alunduil-chezmoi: Skill for Claude Code

Add a tool to bootstrap

Two decisions, made independently.

Auth axis

Does the tool need interactive auth (login, browser flow, API token) to do real work?

• Yes (gh, claude, gcx, readwise, tailscale): list in README "Interactive logins" with a config-path comment so a fresh-host bootstrap surfaces where state lands. No PATH-check line — running the login command itself proves reachability. Auth state is runtime, never managed by chezmoi.
• No (zellij, lazygit, act, rtk, gh-poi): list in README "PATH check" line.

Install mechanism

Pick the canonical installer for the ecosystem:

All passes live under .chezmoiscripts/.

Source	Pass	Pattern
Debian package	.chezmoidata/packages.yaml	append to packages.apt
Pinned binary release	run_before_02 + script/install/<tool>	template below
npm package	run_before_03	npm install -g, command -v
Cargo crate	run_before_09	cargo install, command -v
gh extension	run_before_05	gh extension install --pin
curl | sh	run_before_05	guard with command -v

Auth and install axes are independent: gcx is auth-required and uses script/install/; gh-poi is fire-and-forget and uses gh extension install.

script/install/<tool> template

Mirror script/install/{zellij,lazygit,act,gcx}. Mode 0755:

#!/usr/bin/env bash
set -euo pipefail

TOOL_VERSION="vX.Y.Z"
ARCH="<release-arch-string>"

# shellcheck source-path=SCRIPTDIR source=lib.sh
. "$(dirname "$0")/lib.sh"

parse_bin_dir "$@"

bin="$BIN_DIR/<tool>"
if [ -x "$bin" ] && "$bin" --version 2>/dev/null | grep -qF "${TOOL_VERSION#v}"; then
  printf '==> <tool>: %s already installed at %s\n' "$TOOL_VERSION" "$bin" >&2
  exit 0
fi

printf '==> <tool>: downloading %s\n' "$TOOL_VERSION" >&2
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT

base="https://github.com/<owner>/<tool>/releases/download/${TOOL_VERSION}"
asset="<tool>_${TOOL_VERSION#v}_${ARCH}.tar.gz"
curl -fsSL -o "$tmp/$asset" "$base/$asset"
curl -fsSL -o "$tmp/checksums.txt" "$base/checksums.txt"

expected="$(expected_from_checksums "$tmp/checksums.txt" "$asset")"
verify_sha256 "$tmp/$asset" "$expected"

tar -xzf "$tmp/$asset" -C "$tmp" <tool>
mkdir -p "$BIN_DIR"
install -m 0755 "$tmp/<tool>" "$bin"