Refactor installer scripts and update CI workflows (#160)

* chore: remove deprecated files and configs

Remove obsolete cspell word lists, editorconfig, vscode settings,
and retired workflows (rebase, stale, sync-labels, wrangler).
Drop legacy installer scripts i.sh and install_alpha.sh.

* ci: update workflows and trunk configuration

- Bump actions/checkout to v6.0.2 and shellcheck to 2.0.0
- Add lib/zsh/** and tests/** to push/PR path triggers
- Add permissions: contents: read and timeout-minutes: 10
- Use github.ref in concurrency group
- Replace ~/.zi hard-coded paths with XDG_DATA_HOME equivalents
- Add unit-fixture step calling tests/installers.sh
- Remove wrangler deploy job; update trunk linter config

* feat: add sync-init.sh and tests/installers.sh

sync-init.sh verifies (and optionally replaces) the local lib/zsh/init.zsh
against the canonical GitHub raw main copy. Supports --write, --local,
--remote, --checksum-url and --no-checksum flags.

tests/installers.sh provides a POSIX sh test suite covering:
- script syntax validation (sh -n / zsh -n)
- checksum integrity checks
- loader install with XDG path and branch-override assertions
- standalone zpmod delegation test
- sync-init fixture round-trip test

* refactor: migrate installer scripts to XDG paths and harden POSIX

install.sh:
- Add set -eu; use WORKDIR=$(mktemp -d) with safe trap cleanup
- Replace ~/.zi with XDG_DATA_HOME-aware path
- Fix sed command for ZI[STREAM] substitution
- Correct cd fallback from return to exit 1
- Guard branch pull with BOPT; add exit 1 on failed clone
- Fix .zshrc loader snippet variable quoting

install_zpmod.sh:
- Add set -eu, file header and WORKDIR trap
- Add pure-POSIX _zi_ver_ge() replacing expr string comparison
- Honour XDG_DATA_HOME for ZI_HOME default
- Replace exit 255 with exit 1 throughout

lib/zsh/init.zsh:
- Update default branch to use ZI[STREAM] parameter
- Align loader paths with XDG layout

* chore: update gitignore, checksums, and docs

- Exclude AI agent instruction files from git tracking
  (AGENTS.md, CLAUDE.md, GEMINI.md, .github/copilot-instructions.md)
- Add .geminiignore
- Regenerate lib/checksum.txt to reflect updated scripts
- Document sync-init.sh usage in docs/README.md
- Remove deprecated git.io short URLs from README

* ci(check-linux): add init.zsh sync-drift detection step

* fix(install.sh): verify zi.zsh exists after clone, not just directory

* ci: add concurrency to checksum.yml; add smoke-test to win-install.yml

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: rename repo references from zi-src to src

Update all internal references to reflect the repository rename:
- .trunk/trunk.yaml repo name
- workflow repository guards (checksum, rclone-action, deploy-gh-pages)
- win-install safe.directory path
- docs/README.md VSCode and jsDelivr URLs

* ci: add org project tracker scripts (label sync + workflow rollout)

* fix(ci): continue label sync after repo failures

* chore: fix lint issues and syntax errors reported by trunk

---------

Co-authored-by: Salvydas Lukosius <ss-o@users.noreply.github.com>

Author: ss-o

.cspell/project-words.txt

@@ -5,24 +5,34 @@ on:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-linux.yml"
   pull_request:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-linux.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ☑️ ShellCheck
-        uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
         with:
           scandir: "./lib/sh"
 
@@ -32,24 +42,28 @@ jobs:
     needs: [shellcheck]
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ⚙️ Prepare dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y zsh
+      - name: "⚙️ Check: unit fixtures"
+        run: sh ./tests/installers.sh
       - name: "⚙️  Check: install.sh -- -i skip"
-        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i annex"
-        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i loader"
-        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i zunit"
-        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf ~/.zi
+        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a annex"
+        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a loader"
+        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a zunit"
+        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
       - name: "⚙️ Check: install_zpmod.sh"
         run: sh -x ./lib/sh/install_zpmod.sh
       - name: ⚙️ Load zpmod module
         run: |
-          module_path+=( "$HOME/.zi/zmodules/zpmod/Src" )
+          module_path+=( "${XDG_DATA_HOME:-$HOME/.local/share}/zi/zmodules/zpmod/Src" )
           zmodload zi/zpmod
           zpmod source-study -l
         shell: zsh {0}
+      - name: "⚙️ Check: init.zsh sync drift"
+        run: sh lib/sh/sync-init.sh

.editorconfig

@@ -6,50 +6,62 @@ on:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-macos.yml"
   pull_request:
     branches: [main]
     paths:
       - "lib/sh/**"
+      - "lib/zsh/**"
+      - "tests/**"
+      - ".github/workflows/check-macos.yml"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
-  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ☑️ ShellCheck
-        uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
         with:
           scandir: "./lib/sh"
 
   build:
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     timeout-minutes: 30
     needs: [shellcheck]
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: ⚙️  Prepare dependencies
         run: |
           brew install zsh
+      - name: "⚙️ Check: unit fixtures"
+        run: sh ./tests/installers.sh
       - name: "⚙️  Check: install.sh -- -i skip"
-        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i annex"
-        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i loader"
-        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf ~/.zi
-      - name: "⚙️  Check: install.sh -- -i zunit"
-        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf ~/.zi
+        run: sh -x ./lib/sh/install.sh -- -i skip; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a annex"
+        run: sh -x ./lib/sh/install.sh -- -a annex; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a loader"
+        run: sh -x ./lib/sh/install.sh -- -a loader; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
+      - name: "⚙️  Check: install.sh -- -a zunit"
+        run: sh -x ./lib/sh/install.sh -- -a zunit; command rm -rf "${XDG_DATA_HOME:-$HOME/.local/share}/zi" ~/.zi
       - name: "⚙️ Check: install_zpmod.sh"
         run: sh -x ./lib/sh/install_zpmod.sh
       - name: ⚙️ Load zpmod module
         run: |
-          module_path+=( "$HOME/.zi/zmodules/zpmod/Src" )
+          module_path+=( "${XDG_DATA_HOME:-$HOME/.local/share}/zi/zmodules/zpmod/Src" )
           zmodload zi/zpmod
           zpmod source-study -l
         shell: zsh {0}

.geminiignore

@@ -3,20 +3,34 @@ name: "🆗 Checksum"
 on:
   push:
     paths:
-      - "lib/**"
+      - "lib/sh/install_zpmod.sh"
+      - "lib/sh/install.sh"
+      - "lib/sh/sync-init.sh"
+      - "lib/zsh/init.zsh"
+      - ".github/workflows/checksum.yml"
   workflow_dispatch: {}
 
+permissions:
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
   checksum:
+    if: github.repository == 'z-shell/src'
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: "🆗 Generate checksum"
-        uses: jmgilman/actions-generate-checksum@521a903edf511407d8bd5535d257402fd9bb5db0
+        uses: jmgilman/actions-generate-checksum@3ea6dc9bf8eecf28e2ecc982fab683484a1a8561 # v1.0.1
         with:
           patterns: |
             lib/sh/install_zpmod.sh
             lib/sh/install.sh
+            lib/sh/sync-init.sh
             lib/zsh/init.zsh
       - run: mv checksum.txt lib/
       - name: "🆗 Commit"

.github/.cspell/project-ignored.txt

@@ -8,17 +8,35 @@ on:
     tags: ["v*.*.*"]
     paths:
       - "lib/**"
+      - ".github/workflows/deploy-gh-pages.yml"
+
+permissions:
+  contents: write
 
 jobs:
   deploy:
+    if: github.repository == 'z-shell/src'
     environment:
       name: github-pages
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: "🏷 Prepare deployment metadata"
+        id: prepare_deploy
+        run: |
+          commit_message="$(jq -r '.head_commit.message // empty' "$GITHUB_EVENT_PATH")"
+          if [ -z "$commit_message" ]; then
+            commit_message="Deploy ${GITHUB_REF_NAME}"
+          fi
+          {
+            echo "commit_message<<DEPLOY_MESSAGE"
+            printf '%s\n' "$commit_message"
+            echo "DEPLOY_MESSAGE"
+          } >> "$GITHUB_OUTPUT"
       - name: "🏷 Prepare tag"
         id: prepare_tag
         if: startsWith(github.ref, 'refs/tags/')
@@ -34,6 +52,6 @@ jobs:
           publish_dir: ./lib
           user_name: ${{ secrets.ACTIONS_USER }}
           user_email: ${{ secrets.ACTIONS_MAIL }}
-          commit_message: ${{ github.event.head_commit.message }}
+          commit_message: ${{ steps.prepare_deploy.outputs.commit_message }}
           tag_name: ${{ steps.prepare_tag.outputs.deploy_tag_name }}
           tag_message: "Deployment ${{ steps.prepare_tag.outputs.tag_name }}"