Workflow: Dotfiles Sync

NEVER REBASE. ALWAYS MERGE.

Every invocation covers two repositories: ~/.agents for shared skills and ~/.local/share/chezmoi for dotfiles. Complete each repository independently. The dotfiles helper checks chezmoi only; its clean result says nothing about Agents. Report both outcomes before calling the sync complete.

Authorized recurring machine sync

When the user authorizes recurring sync, that authorization covers safe changes within the agreed scope; do not ask for routine confirmation on every tick. Keep the interactive report/confirmation flow below for ad hoc sync without standing authorization.

• Use one host-local hourly Codex tick, serial execution and a nonblocking lock. Sync ~/.agents hourly; run the chezmoi workflow only when 24 hours have passed since its last attempt. Record attempts and successes separately. Preserve existing holds and deduplicate unchanged alerts.

Repository rules (every run)