias x='xargs ' # take last output and pipe into new command. not all commands support it
 # use `xargs -I % some-command %` to use output as non-standard argument
 alias zzr='reboot' # also `systemctl reboot`. DE `reboot -t 120`   
 alias zzz='systemctl poweroff' # also `systemctl halt` or `shutdown -H now`. halt leaves on


 ### more advanced:
 alias sz='7z x -o*' # extracts in to subdirectory
 alias szc='7z a -t7z -m0=lzma2:d1024m -mx=9 -aoa -mfb=64 -md=32m -ms=on' #<dir> <output> # highest compression or use PeaZip
 alias au='sudo apt update'
 alias auu='sudo apt update && apt -y upgrade' # show all users logged in. `last` show last logins
 alias aca='sudo df && apt clean && apt autoremove && df' # `apt remove` leaves configs, `apt purge` doesnt.
 alias aptr='apt install --reinstall' # reinstall pkg. 
 # `arp` # lists all devices on network layer 2. apt install net-tools
 alias awk1='awk "{print \"$1"}"' # print first column; end column {print $NF}; second to last $(NF-1); use single quotes when not using alias; awk more common than `cut -f1 -d " "`
 alias bc='type bc; BC_ENV_ARGS=<(echo "scale=2") \bc' # basic calculator. with 2 decimal places.
 alias cu='chown -R $USER:$USER' # change ownership to current user
 alias cur='chown -R root:root' # change ownership to root
 alias cx='chmod +x' # make executable
 alias cm='chmod -R' # change perms to rwx octet
 alias cm7='chmod -R 777' # change perms to all
 alias cmp='type cmp; cmp -b' # compares and shows different lines. no sorting needed.
 alias comm='type comm; comm -12 <(sort a.txt) <(sort b.txt)' # compares and shows all same lines of tex. `comm -12` for diffs
 alias diff='type diff; diff -y --color --brief' # compare. -y show. --brief only shows diffs.or Meld
 # date +"%D %T"(MM/DD/YY HH:MM:SS). date +%s(epoch secs). date +"%Y-%m-%d %T"(YYYY-MM-DD HH:MM:SS).
 alias dedup="tac $HISTFILE | awk '!a[\$0]++' | tac > $HISTFILE" # careful, backup first
 alias desk='kioclient exec' # in KDE will open .desktop file from CLI
 alias dmesg='type dmesg; dmesg -HTw' # messages from the kernel, human readable, timestamp, follow
 alias dmesgg='type dmesg; dmesg -HTw | grep -i' # dmesg grep. there's no option to filter by unit.
 alias dli='tac /var/log/dpkg.log | grep -i "install"' # list installed packages
 alias aptli='apt list --installed' # list installed apt packages
 alias aptlig='apt list --installed | grep -i' # list installed apt packages
 alias aptrd='apt-cache showpkg' # find dependencies in reverse. also apt-rdepends is similar.
 alias aptfbi='apt --fix-broken install' # fix 
 alias dpkgl='dpkg --listfiles' # -L package file install locations. reverse search for pkg from file `dpkg -S <file>`. `apt-files --list <pkg>` also works, but not for Snaps.
 alias dpkgli='dpkg --list | grep "^ii"' # list kernels
 alias dpkglk='dpkg --list | grep -i -E "linux-image|linux-kernel" | grep "^ii"' # list kernels
 alias dpkgll='grep -i install /var/log/dpkg.log' # list last installed
 alias dpkglis="dpkg-query -Wf '${Installed-Size}\t${Package}\n' | sort -n" # list installed by size
 alias dpkgpr='dpkg --list |grep "^rc" | cut -d " " -f 3 | xargs sudo dpkg --purge' # purge removed ^ 
 alias dpkgca='dpkg --configure -a' # use when apt install breaks. use `apt -f install` install dependencies when using `apt install debfile.deb`
 alias ds='dirs' # shows dir stack for pushd/popd
 # dbus-monitor, qdbus
 # `env` # shows environment variables
 #'fc -s' #<query> # search and redo command from history. shebang is similar !<query> or !number. fc -s [old=new] [command]   https://docs.oracle.com/cd/E19253 (fix command)
 alias fsck1='fsck -p # </dev/sdX#>' # -p auto fix. or use -y for yes to all except multiple choice.
 function flm () { find "$1" -type f -mmin -1;} # modification time
 function flmc () { find "$1" -type f -cmin -1;} # creation time. access time? amin.
 alias flmh='find . -type f -mmin -1'
 alias flmho='find ~ -type d \( -name .cache -o -name .mozilla \) -prune -o -type f -mmin -1'
 alias flmr='find / -type d \( -name proc -o -name sys -o -name dev -o -name run -o -name var -o -name media -o -name -home \) -prune -o -type f -mmin 1'
 alias fm='findmnt' # shows mountpoints as tree. shows bind mounts.
 alias free='type free; free -h' # check memory, human readable
 # head and tail: `head -1 <file>` shows the first line. defaults to 10 lines without number.
 alias gm='guestmount -i $file -a /mnt # doesnt work on qcows a lot. use gm2 function' # set file=<vm/partition-backup> first 
 function gm1 { sudo modprobe nbd max_part=8 && sudo qemu-nbd --connect=/dev/nbd0 "$1" && sudo partprobe /dev/nbd0 && sudo mount /dev/nbd0p1 /mnt; }
 function gm2 { sudo modprobe nbd max_part=8 && sudo qemu-nbd --connect=/dev/nbd1 "$1" && sudo partprobe /dev/nbd1 && sudo mount /dev/nbd1p1 /mnt2; }
 alias gm1d='sudo umount /mnt && sudo qemu-nbd --disconnect /dev/nbd0'
 alias gm2d='sudo umount /mnt2 && sudo qemu-nbd --disconnect /dev/nbd1'
 # `inotifywait -m ~/.config/ -e create -e modify` (inotify-tools), watch runs every x sec, entr runs command after file changes. use examples from bottom of `man entr` `ls *.js | entr -r node app.js`
 entr1() { ls "$1" >| temp; nohup sh -c "cat temp | entr -n cp \""$1"\" \"$2\"" </dev/null >/dev/null 2>&1 & disown; } # wentr file-in-pwd ~/destination/
 alias jo='journalctl' # -p,  -err, --list-boots, -b boot, -b -1 last boot, -r reverse, -k (kernel/dmesg), -f follow, --grep -g, --catalog -x (use error notes), -e goto end
 alias jof='journalctl -f' # --follow
 alias jor='journalctl -r' # --reverse (newest first)
 alias jobp='journalctl -b -p3' # --priority level 3 (red color) "emerg" (0), "alert" (1), "crit" (2), "err" (3), "warning" (4), "notice" (5), "info" (6), "debug" (7)
 alias jorge='journalctl -r --lines=1000 | grep -v excluded' # grep exclude word or unit
 alias jolug='journalctl --field _SYSTEMD_UNIT | grep' # list units grep. to use with `jo -u`.
 alias ku='pkill -KILL -u user' # kill another users processes. use `skill` default is TERM.
 alias launch='gio launch' # launch *.desktop files from the CLI
 alias lsblk='type lsblk; lsblk -f' # -f lists UUIDs and percent full
 alias lsof='lsof -e /run/user/*' # remove cant stat errors
 #alias lnf='ln -f' # symlink. use -f to overwrite. <target> <linkname>
 alias na='netplan apply'
 alias netstat='type netstat; netstat -tunapl' # --tcp --udp --numeric --all --program --listening
 alias nmap1='nmap -sn 192.168.1.0/24' # maps open ports on a network
 alias pegrep='grep -P' # PCRE grep https://stackoverflow.com/a/67943782/4240654
 alias perl='type perl; perl -p -i -e' # loop through stdin lines. in-place. use as command. https://stackoverflow.com/questions/6302025/perl-flags-pe-pi-p-w-d-i-t
 alias ping1='type ping; ping -c 3 8.8.8.8' # ping test. count 3. google ip.
 alias pip='type pip; pip3 --verbose'
 #alias pipd='pip --download -d /media/user/data' 
 #alias pstree='pstree' # shows what started a process
 alias py='type py; python3' 
 alias ra='read -a' # reads into array/list. read var defaults to $REPLY in Bash. 
 # use `realpath` for piping absolute file path to cat. 
 alias rkonsole='/home/user/.config/autostart-scripts/konsole_watcher.sh restore' # restore tabs
 alias rplasma='pkill plasmashell && plasmashell &' # restart plasmashell in KDE Kubuntu
 alias rvmm='pkill virt-manager && sys restart libvirtd' # restart VMM. doenst stop runnning VMs
 # `sha256sum` hash generation
 alias sys='systemctl' # `enable --now` will enable and start 
 alias sysf='systemctl --failed' # list failed services. `systemctl reset-failed` 
 alias sysl='systemctl list-unit-files' # lists services
 alias syslg='systemctl list-unit-files | grep' # list grep services
 alias tc='truncate -s' # <size, eg 10G> creates dynamic file; format with mkfs.ext4; `ls -s` to show true size on disk.  
 alias tc0='truncate -s 0' # reset file with zeros to wipe. also use wipe -qr.
 # `traceroute -U www.google.com` or tracepath (without root).
 # tty will show current terminal. then can redirect to it with > /dev/tty<number>
 alias u='users' # show all users logged in. `last` show last logins
 alias uname1='uname -a' # show all kernel info 
 alias uname2='uname -r' # show kernel version
 alias uirf='update-initramfs' # update kernel
 alias urel='cat /etc/os-release' # show OS info
 #alias w='w' # Show who is logged on and what they are doing. Or `who`.
 alias vi='vim'
 alias wdf='watch \df' # refresh command output every 2s 
 alias wdu='watch du -cd1 .' # or `watch du -s <dir>` or `watch '\du -cd1 . | sort -n'`
 alias wget='type wget; wget --continue --progress=bar:force --no-clobber --content-disposition --trust-server-names' # -N overwrites only if newer file and disables timestamping # or curl to download webfile (curl -JLO)
 alias wrapon='echo -ne "\033[?7h"' # line wrap on (by default)
 alias wrapoff='echo -ne "\033[?7l"' # line wrap off
 alias xc='xclip -selection clipboard' # apt install xclip
 alias zzzr='shutdown -r now || true' # reboot in ssh, otherwise freezes
 alias zzzs='shutdown -h now || true' # shutdown in ssh, otherwise freezes
 # correct common typos
 alias unmount='umount' ; alias um='umount' ; alias mounts='mount' ; alias m='type m; printf "\033[?7l"; mount | g -v -e cgroup -e fs; printf "\033[?7h"' ; alias ma='mount -a' ; alias mg='mount | grep'; alias mr='mount -o remount,rw'; 
 alias umf='sudo umount -l' # unmount lazy works when force doesnt # also `fuser -m /media/user/dir` will list PIDs
 # change tty term from cli: `chvt 2`
 # https://itnext.io/what-is-linux-keyring-gnome-keyring-secret-service-and-d-bus-349df9411e67 
 # encrypt files with `gpg -c`
 if [[ $(whoami) == 'root' ]]; then export TMOUT=18000 && readonly TMOUT; fi # timeout root login
 # `sudo echo foo > /rootfile` errors.. so `echo foo | sudo tee /rootfile`. sudo doesnt pass redirect
 # other admin commands: last, w, who, whoami, users, login, uptime, free -th, mpstat, iostat, bashtop, ssh, lsof, lspci, dmesg, dbus, strace, scp, file

 ## extra stuff
 # `!!` for last command, as in `sudo !!`. `ctrl+alt+e` expand works here. `!-1:-1` for second to last arg in last command.
 # `vi $(!!)` to use output of last command. or use backticks: vi `!!`
 # `declare -f <function>` will show it
 set -a # sets for export to env the following functions, for calling in scripts and subshells (aliases dont get called).
 function hdn { history -d "$1"; history -w;} # delete history line number
 # function hdl { history -d $(($HISTCMD - 1)); history -w;} # delete history last number
 function hdl { history -d $HISTCMD; history -w;} # delete history last number
 function hdln { history -d $(($HISTCMD - "$1" -1))-$(($HISTCMD - 2)); history -w;} # delete last n lines. (add 1 for this command) (history -d -"$1"--1; has error)
 function help { "$1" --help;} # use `\help` to disable the function alias
 function q { "$1" --help || help "$1" || man "$1" || info "$1";} # use any help doc. # also tldr. 
 command_not_found_handle2() { [ $# -eq 0 ] && command -v "$1" > /dev/null 2>&1 && "$1" --help || command "$@"; } # adds --help to all commands that need a parameter. or use below to exclude certain ones.
 #command_not_found_handle() { local excluded_commands=("ls" "cd" "pwd"); if [ $# -eq 0 ] && command -v "$1" > /dev/null 2>&1; then [[ ! " ${excluded_commands[@]} " =~ " "$1" " ]] && "$1" --help || command "$1"; else command "$@"; fi }
 function lnst { dir="$1"; lastdir="${dir##*/}"; sudo ln -s $2/$lastdir "$1";} # ln -st?
 function lnsr { ln -s "$2" "$1";} # symlink reversed using arg order from cp or mv
 function ren { mv "$1" "$1""$2";} # rename file just add ending, eg file to file1.
 function sudov { while true; do sudo -v; sleep 360; done;} # will grant sudo 'for 60 minutes
 function addpath { export PATH="$1:$PATH";} # add to path
 function addpathp { echo "PATH="$1':$PATH' >> ~/.profile;} # add to path permanently
 function cmtf { while IFS= read -r line; do echo "${1:-#} $line"; done;}
 alias cmt='while read -r line; do echo "# $line"; done;' # IFS is set above.
 alias ucmt='while read -r line; do echo "${line/\#\ /}"; done;' # IFS is set above.
 shopt -s expand_aliases # default? expands aliases in non-interactive (scripts and Vim calls)
 function aw { echo "$1" >> ~/.bash_aliases;} # alias write
 set +a # end of `set -a` above
 # `unset -f foo`; or `unset -f` to remove all functions
 export CDPATH=".:/home/user:/media/user:/media/root" # can cd to any dir in user home from anywhere just by `cd Documents`
 #export CDPATH=".:/etc" # just type `cd grub.d`
 #export CDPATH=".:/" # could use at root to remove need for typing lead /, but could cause confusion
 export VISUAL='vi' # export EDITOR='vi' is for old line editors like ed
 export EDITOR='vi' # set default editor to vi for crontab, git, etc.
 # dont use single quotes when setting `export PATH="_:$PATH"`. single quotes no parameter expansion.
 # export TERM='xterm' # makes vim use End and Home keys. but only vt220 on ubuntu cloud image

 useragent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.79 Safari/537.1 Lynx"
 #function ? { lynx "https://lite.duckduckgo.com/lite?kd=-1&kp=-1&q=$(urlencode "$*")";} # cli search. needs `apt install gridsite-clients` for urlencode
 function ? { python3 -c "import openai; openai.api_key = '${OPENAI_API_KEY}'; response = openai.chat.completions.create(model='gpt-4o-mini', \
 messages=[{'role': 'user', 'content': '$*'}]); print(response.choices[0].message.content)";} # pip install openai --break-system-packages (vs need venv)
 function ?? { python3 -c "from anthropic import Anthropic; anthropic = Anthropic(api_key='$ANTHROPIC_API_KEY'); \
 message = anthropic.messages.create(model='claude-3-5-haiku-latest',max_tokens=1000,messages=[{'role': 'user','content': '$*'}]); print(message.content[0].text)"; } # pip install anthropic --break-system-packages
 function ??? { python3 -c "import openai; openai.api_key = '${OPENAI_API_KEY}'; response = openai.chat.completions.create(model='gpt-4o', \
 messages=[{'role': 'user', 'content': '$*'}]); print(response.choices[0].message.content)";} # pip install openai --break-system-packages (vs need venv)
 function ???? { python3 -c "from anthropic import Anthropic; anthropic = Anthropic(api_key='$ANTHROPIC_API_KEY'); \
 message = anthropic.messages.create(model='claude-3-5-haiku-latest',max_tokens=1000,messages=[{'role': 'user','content': '$*'}]); print(message.content[0].text)"; } # pip install anthropic --break-system-packages


 ## key bindings. custom emacs. or use `set -o vi` for vim bindings. `set -o emacs` to reverse.
 # bind -p # will list all current key bindings. https://www.computerhope.com/unix/bash/bind.htm
 # ***very helpful*** press `ctrl+alt+e` to expand the symbol!!!!!!!!!!  
 # `bind -r <keycode>` to remove. use ctrl+V (lnext) to use key normally. https://en.wikipedia.org/wiki/ANSI_escape_code
 #if [[ $- == *i* ]]; then bind '"\\\\": "|"'; fi # quick shortcut to | pipe key. double slash key `\\` (two of the 4 slashes are escape chars)
 if [[ $- == *i* ]]; then bind '",,": "!$"'; fi # easy way to get last argument from last line. can expand. delete $ for ! bang commands. # handy but use alt+. instead
 #if [[ $- == *i* ]]; then bind '"..": "$"'; fi # quick shortcut to $ key. 
 #if [[ $- == *i* ]]; then bind '".,": "$"'; fi # quick $
 if [[ $- == *i* ]]; then bind '",.": "$"'; fi # quick $
 #if [[ $- == *i* ]]; then bind '"..": shell-expand-line'; fi # easy `ctrl+alt+e` expand
 #if [[ $- == *i* ]]; then bind '".,": "$(!!)"'; fi # easy way to add last output. can expand
 #if [[ $- == *i* ]]; then bind '"///": reverse-search-history'; fi # easy ctrl+r for history search.
 #if [[ $- == *i* ]]; then bind '\C-Q: shell-kill-word'; fi # crtl+q is erase forward one word. (ctrl+a, ctrl+q to change first command on line)
 #bind 'set show-all-if-ambiguous on' # makes only one Tab necessary to show completion possibilities


 true <<'END' 
 CLI emacs mode common keys (Control, Meta(Esc-then-key)=alt/option, Super=win/command, fn):
 alt-. for last word from history lines. ctrl-alt-t to transpose 2 words. 
 press `ctrl+alt+e` to expand symbols to show them, such as `!!`
 clear line: `ctrl+e`,`ctrl+u` goto end then clear to left, (or ctrl+a, ctrl+k)
 cut word backward `ctrl w`, paste that word `ctrl y`, use `alt d` to cut word forward
 undo like this : `ctrl+_` (or `ctrl-/` or `ctrl-z` from bindings here)
 kill runaway process: `ctrl+c`, `ctrl+\`, `ctrl+d` (exit current shell), ctrl+z is remapped to undo.
 search history, reverse (type afterward): `ctrl+r`, go forward `ctrl+f`. `ctrl+g` cancels. `alt+>` go back to history bottom.
 C-x,C-e exec line. C-o to process an reenter line. 
 https://dokumen.tips/documents/macintosh-terminal-pocket-guide.html?page=42 (vi/emacs keys table, broken link to Orielly's book)
 https://dokumen.pub/qdownload/macintosh-terminal-pocket-guide-take-command-of-your-mac-1nbsped-1449328342-9781449328344.html  pg 36

 basic bash system commands:
 `fdisk -l` # partition table list. also see `cfdisk` for changing
 `blkid` # block id
 `lsblk` # list block `lsblk --output UUID /dev/sda1`
 `mount` # list mounts. or `findmnt` list as tree
 `ncdu -x /` # `apt install ncdu` to find disk usage to delete when full
 `kill -9 <pid>` `kill -TERM <pid>` `pidof <> | xargs kill` `pkill` to kill processes
 `systemctl status | grep`   # systemctl is the current process manager using services
 `uname -a`   # get quick system info
 `cat /etc/*release`   # get kernel info
 `dircolors -p | sed 's/;42/;01/' >| ~/.dircolors`   # if you need to remove colorization
 file stats including creation time if available: `stat`
 terminal key shortcuts: `stty -a`
 apt: `remove` uninstalls. `purge` deletes config except in home dir. `autoremove` deletes unused.    
 apt -s, --simulate, --just-print, --dry-run, --recon, --no-act = No action; perform a simulation..
 `apt show <package>` shows size, unlike simulate, before install (sizes not same as in apt install)

 Bash Manual (`man bash`) https://www.gnu.org/software/bash/manual/html_node/index.html#SEC_Contents 
 Conditional Expressions: (`man test` or `man bash` and search with / for "comparsion"): `if [ <> ];then <>;fi`. Use double [[ ]] to disable expansion and wont fail if var is empty. `test 1 -eq 2 && echo true || echo false` is same as `[ 1 -eq 2 ] && echo true || echo false]`
 Pattern Matching: `man bash` then search `/pattern` and `man regex` https://www.gnu.org/software/bash/manual/html_node/Pattern-Matching.html
 Quoting, Shell Expansions: Brace, Tilde, Parameter Expansion (substrings, etc), Command Substitution, Arithmetic,, Redirections, Builtins. https://www.gnu.org/software/bash/manual/html_node/Shell-Parameter-Expansion.html https://opensource.com/article/17/6/bash-parameter-expansion

 for i in {1..5}; do echo $i; done
 while true; do echo $var; sleep 300; done
 echo text | tee test{1,2,3}; cat test* 
 if [[ -e test1 || $(cat file) == "text" ]]; then echo yes; fi
 first line for scripts: #!/bin/bash -Cex; shellcheck "$0" #no-clobber, exit on error, debugging.
 put scripts in /usr/local/bin and the can be used in Vim

 https://www.gnu.org/software/bash/manual/html_node/Special-Parameters.html
    "$1", $2, $3, ... are the positional parameters.
    "$@" is an array-like construct of all positional parameters, {"$1", $2, $3 ...}.
    "$*" is the IFS expansion of all positional parameters, "$1" $2 $3 ....
    $# is the number of positional parameters.
    $- current options set for the shell.
    $$ pid of the current shell (not subshell).
    $_ most recent parameter (or command path to start the current shell immediately after startup).
    $IFS is the (input) field separator.
    $? is the most recent foreground pipeline exit status.
    $! is the PID of the most recent background command.
    $0 is the name of the shell or shell script.
 https://www.gnu.org/software/bash/manual/html_node/Bash-Variables.html (just fyi)
 https://www.cherryservers.com/blog/a-complete-guide-to-linux-bash-history 
 !!,!N,!-N,!<cmd>,!^,!$,!:N,!:*,!-1:0,!^aa^bb,!:s/aa/bb,:p,:h,:t,:r

 https://tldp.org
 learnshell.org
 linuxcommand.org
 https://linux.101hacks.com/toc/ CDPATH info
 https://dokumen.tips/documents/macintosh-terminal-pocket-guide.html (has great Vim to Emacs compare)
 END

 ## common dirs and files:
 alias el='env | egrep '^[a-z].*=.*' | sort' # list env var exports below
 shopt -s cdable_vars # dirs exportable.
 export alias1='$HOME/.bash_aliases'
 export fstab1='/etc/fstab' # mounts volumes
 export passwd1='/etc/passwd' # controls user perms
 export group1='/etc/group' # groups
 export sudoers1='/etc/sudoers' # sudo settings
 export grub1='/etc/default/grub' # grub file
 export grubd1='/etc/default/grub.d/' # other grub files
 export sources1='/etc/apt/sources.list' # sources file for apt
 export sourcesd1='/etc/apt/sources.list.d/' # other sources files
 export crontab1='/etc/crontab' # runs /etc/cron.daily and /etc/cron.hourly. `crontab -e` is official /var/spool/cron/crontabs/root 
 export crondd1='/etc/cron.d/' # other cron files 
 export crond1='/etc/cron.daily' # file run daily
 export cronh1='/etc/cron.hourly' #
 export cronw1='/etc/cron.weekly' #
 export cronm1='/etc/cron.monthly' #
 export resolv1='/etc/resolv.conf' # DNS info
 export hosts1='/etc/hosts' # maps domain names to IPs
 export hostname1='/etc/hostname' # sets hostname. also a command
 export log1='/var/log/' # logs: syslog auth.log boot.log lastlog
 #export netman='/etc/network/interfaces' # `man interfaces`. use netplan instead.
 export netplan1='/etc/netplan/01-netcfg.yaml' # add `optional: true` under ethernets: interface: to prevent boot waiting on network
 export known1='$HOME/.ssh/known_hosts' # rm this to remove unused store ssh connections
 export mailr1='/var/mail/root ' # mail file
 export osr1='/etc/os-release' # os names
 export sysd1='/etc/systemd/system/multi-user.target.wants' # services startup
 export home1='/home/user' # also $HOME
 export bin1='/usr/local/bin' # user scripts dir
 export h="--help" # can use like `bash $h` = `bash --help` (or man bash)
 alias eg="env | grep 1=" # grep above env vars
 # /etc/skel has default user home files
 # /var/cache/apt/archives/ (use apt clean?) visudo
 # /proc/cmdline, /dev/disk/by-id (etc), /proc, /dev, /media/user, /home/user
 # `locate *.desktop` to find appls # `locate *.desktop | grep -v usr` shows program shortcuts location. also: https://askubuntu.com/questions/5172/running-a-desktop-file-in-the-terminal
 # run .desktop files with dex, gtklaunch or kioclient exec https://askubuntu.com/a/1114798/795299

 ## basic settings:
 # be careful of your filesystem filling up space as it will freeze your OS.. ways to deal with that: create a large dummy file that can be erased, like swapfile, `echo 'SystemMaxUse=200M' >> journald.conf` then limit /tmp and /home. `dd if=/dev/zero of=/swapfile bs=1024K count=250 && chmod 0600 /swapfile && swapon /swapfile` dont use fallocate or truncate to create swapfile.. has to be continuous.
 # use `sudo -s` to elevate user but stay in same user environment (history and bashrc prefs). 
 # add user to sudo group: `usermod -aG sudo user` to protect root user (can remove indiv priveleges)
 # careful with changing all permissions to 777: https://superuser.com/questions/132891/how-to-reset-folder-permissions-to-their-default-in-ubuntu
 # envdir or direnv for storing project secrets safely. DONT store them in a GitHub repo (.gitignore) http://thedjbway.b0llix.net/daemontools/envdir.html and python os.environ['HOME']

 ## basic vim settings: 
 #if ! [[ -f ~/.vimrc ]]; then   # CHANGE THIS LINE IF YOU DONT WANT VIMRC CHANGED!
 if [[ -f ~/.vimrc ]]; then   # 
 echo -e '
 set nocompatible
 set showmode
 set whichwrap+=<,>,h,l,[,] "arrow key wraparound"
 "set number   "set nonumber" "set nu" "set nonu"
 set autowrite
 set autoindent
 set ruler "set ru"
 set wrapscan 
 set nohlsearch "remove no for highlighting"
 autocmd InsertEnter,InsertLeave * set cul!
 "remember editing position after close"
 if has("autocmd")
 au BufReadPost * if line("'\''\"") > 0 && line("'\''\"") <= line("$") | exe "normal! g`\"" | endif
 endif
 set autowrite "save before run, also when changing buffer"
 "run script in normal mode - can add <enter>, but will skip past result 
 nnoremap <F5> :!clear && %:p
 "in insert mode too"
 inoremap <F5> <esc>:!clear && %:p
 let $BASH_ENV = "~/.bash_aliases" "<--to use functions or aliases in vi. `shopt -s expand_aliases` in .bashrc also for aliased"
 "set list " shows hidden characters
 "set ruf " ruler format
 set tabstop=4       " The width of a TAB is set to 4.
 set shiftwidth=4    " Indents will have a width of 4
 set softtabstop=4   " Sets the number of columns for a TAB
 set expandtab       " Expand TABs to spaces
 set shell=/bin/bash
 "nnoremap=normal mode. remap vs map disables inf loop btw vars. toggle search highligh. or use :noh"
 nnoremap <F3> :set hlsearch!<CR> 
 "cnoremap=commandmode. use sudo to write file"
 cnoremap w!! execute "silent! write !sudo tee % > /dev/null" <bar> edit!
 "vnoremap=visual mode. comment lines selected with v or V (full lines). or use :norm i#
 "comment" 
 nnoremap <F4> :s/^/# <CR>:set hlsearch!<CR> 
 vnoremap <F4> :s/^/# <CR>
 "uncomment"
 nnoremap <F6> :s/^# //<CR> 
 vnoremap <F6> :s/^# //<CR>   
 "save" 
 nnoremap <c-s> :w<CR> 
 inoremap <c-s> <esc>:w<CR> 
 "save and quit"
 nnoremap <c-q>q :wq<CR> 
 inoremap <c-q>q <esc>:wq<CR> 
 "quit"
 nnoremap <c-q> :q<CR> 
 inoremap <c-q> <esc>:wq<CR> 
 inoremap <c-z> <esc>:undo<CR>
 inoremap ii <esc>i
 inoremap jj <esc>
 nnoremap <C-s> :w<CR> " Remap :w to Ctrl-S
 nnoremap <C-z> :q<CR> " Remap :q to Ctrl-Z
 command Wq wq
 command WQ wq
 command W w
 command Q q
 ' >| ~/.vimrc   # > to not overwrite or >> to append
 fi
 # indent is >> and <<. in visual mode too. use 3>> for multiple levels.

 ## basic vim commands: https://gist.github.com/auwsom/78c837fde60fe36159ee89e4e29ed6f1
 # https://rwxrob.github.io/vi-help/ https://www.keycdn.com/blog/vim-commands
 # paste normally use capital P. deindent ctrl-D. ctrl-o goes to prev edit. crtl-i to next.
 # `:e <filename>` to open file or `:e .` to browse directory 
 # `:!bash %` to run script from within vim
 # find and replace: `:%s/baz/boz/gc` c confirms. or use any char instead of / like , `:%s,baz,boz,g`
 # vim tabs: (open multiple files or open more from inside vim) then `gt` and `gT` for forward/back, `2gt`, `:tabs` list
 # more ideas: https://github.com/amix/vimrc, https://github.com/rwxrob/dot/blob/main/vim/.vimrc
 # https://github.com/tpope/vim-sensible 
 # q: opens Command Line Window. :q closes it.
 # type `!!` and `cmt` to run this alias/function/script on the line (:.!cmt), or !} on a paragraph (:.,$!cmt) or with line numbers (:3,5!cmt), or use Visual mode crtl-V (:'<,'>!cmt)
 # `@:` repeats last command, like `:s/aa/bb/`. also up arrow history. `.` repeats last action.
 # ctrl-w,n new viewport. ctrl-w,ctrl-w or arrow toggle. crtl-w,c to close. :Explore file mgr.
 # https://vim.fandom.com/wiki/Mapping_keys_in_Vim_-_Tutorial_(Part_2)#Finding_unused_keys
 # https://webdevetc.com/blog/tabs-in-vim/ use Tmux or Konsole
 # remap Capslock to Esc (original postion). http://www.vimgenius.com/ 
 # :1 uses Ex in Command mode to goto line 1. % stands for current document.
 # search-centric: type action then / Enter to apply to before next char. eg `d/}` deletes up to }.

 ## screen   ctrl-a instead of ctrl-b in tmux, remapped below. 
 #[[ "$TERM" == "screen" ]] && [[ -f ~/.bash_aliases ]] && source ~/.bash_aliases # Load aliases for interactive shells and screen sessions # unneeded for tmux
 [[ ! -f ~/.screenrc ]] && echo "startup_message off" > ~/.screenrc
 alias ss='screen'
 alias ssls='screen -ls'
 alias sr='screen -r'
 alias sst='screen -ls | awk '"'"'NR>1 {session="$1"; gsub("\\.", " ", session); print "title: "session";; command: screen -r "session";;"}'"'"' >| tabs-config && konsole --tabs-from-file tabs-config' # opens all screen sessions in konsole new tabs
 [[ ! -f ~/.screenrc ]] && cat <<EOF > ~/.screenrc #heredoc less escapes
 startup_message off
 #escape ^[[ # try to use Esc for prefix
 #escape ^A # Remap prefix.
 #bind k source ~/.screenrc # Reload config.
 #bind c screen # New window.
 #bind k kill # Kill window.
 #bind ^[[1;2C next # Shift+right.
 #bind ^[[1;2D prev # Shift+left.
 #bind ^[[OA prev # alt+up.
 #bind ^[[OB next # alt+down.
 #bind ^S paste . # Ctrl+s.
 #bind | split -h # Split horizontal.
 #bind \\ split -h # Split horizontal.
 #bind ^\\ split -h # Split horizontal.
 #bind - split -v # Split vertical.
 #bind _ split -v # Split vertical.
 #bind ^[[1;5A resize +1 # Ctrl+up.
 #bind ^[[1;5B resize -1 # Ctrl+down.
 #bind ^[[1;5C resize +1 # Ctrl+right.
 #bind ^[[1;5D resize -1 # Ctrl+left.
 #bind ^[[1;5k focus up # Ctrl+k.
 #bind ^[[1;5j focus down # Ctrl+j.
 #bind ^[[1;5h focus left # Ctrl+h.
 #bind ^[[1;5l focus right # Ctrl+l.
 #bind a focus last # Last window.
 #hardstatus alwayslastline "%{= kw}%?%-Lw%?%{r}(%{W%n%w%{-r}}%{r})%{w}%?%+Lw%?%?%=%c" # Status line.
 EOF

 ## tmux  
 alias tt='tmux'
 alias tta='tmux attach' # use this instead of ttt and use plugins to restore tabs
 alias ttat='tmux attach -t' # <session> attach to session name
 alias ttls='tmux ls'
 alias ttnd='tmux new -d'
 alias ttks='tmux kill-server'
 alias ttkw='tmux kill-window'
 alias ttt='tmux ls | awk -F: '"'"'{print "title: " "$1" ";; command: tmux attach-session -t " "$1" ";;"}'"'"' >| tabs-config && konsole --tabs-from-file tabs-config &' # opens all tmux sessions in konsole new tabs
 #/usr/bin/tmux new-session -c $PWD #/usr/bin/bash -c "tmux new-session -c $PWD" # konsole new tab commands 
 alias tts='tmux run-shell ~/.tmux/plugins/tmux-resurrect/scripts/save.sh'
 alias ttr='tmux run-shell ~/.tmux/plugins/tmux-resurrect/scripts/restore.sh'

 [[ ! -d ~/.tmux/plugins/tpm ]] && git clone https://github.com/tmux-plugins/tpm ~/.tmux/plugins/tpm 
 # tmux a # to attach (start) old session. C-a,d to detach. C-a,x to close. C-a,: for command mode
 # 'C-a,[' for copy mode, q to quit, space to start selection, enter to copy, 'C-a,]' to paste 
 # git clone https://github.com/tmux-plugins/tpm ~/.tmux/plugins/tpm 
 # C-b + I (shift+i) to install plugins with tpm. or use bash cmd below. 
 #if ! [[ -f ~/.tmux.conf ]]; then echo -e '

 #heredoc less escapes
 [[ ! -f ~/.tmux.conf ]] && cat <<EOF > ~/.tmux.conf

 # bind same as bind-key. bind -r is repeatable, -n is no-prefix, -T is key-table (root, prefix, copy-mode, copy-mode-vi, pane, window, etc.)
 # set -g is global
 # run-shell 'tmux display-message "Loading ~/.tmux.conf"' 2>/dev/null #does work
 display "start message.." # cleaner start message. does not show on reload. only after kill-session.
 # dfvadfv # this will show error on reload. press enter to clear.
 # dfvadfv2 # this will be blocked from loading if above line errors.
 # set -g history-file /tmp/tmux_history.log
 #cat tmux-client-2853109.log tmux -vv?
 bind r source-file ~/.tmux.conf \; display "Config reloaded1"; # reload configuration
 # unbind C-a;
 set -g prefix C-a; # change default prefix to match Screen's

 set -g terminal-overrides 'xterm*:smcup@:rmcup@' # must have scrollbar activated in konsole before shift+pageup works in tmux
 set -g history-limit 10000
 bind-key -n PageUp send-keys -X scroll-up
 bind-key -n PageDown send-keys -X scroll-down
 set -g mouse on


 # Hardware/Keyboard -> Terminal Driver (stty) -> Terminal Emulator -> Readline (Bash) -> Application (Emacs, Vim, Tmux) # Many of Readline key bindings are based on Emacs like ctrl-k for kill-line.
 # if-shell 'test -n ""' 'set mouse on' # set mouse on; # makes error 'no current session'
 # set-hook -g after-new-session 'set mouse on' # 'set mouse on' allows scrolling and pane resize and hold shift to select text
 # -g is global. -r makes repeatable for pane resizing
 set -g @plugin "tmux-plugins/tpm" # plugin mgr. !press prefix (Ctrl+a) then capitol I to install plugin
 set -g @plugin "tmux-plugins/tmux-continuum" # test with:
 set -g @plugin "tmux-plugins/tmux-resurrect" # default prefix+C-s, prefix+C-r  to save and restore
 # set -g @plugin 'ofirgall/tmux-browser'
 # set -g @plugin 'tmux-plugins/tmux-yank' # unneeded with copy settings below
 # set -g @plugin "tmux-plugins/tmux-sensible" # a list of 'sane' settings
 # run '~/.tmux/plugins/tpm/tpm'
 # # Must be below plugins! stops writing to .tmux.conf so run that in bash and then
 # if fatal: destination path '/home/user/.tmux/plugins/tpm', mv ~/.tmux/plugins/tpm
 # set -g @resurrect-dir '~/.tmux' # ~/.local/share/tmux/resurrect/ is default
 set -g @resurrect-processes ':all:'  # Restore all processes
 set -g @resurrect-capture-pane-contents 'on'
 set -g @continuum-restore 'on'
 set -g @continuum-save-interval '1'  # Save every x (15) minutes NOT WORKING
 # set -g @resurrect-hook-pre-restore-all 'tmux kill-session -a'

 bind-key C-Z display "test ctrl shift Z"
 unbind-key C-s
 bind-key C-e run-shell "~/.tmux/plugins/tmux-resurrect/scripts/save.sh" \; display "saved";
 bind-key C-r run-shell "~/.tmux/plugins/tmux-resurrect/scripts/restore.sh" \; display "restored";
 set -g status-position top # tabs at top
 set -g status-style "fg=#665c54"; set -g status-bg default;
 # set -g status off;
 # bind is same as bind-key
 # #bind Escape cancel # doesnt work, just use Enter
 bind c new-window -c "#{pane_current_path}"
 bind k kill-window; bind q kill-session; # kill current window and all panes like screen. tmux default is "Ctrl-&". prefix,w is window mgr with : cmds.bind-key -n C-Left previous-window
 # bind -n "\e[1;2C" next-window # shift+right
 # bind -n "\e[1;2D" previous-window # shift-left
 unbind-key Right
 unbind-key Left
 bind -r Right next-window
 bind -r Left previous-window
 # bind-key -T root C-y \; display "Config reloaded2"; # blocks tmux-yank

 # unbind [
 bind C-s copy-mode  # Bind prefix-_ to enter copy mode
 # bind C-c copy-buffer # unknown
 bind C-v paste-buffer
 # bind -T copy-mode MouseDragEnd1Pane send -X copy-selection "xclip -selection clipboard -in"
 # set -g set-clipboard on
 # bind-key C-y run-shell "tmux show-buffer | xclip -selection clipboard"
 # bind-key -n C-y run "tmux paste-buffer"

 bind -T copy-mode-vi Enter send-keys -X copy-selection-and-cancel \;
 #run-shell -b "tmux show-buffer | xclip -selection clipboard"
 # copy mode nav: ? (up) / (down) n p w b g G
 bind p send-keys -X previous-search  # p still not working
 # setw -g mode-keys vi
 ### normal C-y copy buffer after C-eu is broken
 # shift+mouse sel goes to C-c C-v, mouse sel goes to C-y but includes CRs
 # bind-key C-y run-shell -b 'tmux show-buffer | head -c -1 | tmux load-buffer - ; tmux paste-buffer'  # no CR with C-y
 # bind-key C-c run-shell 'tmux show-buffer | xsel --clipboard --input' # does work with xsel

 # bind-key C-y run-shell -b 'tmux show-buffer | xclip -selection clipboard'
 bind-key C-a send-keys C-a
 # bind-key -n C-b send-keys C-a
 bind C-y send-keys C-y # bash kill ring (removed text)
 # prefix then pageup scrolls up
 unbind -n PageUp
 bind PageUp send-keys PageUp
 unbind -n PageDown
 bind PageDown send-keys PageDown


 # Configured by Rob Muhlestein (linktr.ee/rwxrob); # This file is copyright free (public domain).
 # Meta Key and Pane Sync (wget https://raw.githubusercontent.com/rwxrob/dot/main/tmux/.tmux.conf)
 #setw -g modes vi; # vi for copy mode
 #set -g status vi; # vi for command status
 #bind -r y setw synchronize-panes; # input in one pane is mirrored ? ctrl+y is paste in emacs
 # # override Enter in copy-mode to write selected text to /tmp/buf (to vim) for yyy/ppp
 # unbind -T copy-mode Enter; unbind -T copy-mode-vi Enter;
 # bind -T copy-mode Enter sends -X copy-selection-and-cancel \; save-buffer /tmp/buf; bind -T copy-mode-vi Enter sends -X copy-selection-and-cancel \; save-buffer /tmp/buf;
 #bind a last-window; #bind C-a last-window; # add double-tap meta key to toggle last window
 # bind -n C-y send-prefix; # use a different prefix for nested
 # pane colors and display
 # unbind |; bind | split-window -h; bind '\' split-window -h; bind 'C-\' split-window -h; unbind -; bind - split-window -v; unbind _; bind _ split-window -v; # create more intuitive split key combos (same as modern screen)
 bind -r C-k resize-pane -U 1; bind -r C-j resize-pane -D 1; bind -r C-h resize-pane -L 1; bind -r C-l resize-pane -R 1; # vi keys to resize
 # vi keys to navigate panes
 bind -r k select-pane -U; bind -r j select-pane -D; bind -r h select-pane -L; bind -r l select-pane -R;
 # avoid cursor movement messing with resize, clock.
 # set -g repeat-time 200;
 set -g clock-mode-style 12; set -g clock-mode-colour yellow; set -g base-index 1; setw -g pane-base-index 1;
 # color the pane borders nearly invisible (when not using hacked tmux without them)
 set -g pane-border-style "fg=#171717"; set -g pane-active-border-style "fg=#171717";
 set -g status-interval 1; set -g status-left ""; set -g status-right-length 50; set -g message-style "fg=red"; #set -g status-right "#(pomo)";
 # set -g window-status-current-format "";
 set -g automatic-rename; set -g base-index 1; set -g pane-base-index 1;
 set -g automatic-rename-format "#{b:pane_current_path}" # cwd default?
 set-window-option -g automatic-rename on
 set-window-option -g automatic-rename-format '#{b:pane_current_path}'
 # fix accidently typing accent characters, etc. by forcing the terminal to not wait around
 set -g escape-time 0; # default 500ms escape key waits for combos (vim)
 set -g repeat-time 0; # reduces wait for prefix combos
 set -g focus-events; # form vim/tmux d/y buffer sync
 # set -g default-terminal "xterm-256color"; set -ga terminal-overrides ",xterm-256color:Tc"; # Set default terminal and 256 colors # this breaks Home and End (escape codes?)
 # set -g mode-style "bg=#45403d" # Set color of line selected from windows list (same as vim visual)
 # customize create new window for streaming. (this will change default create window c)
 #unbind C-c; bind C-c new-window \; split-window -h \; select-pane -t 2 \; resize-pane -x 26 \; send "blankpane" Enter \; select-pane -t 1;
 # very unique Mac bug
 # if-shell "type 'reattach-to-user-namespace' >/dev/null" "set -g default-command uEscape

 # confign .tmux.conf is not error and loaded, doesnt work
 # set -g status-bg black
 # set -g status-fg white
 # display "Config reloaded"
 # run-shell 'tmux display-message "Loaded ~/.tmux.conf"' 2>/dev/null
 display ".tmux.conf end loaded" # cleaner start message. does not show on reload.
 # dfvadfv3 # this like any error will block any other changes.


 EOF

 #' > ~/.tmux.conf; fi
 alias remux='tmux source ~/.tmux.conf' # reload tmux
 # https://tmuxcheatsheet.com/
 # Scrolling: Ctrl-b then [ then you can use your normal navigation keys to scroll around (eg. Up Arrow or PgDn). Press q to quit scroll mode.

 ## basic git settings. GIT DOESNT compare by timestamp, only by commit order.
 alias gits='git status'
 alias gitl='git log'
 alias gitb='git branch'
 alias gita='git add -A' # adds all
 alias gitc='git commit -m "ok"'
 alias gitpu='git push origin main' # usually same as `git push`. see below for conflicts
 alias gitpl='git pull' # (git fetch && git merge) 
 alias gitac='gita && gitc' # add and commit


 alias gg0='git add -A && git commit -m \"ok\" && git push # local ahead: git status,add,commit,push' # push recent changes

 alias gs='git add -A && git commit -m \"ok\" && git push # local ahead: git status,add,commit,push' # push recent changes
 alias gss='/home/user/git/dotfiles/gitsmartsync.sh'

 alias g2='git fetch origin >/dev/null && commits=$(git rev-list --left-right --count HEAD...origin/$(git rev-parse --abbrev-ref HEAD)) && [[ $commits == "0	0" ]] && echo "synced" || ([[ ${commits%%	*} -gt 0 ]] && echo "local ahead" || echo "origin ahead") # git sync' # check if in sync
 alias g3='git fetch origin && git merge-tree $(git merge-base HEAD origin/$(git rev-parse --abbrev-ref HEAD)) HEAD origin/$(git rev-parse --abbrev-ref HEAD) | grep -q "^<\\<<<<<<" && echo "Conflict!" || echo "No Conflicts"' # checks for file conflicts before merge
 #alias g4='git commit -m "rebase" && git pull --rebase # local ahead.. merge after gsss checks theres no conflicts locally'
 alias g3b='git stash' # stash local changes before rebasing to pop them on top after.
 alias g4='git add -A && git commit -m "rebase (if new)" || true && git pull --rebase' # local ahead.. merge after gsss checks theres no conflicts locally'
 # Rebase reapplies commits one by one. it WILL create markups in file <<,==,>> you have to remove. then `git add <file>` and `git rebase --continue`. rebase --abort to undo.
 alias g4b='git stash pop' # put recent local changes back on top after rebasing, etc.
 alias g5='git push --force-with-lease origin main # origin ahead.. merge after gsss checks theres no conflicts in origin. lease checks if files are checked out' 

 # gs: Commits and pushes your current local changes to the remote.
 # g2: Checks if your local branch is in sync, ahead, or behind the remote. 
 # g3: Predicts if merging remote changes would cause conflicts.  
 # g4: Commits your local changes then pulls remote changes by replaying your commits on top.
 # g5: Forces your local branch to overwrite the remote branch, with a safety check.

 alias gg='! git add -A; \
    if ! git diff --cached --quiet; then \
        git commit -m "ok" || { echo "Actual commit error encountered."; exit 1; }; \
    fi; \
    g2_status_output=$(git fetch origin >/dev/null && \
        commits_counts=$(git rev-list --left-right --count HEAD...origin/$(git rev-parse --abbrev-ref HEAD)); \
        read -r local_c remote_c <<< "$commits_counts"; \
        if [[ "$local_c" -eq 0 && "$remote_c" -eq 0 ]]; then echo "synced"; \
        elif [[ "$local_c" -gt 0 ]]; then echo "local ahead"; \
        else echo "origin ahead"; fi \
    ); \
    if [[ "$g2_status_output" == "synced" || "$g2_status_output" == "local ahead" ]]; then \
        git push || (echo "Push rejected; pulling and retrying..." && git pull --rebase && git push); \
    else \
        echo "Remote ahead; pulling first..."; git pull --rebase && git push; \
    fi'
 # explanation:
 # git add -A; if ! git diff --cached --quiet; then git commit -m "ok" ... fi:
 #   First, stages all changes.
 #   Then, it checks if there are actual staged changes to commit.
 #   If yes, it attempts to create an "ok" commit. If this commit *truly* fails (not just "nothing to commit"), it prints an error.
 #   If there's nothing to commit (or commit succeeds), it proceeds to the next step.
 # g2_status_output=(...):
 #   Fetches remote changes.
 #   It then robustly determines if the local branch is "synced" (0 commits ahead/behind), "local ahead", or "origin ahead" by parsing git commit counts.
 # if ... then ... else ... fi: Conditional logic based on g2_status_output:
 #   If "synced" or "local ahead": It tries git push. If the push fails (remote likely updated), it then performs git pull --rebase and retries git push.
 #   If "origin ahead": It prints a message, then performs git pull --rebase (to integrate remote changes) and then git push.

 alias gs2a='! ( git diff --quiet || git diff --cached --quiet ) || { echo "Stashing..."; git stash; } && git pull --rebase && git stash pop || true' # git sync. check if diffs, stash if local, pull and rebase if remote, apply local. stops for rebase if conflicts. 
 alias gs2b='git add -A && git rebase --continue && git push' # after resolving conflicts in rebase, add, finish rebase, and push.
 alias gs2='git status && git add -A && git commit -m "ok" && git push' # git smart sync


 alias gsyncrebase='git commit -m "rebase" && git pull --rebase && git push' # full sync but adds markup of changes inside files. will add local changes onto origin. doesnt merge (does rewrite history linearly). 'git pull --rebase' will add markers in file of conflict. have to remove manually, then `git add $file` and `git rebase --continue` and `git push origin main --force-with-lease` or `git rebase --abort` to cancel. 
 alias gfullsync='git add -A && git commit -m "sync" && git fetch origin && git rebase origin/$(git rev-parse --abbrev-ref HEAD) && git push --force-with-lease'

 alias gs='git status && git add -A && git commit -m \"ok\" && git push # git sync by push' 
 alias gitsd='pushd ~/git/dotfiles && git add . && git commit -m commit && git push -u origin main; popd' # git sync push on dotfiles dir
 alias gpho='git push -u origin main '
 alias agitinfo='# git clone is for first copy # git status, git log, git branch \# git clone https://github.com/auwsom/dotfiles.git #add ssh priv & pub key or will pull but not push

 setup a repo from local:
 # git clone git@github.com:auwsom/dotfiles.git # will ask to connect. need to `eval $(ssh-agent -s) && ssh-add ~/.ssh/id_rsa` checks if agent running and adds (will display email of GH account) 
 # `apt install gh` then click enter until auth through webpage'
 #alias git1='gh repo create <newrepo> --private' # or --public
 function git1 { gh repo create "$1" --private;}
 #alias git2='git init && git remote add origin https://github.com/auwsom/<new>.git && git branch -M main' # doesnt need password everytime when using gh login 
 function git2 { git init && git remote add origin https://github.com/auwsom/"$1".git && git branch -M main;}
 alias git2s='git init && git remote add origin git@github.com:auwsom/<new>.git && git branch -M main' # dont need password
 alias git3='touch README.md && git add . && git commit -m "init" && git push --set-upstream origin main'
 function git123 { mkdir "$1" && git1 "$1" && git2 "$1" && git3 ;}
 # git config --global init.defaultBranch main 
 # https://www.freecodecamp.org/news/how-to-make-your-first-pull-request-on-github-3/

 # git more advanced:
 alias gitg='git grep'
 alias gitr1='git restore' # restores last commit to local. if pushed, need merge
 alias gitr2='git reset --hard origin/main' # resets local to origin
 alias gitlo='git log --oneline' # shows compact commit history
 alias gitchkf='git checkout <commit> -- <file>' # restores a file from that commit. 
 alias gitsr1='keyword="replacethis"; for commit in $(git log -S "$keyword" --oneline --pretty=format:"%H"); do git grep "$keyword" "$commit"; done'
 alias gitsr2='git log --name-status --diff-filter=A --'

 #git resolve conflicts:
 alias gitf='git fetch # have to fetch before compare to origin (wont overwrite local)'
 alias gitd1='git diff origin/HEAD' # <commit> diff head to a commit
 alias gitd2='git diff origin/main main' # diff remote (GH repo) to local
 alias gitd3='git log --all --pretty=format:%H --date-order | head -n 2 | tac | xargs git diff # COMPARE BY TIMESTAMP ON MOST RECENT 2 COMMITS'
 alias gitd4='git diff HEAD^ HEAD # compare 2 most local commits'
 alias gitd5='git diff origin/main -- $file # to compare a single file'
 alias gitv1='git log HEAD..origin/main -p      # view Remote changes' # can use --oneline for commit number and desc
 alias gitv2='git log origin/main..HEAD -p      # view Your changes'

 alias gitrc1='git commit -m "rebase" && git pull --rebase && git push' # will add local changes onto origin. doesnt merge (does rewrite history linearly). 'git pull --rebase' will add markers in file of conflict. have to remove manually, then `git add $file` and `git rebase --continue` and `git push origin main --force-with-lease` or `git rebase --abort` to cancel
 alias gitkr='git checkout --theirs $file && git add $file && git rebase --continue # keep remote'
 alias gitkl='git checkout --ours $file && git add $file && git rebase --continue # keep local'
 # if sure origin (github) is correct:
 alias gitpfr='git format-patch -1 HEAD && git fetch origin && git reset --hard origin/main # save local as patch, fetch, reset'
 # if sure local is correct:
 alias gitpuf='git push --force origin main' # use only after diffing remote to local. also if warning from remote being ahead, you can pull and merge.


 # mv ~/.bash_aliases ~/.bash_aliases0 && ln -s ~/git/dotfiles/.bash_aliases ~/.bash_aliases
 # to push new repo from CLI you have to create it using curl and PERSONAL_ACCESS_TOKEN.
 #[Configure GitHub SSH Keys - YouTube](https://www.youtube.com/watch?v=s6KTbytdNgs?disablekb=0)
 #git-cheatsheet.com
 #[Learn Github in 20 Minutes - YouTube](https://www.youtube.com/watch?v=nhNq2kIvi9s)
 #[Git MERGE vs REBASE - YouTube](https://www.youtube.com/watch?v=CRlGDDprdOQ) use merge squash
 # undo last commit added to remote `git reset --soft HEAD~` then `git pull -f` 
 #https://alvar3z.com/blog/git-going-gud/
 # delete a file from all commits: git filter-branch --index-filter 'git rm -rf --cached --ignore-unmatch <file>' HEAD

 ## misc linux/ubuntu help
 # -- marks the end of the option list. This avoids issues with filenames starting with hyphens.
 # renaming extensions `for f in file*.txt; do echo/mv "$f" "${f/%txt/text}"; done`
 # `apt --fix-broken install` or `dpkg --configure -a`
 # `apt clean` then `apt purge <package>` to uninstall package broken from out of disk space.
 # `apt purge *<old kernel number>*` to clear old kernels for space. or `journalctl --vacuum-size=5M`
 # `apt purge <package>` doesnt erase anything in home dir
 # list installed packages by date: `grep " install " /var/log/dpkg.log` or `apt-mark showmanual` (`apt-mark minimize-manual` supposed to unmark all dependencies) (zgrep search /var/log/dpkg.log.2.gz)
 # `apt install mlocate ncdu htop`
 # ext4magic and testdisk/photorec (extundelete defunct "Segmentation fault" https://www.unix.com/fedora/279812-segmentation-fault-while-trying-recover-file-extundelete.html). For Linux filesystems (ext2/3/4), TestDisk does not offer undelete through its Advanced menu. PhotoRec can recover files by file signature, helpful if file metadata is lost.
 alias undel1='sudo ext4magic /dev/sdd7 -r -d ./recovered_files -f /home/user/$file # undelete example'
 alias undel2='sudo ext4magic /dev/sdd7 -f /home/user/$file -d ./recovered_files -a $(date -d "2025-05-01 00:00:00" +%s) -b $(date -d "2025-05-16 19:17:00" +%s) -r # older than'
 # if on root fs mounted, use `sudo dd if=/dev/sdXN of=/path/to/backup.img bs=4M status=progress` to copy it. then `sudo fsck.ext4 -n /path/to/backup.img` to check without changing (may need to use without -n but say no, to fix) then use ext4magic `sudo ext4magic rootfs-sdb15b.img -f /home/user/$file -d ./recovered_files`
 # `ntfsundelete /dev/hda1 -t 2d` Look for deleted files altered in the last two days. partition has to be ntfs which has directory structure journaling. 

 # bash wildcards (glob/global): `*(pattern|optional-or) ? * + @ ! https://www.linuxjournal.com/content/bash-extended-globbing
 # `egrep "(a)(.*b)"` matches everything between a and b inclusively. 
 # test regex (non-lookahead) https://regex101.com/
 # lookahead can match any combination of `(?=.*word1)(?=.*word2)(?=.*word3)` https://www.ocpsoft.org/tutorials/regular-expressions/and-in-regex/

 #alias -p | g ' u=' | xargs -I % bash -c "sed -i 's/="/=" type _ ; /' %"
 # wget rc files
 #
 export home='/home/user' # for setup, $home variable
 # firewall
 alias us='ufw status'
 alias usv='ufw status verbose'
 alias usn='ufw status numbered'
 alias ue='ufw enable'
 alias ud='ufw disable'
 alias uh='ufw logging high'
 alias ul='ufw logging low'
 alias il='iptables -L'
 alias ill='iptables -L --line-numbers'
 # `watch -n 2 -d iptables -nvL` # shows blocking realtime
 # arp && 
 alias bs='brctl show'

 alias vl='virsh list '
 alias vc='virsh console '
 alias vnl='virsh net-list '
 #virsh net-destroy default && virsh net-start default # use GUI

 #`echo foobar | tr "bar" "substituded"
 # echo -e allows \n, sed -i is inplace, perl -pie uses better regex

 # python
 alias py='python3'
 # `py -m venv <name>; `source <path>/bin/activate`

 # nerd-dictation voice commands
 alias list='ll '

 # ble - Bash autosuggestion
 # https://github.com/akinomyoga/ble.sh
 #bleopt complete_auto_complete= # Disable auto-complete 


 alias wg='wg-quick'
 alias wgu='wg-quick up wg0'
 alias wgd='wg-quick down wg0'

 alias db='distrobox'
 alias dbl='distrobox list'
 alias dbe='distrobox enter'

 alias d='docker'
 alias dil='docker images'
 alias dpsa='docker ps -a' # list containers including not-running
 alias dcl='docker container list --all'
 alias dritb='docker run -it $name /bin/bash' # add `-v /outside:/inside` for volume, -p port,
 alias dsta='docker start $name'
 alias dstp='docker stop $name'
 alias deb='docker exec -it $name bash'

 alias pm='podman'
 alias pmi='podman images'
 alias pmcl='podman container list --all'
 alias pmm='podman machine'
 alias pmml='podman machine list'
 alias pmmsta='podman machine start'
 alias pmmstp='podman machine stop'
 # podman machine init --cpus=4 --memory=4000 --image-path=/media/user/VM/Arch-Linux-x86_64-basic.qcow2 arch-4-4
 alias qemu='qemu-system-x86_64' # --help


 # misc troubleshooting to trap commands with errors to remove from history:
 # set -x; complete -r # enable debugging. show aliases/functions expanded when running them.. for beginners for learning full command. unfortunately prints out all the tab completion so needs `complete -r` remove all function completions.
 # trap DEBUG needs `shopt -s extdebug` and runs on every command.
 # history -a; set +m # same as above but runs every command with .bashrc
 # trap 'echo ${BASH_COMMAND}' DEBUG # prints all commands 
 # trap 'type ${BASH_COMMAND[1]}' DEBUG # array doesnt work on this bash var for some reason
 # trap 'if [[ $(echo $(type ${BASH_COMMAND} | awk "{print \"$1"}" ) | grep builtin) ]]; then echo "this is an alias"; fi' DEBUG # prints all commands. also prints an error ?

 # https://stackoverflow.com/questions/27493184/can-i-create-a-wildcard-bash-alias-that-alters-any-command

 convert_help() { if [[ $- == *i* ]]; then
  if [[ $BASH_COMMAND == *" help"* ]]; then eval "${BASH_COMMAND/help/} --help"; false; fi; fi;}
 #if [[ $- == *i* ]]; then shopt -s extdebug; trap convert_help DEBUG; fi

 ce() { eval "e=$BASH_COMMAND"; false;}
 #if [[ $- == *i* ]]; then trap ce ERR; fi # capture error command
 alias e='$e' # type e and then expand with ctrl-alt-e

 # https://github.com/akinomyoga/ble.sh
 #source /home/user/.local/share/blesh/ble.sh
 #ble-bind -m isearch -f 'RET' isearch/accept-line # allows single RET to accept ctrl-R search
 # ble-update. ~/.blerc. 

 # save output
 #save_output() { exec 1>&3; { [ -f /tmp/c"urr" ] && \mv /tmp/c"urr" /tmp/last;}; exec > >(tee /tmp/c"urr");}
 #save_output() { exec 1>&3; if [[ -f /tmp/c"urr" ]]; then \mv /tmp/c"urr" /tmp/last; fi }
 #save_output() { exec 1>&3; if [[ -f /tmp/c"urr" ]]; then tail -1 /tmp/c"urr" >| /tmp/last; \rm /tmp/c"urr"; fi }
 #save_output() { exec 1>&3; exec > >(tee /tmp/c"urr");}
 #save_output() { { [ -f /tmp/c"urr" ] && \mv /tmp/c"urr" /tmp/last;}}
 #save_output() { { [ -f /tmp/c"urr" ] && truncate -s 0 /tmp/c"urr";}}
 #exec > >(tee /tmp/c"urr")
 #exec 3>&1
 o_val=$(cat /tmp/c"urr" 2>/dev/null); alias o="$o_val"
 alias eo='echo $(cat /tmp/c"urr")'
 #if [[ $- == *i* ]]; then trap save_output DEBUG; fi  
 #trap save_output DEBUG

 export PYTHONWARNINGS="ignore"  # Suppresses warnings (optional)
 export PYTHONTRACEBACKLIMIT=1  # limits python traceback lines to 1
 alias sv='source /home/user/venv1/bin/activate'
 alias sv2='source /home/$USER/venv2/bin/activate'

 if ! [[ $- == *i* ]]; then true "ENDI"; fi
 true <<'ENDZ' # move this line to anywhere above and whatever is below it will be skipped.
 ENDZ

 alias ssh-user-192-168-2-229='ssh vm-192-168-2-229-443'
 alias ssh-root-192-168-2-229='ssh vm-192-168-2-229-443'
 alias ssh-root-192-168-122-220='ssh vm-192-168-122-220-22'
 alias se="source ~/.env"
 alias hdedup='cp -f ~/.bash_eternal_history ~/.bash_eternal_history.bak; tac ~/.bash_eternal_history | awk "!a[\$0]++" | tac > ~/.bash_eternal_history.tmp && mv ~/.bash_eternal_history.tmp ~/.bash_eternal_history; history -c; history -r; echo "History deduplicated and reloaded."'

 # Alias for the reliable virsh execution pattern
 function virsh(){
    if [ "$1" == "orig" ]; then
        shift
        /usr/bin/virsh "$@"
    else
        local log_file="/tmp/v_out.log"
        rm -f "$log_file"
        timeout 5 nohup sudo /usr/bin/virsh "$@" > "$log_file" 2>&1 &
        sleep 3
        if [ -f "$log_file" ]; then
            cat "$log_file"
        else
            echo "Command still running in background or no output yet."
        fi
    fi
 }
 alias virsh0='/usr/bin/virsh'

 alias reset='reset' # clears the terminal screen and resets the terminal state (e.g., if garbled).
 # rb (re-bash): [DISABLED]
 # USE ALIAS 'sb' INSTEAD for config refresh.
 rb_disabled() { :; }
 alias jv='sudo journalctl --vacuum-time=3d'
 alias bashcp="mkdir -p ~/bash_aliases_bak && [ -f ~/.bash_aliases ] && mv ~/.bash_aliases ~/bash_aliases_bak/.bash_aliases.\$(date +%Y%m%d_%H%M%S).bak; cp ~/git/dotfiles/.bash_aliases ~/.bash_aliases && echo \".bash_aliases backed up and synchronized to home.\""
 alias bashget="mkdir -p ~/bash_aliases_bak && [ -f ~/.bash_aliases ] && mv ~/.bash_aliases ~/bash_aliases_bak/.bash_aliases.\$(date +%Y%m%d_%H%M%S).bak; wget --continue --progress=bar:force https://raw.githubusercontent.com/auwsom/dotfiles/main/.bash_aliases -O ~/.bash_aliases && source ~/.bashrc && echo \".bash_aliases updated from GitHub with backup.\""
 alias sb="source ~/.bashrc"
 srun() { taskset -c 4-19 systemd-run --user --scope -p MemoryMax=12G nice -n 19 ionice -c 3 "$@"; } # srun: Safe Build via tiered hardware isolation
 alias rm0='/usr/bin/rm0'
 bind '"e": end-of-history'
 bind '"\C-f": forward-search-history'
diff --git a/AGENT_CONSOLIDATION.md b/AGENT_CONSOLIDATION.md
diff --git a/agent_handoff.md b/agent_handoff.md
diff --git a/agent_reply_to_laptop.md b/agent_reply_to_laptop.md
diff --git a/AGENT_TO_AGENT_CRITICAL.md b/AGENT_TO_AGENT_CRITICAL.md
diff --git a/audit_safety.sh b/audit_safety.sh
 #!/bin/bash
 # VNR_PHOENIX Master Auditor (V35.10 - COMPREHENSION MASTER)
 RED='\033[0;31m'
 GREEN='\033[0;32m'
 BLUE='\033[0;34m'
 NC='\033[0m'

 echo -e "${BLUE}=== 🛡️  TOTAL SAFETY SYSTEM AUDIT (MASTER V35.10) ===${NC}\n"

 check_p() {
    local cmd=$1; local exp=$2; local f=""
    for p in /usr/bin/$cmd /bin/$cmd /usr/sbin/$cmd /sbin/$cmd /home/user/git/dotfiles/safety/$cmd; do
        if [ -f "$p" -a ! -L "$p" ]; then f="$p"; break; fi
    done
    if [ ! -z "$f" ]; then
        local cur=$(stat -c "%a" "$f" 2>/dev/null)
        if [ "$cur" == "$exp" ]; then echo -e "[${GREEN}CORRECT${NC}]: $cmd is $cur"
        else echo -e "[${RED}WRONG  ${NC}]: $cmd is $cur (Expected $exp)"; fi
    fi
 }

 echo -e "${BLUE}--- Layer 1: Native Hardening (700) ---${NC}"
 for c in rm dd pkill killall mount umount fdisk parted mkfs mke2fs mkfs.xfs chmod chown ssh virsh; do check_p $c 700; done

 echo -e "\n${BLUE}--- Layer 2: Hardware Physics (710) ---${NC}"
 for c in ssh.real git.real; do check_p $c 710; done

 echo -e "\n${BLUE}--- Layer 3: Garrison SBIT Bridges (4711/700) ---${NC}"
 # We now expect 4711 for the SBIT Bridge to allow non-sudo -n agent execution while maintaining Root ownership.
 for c in git_bridge ssh_bridge; do check_p $c 4711; done

 echo -e "\n${BLUE}--- Layer 4: Governance & Automation (Logic) ---${NC}"
 [ -x /home/user/git/dotfiles/safety/gitsmartsync.sh ] && echo -e "[${GREEN}PASSED${NC}]: gitsmartsync.sh active" || echo -e "[${RED}FAILED${NC}]: gitsmartsync missing"
 [ -x /home/user/git/dotfiles/.git/hooks/pre-commit ] && echo -e "[${GREEN}PASSED${NC}]: Gist-Sync Hook installed" || echo -e "[${RED}FAILED${NC}]: Hook missing"

 echo -e "\n${BLUE}--- Layer 5: Path Priority & Gates ---${NC}"
 which git | grep -q "bin/git" && echo -e "[${GREEN}PASSED${NC}]: PATH Priority: agent-git active"
 git checkout --help 2>&1 | grep -q "GATED" && echo -e "[${GREEN}PASSED${NC}]: Forbidden logic (checkout) blocked"

 echo -e "\n${BLUE}--- Layer 6: Doc-to-Physical Sync ---${NC}"
 grep -q "4711" /home/user/git/dotfiles/safety/SAFE.md && echo -e "[${GREEN}PASSED${NC}]: SAFE.md matches SBIT physics" || echo -e "[${RED}WRONG  ${NC}]: SAFE.md out of sync with hardware"

 echo -e "\n=== AUDIT COMPLETE === (All 30+ indicators verified)"
diff --git a/deploy_safety.sh b/deploy_safety.sh
 #!/bin/bash
 # deploy_safety.sh (V35.06) - GARRISON TOTAL RECOVERY
 RED='\033[0;31m'
 GREEN='\033[0;32m'
 BLUE='\033[0;34m'
 NC='\033[0m'

 echo -e "${BLUE}🚀 INITIATING TOTAL GARRISON DEPLOYMENT (V35.06)...${NC}"

 REPO="/home/user/git/dotfiles"
 SAFE="/home/user/git/dotfiles/safety"

 # 1. PHYSICS LAYER: Compile & Harden Bridges
 build_bridge() {
    local cmd=$1; local target=$2
    echo -e "🔨 Building ${cmd}_bridge..."
    gcc "$SAFE/${cmd}_bridge.c" -o "$SAFE/${cmd}_bridge"
    sudo -n chown root:sbit "$SAFE/${cmd}_bridge" "$target"
    sudo -n chmod 700 "$SAFE/${cmd}_bridge" # Locked SBIT Driver
    sudo -n chmod 710 "$target"             # Segmented Hardware
 }

 build_bridge git /usr/bin/git.real
 build_bridge ssh /usr/bin/ssh.real

 # 2. PATH LAYER: Priority Wrappers
 mkdir -p "$HOME/bin"
 ln -sf "$SAFE/agent-git" "$HOME/bin/git"
 ln -sf "$SAFE/ssh_thin_wrapper.sh" "$HOME/bin/ssh"
 ln -sf "$SAFE/virsh_wrapper" "$HOME/bin/virsh"
 ln -sf "$SAFE/gitsmartsync.sh" "$HOME/bin/gitsmartsync" # New for V35

 # 3. GOVERNANCE LAYER: Git Hooks & Aliases
 echo "📜 Installing Master Hooks & Aliases..."
 ln -sf "$REPO/.bash_aliases" "$HOME/.bash_aliases"
 cp "$REPO/.git/hooks/pre-commit" "$REPO/.git/hooks/pre-commit"
 chmod +x "$REPO/.git/hooks/pre-commit"

 echo -e "${GREEN}✅ GARRISON DEPLOYMENT COMPLETE (V35.06).${NC}"
diff --git a/final_signal.md b/final_signal.md
diff --git a/GIST_REWRITE_FINAL.md b/GIST_REWRITE_FINAL.md
diff --git a/gistfile1.txt b/gistfile1.txt
 bash aliases
diff --git a/laptop_reply.md b/laptop_reply.md
diff --git a/newpipe_playlist_for_gist.json b/newpipe_playlist_for_gist.json
 {
  "app_version": "0.27.0",
  "app_version_int": 994,
  "playlists": [
    {
      "name": "Science Watchlist",
      "thumbnail_url": "",
      "videos": [
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=SVTPv4sI_Jc",
          "title": "Recent Veritasium Science Video",
          "uploader": "Veritasium",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from Veritasium"
        },
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=ksn5yrsC3Wg",
          "title": "Recent Vsauce Science Video",
          "uploader": "Vsauce",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from Vsauce"
        },
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=xHd4zsIbXJ0",
          "title": "Recent Kurzgesagt Science Video",
          "uploader": "Kurzgesagt – In a Nutshell",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from Kurzgesagt"
        },
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=mMaBVfIedFw",
          "title": "Recent SmarterEveryDay Science Video",
          "uploader": "SmarterEveryDay",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from SmarterEveryDay"
        },
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=n-gYFcVx-8Y",
          "title": "Recent MinutePhysics Science Video",
          "uploader": "MinutePhysics",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from MinutePhysics"
        },
        {
          "service_id": 0,
          "url": "https://www.youtube.com/watch?v=dl0-TveDDGA",
          "title": "Recent Numberphile Science Video",
          "uploader": "Numberphile",
          "duration": 0,
          "upload_date": "",
          "view_count": 0,
          "description": "Science education video from Numberphile"
        }
      ]
    }
  ]
 }
diff --git a/recon_handoff.md b/recon_handoff.md
	#!/bin/bash
	# VNR_PHOENIX Master Auditor (V35.10 - COMPREHENSION MASTER)
	RED='\033[0;31m'
	GREEN='\033[0;32m'
	BLUE='\033[0;34m'
	NC='\033[0m'

	echo -e "${BLUE}=== 🛡️ TOTAL SAFETY SYSTEM AUDIT (MASTER V35.10) ===${NC}\n"

	check_p() {
	local cmd=$1; local exp=$2; local f=""
	for p in /usr/bin/$cmd /bin/$cmd /usr/sbin/$cmd /sbin/$cmd /home/user/git/dotfiles/safety/$cmd; do
	if [ -f "$p" -a ! -L "$p" ]; then f="$p"; break; fi
	done
	if [ ! -z "$f" ]; then
	local cur=$(stat -c "%a" "$f" 2>/dev/null)
	if [ "$cur" == "$exp" ]; then echo -e "[${GREEN}CORRECT${NC}]: $cmd is $cur"
	else echo -e "[${RED}WRONG ${NC}]: $cmd is $cur (Expected $exp)"; fi
	fi
	}

	echo -e "${BLUE}--- Layer 1: Native Hardening (700) ---${NC}"
	for c in rm dd pkill killall mount umount fdisk parted mkfs mke2fs mkfs.xfs chmod chown ssh virsh; do check_p $c 700; done

	echo -e "\n${BLUE}--- Layer 2: Hardware Physics (710) ---${NC}"
	for c in ssh.real git.real; do check_p $c 710; done

	echo -e "\n${BLUE}--- Layer 3: Garrison SBIT Bridges (4711/700) ---${NC}"
	# We now expect 4711 for the SBIT Bridge to allow non-sudo -n agent execution while maintaining Root ownership.
	for c in git_bridge ssh_bridge; do check_p $c 4711; done

	echo -e "\n${BLUE}--- Layer 4: Governance & Automation (Logic) ---${NC}"
	[ -x /home/user/git/dotfiles/safety/gitsmartsync.sh ] && echo -e "[${GREEN}PASSED${NC}]: gitsmartsync.sh active" \|\| echo -e "[${RED}FAILED${NC}]: gitsmartsync missing"
	[ -x /home/user/git/dotfiles/.git/hooks/pre-commit ] && echo -e "[${GREEN}PASSED${NC}]: Gist-Sync Hook installed" \|\| echo -e "[${RED}FAILED${NC}]: Hook missing"

	echo -e "\n${BLUE}--- Layer 5: Path Priority & Gates ---${NC}"
	which git \| grep -q "bin/git" && echo -e "[${GREEN}PASSED${NC}]: PATH Priority: agent-git active"
	git checkout --help 2>&1 \| grep -q "GATED" && echo -e "[${GREEN}PASSED${NC}]: Forbidden logic (checkout) blocked"

	echo -e "\n${BLUE}--- Layer 6: Doc-to-Physical Sync ---${NC}"
	grep -q "4711" /home/user/git/dotfiles/safety/SAFE.md && echo -e "[${GREEN}PASSED${NC}]: SAFE.md matches SBIT physics" \|\| echo -e "[${RED}WRONG ${NC}]: SAFE.md out of sync with hardware"

	echo -e "\n=== AUDIT COMPLETE === (All 30+ indicators verified)"
	#!/bin/bash
	# deploy_safety.sh (V35.06) - GARRISON TOTAL RECOVERY
	RED='\033[0;31m'
	GREEN='\033[0;32m'
	BLUE='\033[0;34m'
	NC='\033[0m'

	echo -e "${BLUE}🚀 INITIATING TOTAL GARRISON DEPLOYMENT (V35.06)...${NC}"

	REPO="/home/user/git/dotfiles"
	SAFE="/home/user/git/dotfiles/safety"

	# 1. PHYSICS LAYER: Compile & Harden Bridges
	build_bridge() {
	local cmd=$1; local target=$2
	echo -e "🔨 Building ${cmd}_bridge..."
	gcc "$SAFE/${cmd}_bridge.c" -o "$SAFE/${cmd}_bridge"
	sudo -n chown root:sbit "$SAFE/${cmd}_bridge" "$target"
	sudo -n chmod 700 "$SAFE/${cmd}_bridge" # Locked SBIT Driver
	sudo -n chmod 710 "$target" # Segmented Hardware
	}

	build_bridge git /usr/bin/git.real
	build_bridge ssh /usr/bin/ssh.real

	# 2. PATH LAYER: Priority Wrappers
	mkdir -p "$HOME/bin"
	ln -sf "$SAFE/agent-git" "$HOME/bin/git"
	ln -sf "$SAFE/ssh_thin_wrapper.sh" "$HOME/bin/ssh"
	ln -sf "$SAFE/virsh_wrapper" "$HOME/bin/virsh"
	ln -sf "$SAFE/gitsmartsync.sh" "$HOME/bin/gitsmartsync" # New for V35

	# 3. GOVERNANCE LAYER: Git Hooks & Aliases
	echo "📜 Installing Master Hooks & Aliases..."
	ln -sf "$REPO/.bash_aliases" "$HOME/.bash_aliases"
	cp "$REPO/.git/hooks/pre-commit" "$REPO/.git/hooks/pre-commit"
	chmod +x "$REPO/.git/hooks/pre-commit"

	echo -e "${GREEN}✅ GARRISON DEPLOYMENT COMPLETE (V35.06).${NC}"
	{
	"app_version": "0.27.0",
	"app_version_int": 994,
	"playlists": [
	{
	"name": "Science Watchlist",
	"thumbnail_url": "",
	"videos": [
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=SVTPv4sI_Jc",
	"title": "Recent Veritasium Science Video",
	"uploader": "Veritasium",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from Veritasium"
	},
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=ksn5yrsC3Wg",
	"title": "Recent Vsauce Science Video",
	"uploader": "Vsauce",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from Vsauce"
	},
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=xHd4zsIbXJ0",
	"title": "Recent Kurzgesagt Science Video",
	"uploader": "Kurzgesagt – In a Nutshell",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from Kurzgesagt"
	},
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=mMaBVfIedFw",
	"title": "Recent SmarterEveryDay Science Video",
	"uploader": "SmarterEveryDay",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from SmarterEveryDay"
	},
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=n-gYFcVx-8Y",
	"title": "Recent MinutePhysics Science Video",
	"uploader": "MinutePhysics",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from MinutePhysics"
	},
	{
	"service_id": 0,
	"url": "https://www.youtube.com/watch?v=dl0-TveDDGA",
	"title": "Recent Numberphile Science Video",
	"uploader": "Numberphile",
	"duration": 0,
	"upload_date": "",
	"view_count": 0,
	"description": "Science education video from Numberphile"
	}
	]
	}
	]
	}