chezmoi

原文涵盖的主题

• Deploy workflow
• Notes
• Gotchas

chezmoi apply deploys source files to and runs runonchange scripts (brew bundle, skill sync, etc.). Changes land via chezmoi-deploy, not pull requests. The source dir is pinned to the primary checkout, so a bare chezmoi apply always reads main — work is verified render-only until deployed. Verify render-only — never a bare chezmoi apply from a worktree. Pass -S "$(pwd)" with no-mutation verbs: chezmoi diff -S "$(pwd)", chezmoi apply -n -v -S "$(pwd)" (dry-run; also shows which scripts would fire), chezmoi cat -S "$(pwd)" . Deploy with chezmoi-deploy . It locks, rebases the branch onto the primary checkout's main when needed, fast-forward-merges it into main, runs chezmoi apply --force, and pushes main to origin. A rebase conflict is aborted; resolve it in the worktree and retry. Safe from a hosted aoe session: the session runs in a tmux pane independent of any LaunchAgent, and the generator only reloads agents whose plist content actually changed — it never touches the tmux pane a deploy is running from. Escape hatch — to exercise one deployed file's runtime behavior without a full deploy: chezmoi apply -S "$(pwd)" --exclude=scripts --persistent-state "${TMPDIR:-/tmp}/branch-state.

这里只展示节选，请以完整原文和当前要求为准。