me

me seeds a macOS machine with the dependencies, dotfiles, identity material, and Codex plugin assets that approximate how pirog does development. It is primarily consumed through the hosted boot.sh wrapper and also ships the piroplugin Codex plugin bundle.

Supports macOS 26 or newer.

Overview

At a high level, me:

• delegates core macOS setup and 1Password-backed SSH-key installation to Bootbox
• installs applications, runtimes, and command-line tools from Brewfile
• applies the personal configuration packages under dotfiles/ to $HOME
• clones or updates the editable @pirog/me checkout used as the machine-profile source
• optionally clones or safely updates explicitly selected repositories from @tanaabased
• applies coordinated Tanaab themes for Codex TUI, Vim, Visual Studio Code, and Warp
• stows piroplugin, Pirobased skills, shared Codex defaults, and local plugin source links

For the complete installed-component inventory, see ADVANCED.md#what-gets-installed.

Quickstart

Provide a 1Password service account token and run the hosted bootstrap:

/bin/bash -c "$(curl -fsSL https://boot.pirog.me/boot.sh)" piroboot \
  --op-token "$OP_TOKEN"

The default run installs the configured SSH keys and applies the me Brewfile and dotfiles to $HOME. It does not clone Tanaab repositories unless they are selected explicitly.

Run the hosted help directly for the complete option and environment-variable contract:

/bin/bash -c "$(curl -fsSL https://boot.pirog.me/boot.sh)" piroboot --help

Usage

For repeated use, install the hosted script as a local command in a directory you manage on PATH:

mkdir -p "$HOME/.local/bin"
curl -fsSL https://boot.pirog.me/boot.sh -o "$HOME/.local/bin/piroboot"
chmod +x "$HOME/.local/bin/piroboot"

piroboot --help

Run it with flags when you want to keep the selected behavior explicit:

piroboot \
  --op-token "$OP_TOKEN" \
  --ssh-key "vmruk4ny353aly6tbom7z3v2hy/id_pirog" \
  --tanaab canon \
  --tanaab agentbox

Common inputs:

Option	Environment variable	Description
--op-token	PIROME_OP_TOKEN	1Password service account token used for private SSH-key access.
--ssh-key	PIROME_SSH_KEY	Repeatable vault/item[:filename] SSH-key specification.
--tanaab	PIROME_TANAAB	Repeatable repository name from the @tanaabased organization.
--yes	NONINTERACTIVE	Accept the plan and run without prompts.
--force	PIROME_FORCE	Force supported Bootbox operations and SSH-key replacement.
--debug	PIROME_DEBUG	Show debug output with secrets masked.

Selected repositories and local plugin links are handled conservatively. See Tanaab Repository Checkouts for the complete clone, refresh, and link-reconciliation behavior.

Note

Dependency and app behavior differs on agentbox and formula-backed Tailscale hosts. See agentbox Hosts.

Use ADVANCED.md for the full option and environment-variable reference, installed components, checkout behavior, post-bootstrap setup, and Codex configuration and plugin sync.

After Bootstrap

Complete the app-backed steps in Post-Bootstrap Setup, then ask Codex to run $piro-me-readiness for read-only verification of the resulting machine profile.

Development

This repository uses Bun for local tooling:

git clone [email protected]:pirog/me.git
cd me
bun install
bun run test
bun run lint

See ADVANCED.md#codex-configuration-and-plugin-sync for the separate ai:sync and codex:* workflows.

bun run build and Leia scenarios are CI-owned by default because they generate dist/ or mutate macOS runner state.

Issues, Questions and Support

Use the GitHub issue queue for bugs, regressions, or feature requests.

Changelog

See CHANGELOG.md for release history and GitHub releases for published artifacts.

Maintainers

• @pirog

Contributors

Made with contrib.rocks.