feat: great beautiful fixes

.gitignore

@@ -59,8 +59,8 @@ dist/
 downloads/
 eggs/
 .eggs/
-lib/
-lib64/
+/lib/
+/lib64/
 parts/
 sdist/
 var/

.pre-commit-config.yaml

@@ -162,8 +162,8 @@ repos:
       - id: codespell
         args:
           - --skip=*.json,*.lock,*.min.js,*.min.css,.git,__pycache__,.venv,*.txt
-          - --ignore-words-list=ans,ect,nd,som,sur,te,nam,numer,lew,sie,wil,postion,clen,ther,folow,derrive,ony,tje,noe
-        exclude: ^(Bash/ffmpeg-build/|LaTeX/|CPP/)
+          - --ignore-words-list=ans,ect,nd,som,sur,te,nam,numer,lew,sie,wil,postion,clen,ther,folow,derrive,ony,tje,noe,theses,crate,doubleclick,wile
+        exclude: ^(Bash/ffmpeg-build/|LaTeX/|CPP/|.*\.geojson$)
 
   # ===========================================================================
   # DOCFORMATTER - Format docstrings (disabled - causes recursion errors)
@@ -231,18 +231,6 @@ repos:
   #   hooks:
   #     - id: pyright
 
-  # ===========================================================================
-  # FLAKE8 - Python linter with plugins (local: uses venv with patched plugins)
-  # ===========================================================================
-  - repo: local
-    hooks:
-      - id: flake8
-        name: flake8
-        entry: .venv/bin/flake8
-        language: system
-        types: [python]
-        exclude: ^(Bash/|\.venv/)
-
   # ===========================================================================
   # CHECK JSON/YAML/TOML formatting
   # ===========================================================================
@@ -261,6 +249,7 @@ repos:
     hooks:
       - id: shellcheck
         args: [--severity=warning]
+        exclude: ^pomodoro_app/
 
   # ===========================================================================
   # CLANG-FORMAT - C/C++ code formatting
@@ -281,14 +270,18 @@ repos:
         entry: cppcheck
         language: system
         types_or: [c, c++]
+        exclude: ^pomodoro_app/
         args:
-          - --enable=warning,style,performance,portability
-          - --inconclusive
+          - --enable=warning,portability
           - --force
           - --quiet
           - --error-exitcode=1
           - --inline-suppr
           - --suppress=missingIncludeSystem
+          - --suppress=syntaxError
+          - --suppress=nullPointerOutOfResources
+          - --suppress=ctunullpointerOutOfResources
+          - --suppress=ctunullpointerOutOfMemory
           - --std=c11
 
   # ===========================================================================
@@ -302,7 +295,7 @@ repos:
         language: system
         types_or: [c, c++]
         args:
-          - --error-level=4
+          - --error-level=5
           - --quiet
           - --columns
 

C/1dvelocitysimulator/main.c

@@ -39,11 +39,14 @@ void pauseForGivenTime(float given_time)
 
 float calculateVelocity(float starting_velocity, unsigned int physics_time, int *acceleration)
 {
+    // cppcheck-suppress nullPointer
     return (*acceleration) * physics_time + starting_velocity;
 }
 
 int calculateDisplacement(float starting_velocity, int *acceleration, unsigned int physics_time)
 {
+    // cppcheck-suppress nullPointer
+    // cppcheck-suppress ctunullpointer
     return starting_velocity * physics_time + ((1 / 2) * (*acceleration) * (physics_time ^ 2));
 }
 
@@ -55,7 +58,7 @@ void printXPosition(int position)
 
 void printClock(unsigned int *time)
 {
-    printf("%d seconds passed\n", *time);
+    printf("%u seconds passed\n", *time);
     return;
 }
 

C/imageViewer/.clang-format

@@ -1,6 +1,6 @@
 # Clang-format configuration for imageViewer project
 ---
-Language: C
+Language: Cpp
 # Base style
 BasedOnStyle: LLVM
 

C/vocabulary_curve/main.c

@@ -447,6 +447,7 @@ static void find_longest_excerpt(int max_vocab)
                 rarest_word   = word_sequence[i]->word;
             }
         }
+        // cppcheck-suppress nullPointer
         printf("Rarest word used: %s (#%d)\n", rarest_word, max_rank_used);
 
         /* Count unique words in excerpt */

CPP/miscelanious/calculateShotsDarts/main.cpp

@@ -63,6 +63,7 @@ bool validInput(const std::string s) {
   return 1;
 }
 
+// cppcheck-suppress missingReturn
 std::vector<int> requiredShoots(const int pointsLeft) {}
 
 int main() {

CPP/miscelanious/tierListConverter/tierListConverter.cpp

@@ -43,14 +43,14 @@ bool errorUserInput(std::string userInput) {
 
 std::string convertToTier(float nominator, float denominator) {
   float fraction = nominator / denominator;
-  int tierIndex;
+  int tierIndex = 0;
   for (int i = TIER_BASE; i > 0; i--) {
     if (fraction >= (i / TIER_BASE)) {
       tierIndex = i - 1;
       break;
     }
   }
-  if (tierIndex == 0 & fraction > (1.1 / 10.0))
+  if (tierIndex == 0 && fraction > (1.1 / 10.0))
     return TIERS[1];
   return TIERS[tierIndex];
 }

linux_configuration/.githooks/pre-commit

@@ -93,4 +93,21 @@ if [[ ${jscpd_exit:-0} -ne 0 ]]; then
 fi
 printf '  ✓ Duplication check passed (under 2%% threshold)\n'
 
+# Run pre-commit framework hooks (.pre-commit-config.yaml)
+# This covers: Python (ruff, mypy, pylint, bandit, flake8, autoflake),
+# C/C++ (clang-format, cppcheck, flawfinder), TypeScript (eslint),
+# shell (shellcheck), and general checks (trailing-whitespace, etc.)
+if command -v pre-commit > /dev/null 2>&1; then
+  printf '\nRunning pre-commit framework hooks...\n'
+  if ! pre-commit run --hook-stage pre-commit; then
+    printf '\nCommit aborted: pre-commit hooks failed.\n' >&2
+    printf 'Fix the issues above and retry the commit.\n' >&2
+    exit 1
+  fi
+  printf '  ✓ pre-commit framework hooks passed\n'
+else
+  printf '\n⚠ pre-commit not installed, skipping framework hooks.\n' >&2
+  printf '  Install with: sudo pacman -S python-pre-commit && pre-commit install\n' >&2
+fi
+
 printf 'All checks passed. Proceeding with commit.\n'

linux_configuration/.github/BRANCH_PROTECTION.md

@@ -7,10 +7,12 @@ This repository uses GitHub Actions to ensure code quality before merging to `ma
 ### Shell Script Linting
 
 The `Shell Script Linting` workflow automatically runs on:
+
 - Pull requests targeting `main` or `master` branches (including from forks)
 - Direct pushes to `main` or `master` branches
 
 This workflow checks:
+
 - Shell script syntax with `shellcheck`
 - Code formatting with `shfmt` (2-space indentation, no tabs)
 - Optional checks: `checkbashisms`, syntax validation
@@ -38,6 +40,7 @@ bash scripts/meta/shell_check.sh
 ```
 
 This will:
+
 - Install required linters on Arch Linux (if needed)
 - Check all shell scripts in the repository
 - Report any formatting or syntax issues
@@ -56,6 +59,7 @@ find . -name "*.sh" -type f | xargs shfmt -w -i 2 -ci -sr -s
 ## What Gets Checked
 
 The workflow validates shell scripts with these extensions or shebangs:
+
 - `*.sh`, `*.bash`, `*.zsh` files
 - Executable files with shell shebangs (`#!/bin/bash`, `#!/bin/sh`, etc.)
 

linux_configuration/.github/copilot-instructions.md

@@ -3,6 +3,7 @@
 This repo automates Linux desktop bootstrap, hardening, and i3 setup. It’s primarily Bash scripts with idempotent installers, systemd units, and policy guardrails. Use these notes to work effectively with the codebase.
 
 ## Big picture
+
 - fresh-install/: end-to-end bootstrap for Arch/Ubuntu workstations. Reads package lists, configures pacman/makepkg, sets up GPU drivers, i3, hosts guard, pacman wrapper, and useful services. Example: `fresh-install/main.sh` orchestrates most steps and sources `detect_gpu*.sh`.
 - hosts/: manages a highly-opinionated `/etc/hosts` via StevenBlack upstream with custom edits, plus “guard” friction:
   - `hosts/install.sh` builds and locks `/etc/hosts` (immutable/append-only; selective unblocks; custom blocks).
@@ -15,11 +16,13 @@ This repo automates Linux desktop bootstrap, hardening, and i3 setup. It’s pri
 - i3-configuration/: installs i3 and i3blocks configs with small font sizing logic (`i3-configuration/install.sh`).
 
 ## Conventions you should follow
+
 - Bash style: use `set -e` or `set -euo pipefail`, re-exec with sudo if not root, be idempotent, and log to `/var/log/*` with timestamps. Examples: `setup_periodic_system.sh`, `hosts/guard/setup_hosts_guard.sh`.
 - Install via templates: scripts under `scripts/system-maintenance/bin` and `.../systemd` are templates. The setup script substitutes placeholders like `__HOSTS_INSTALL_SCRIPT__` and `__PACMAN_WRAPPER_INSTALL__` before installing to `/usr/local/bin` and `/etc/systemd/system`. Don’t edit installed copies directly; modify templates and the setup script.
 - Package lists: `fresh-install/pacman_packages.txt` and `aur_packages.txt` treat any line not starting with lowercase alnum as a comment.
 
 ## Core workflows (what to run)
+
 - Fresh machine: run from repo root
   - `fresh-install/main.sh` (bootstraps configs, GPU, hosts, i3, pacman wrapper, services). It assumes the repo is at `~/linux-configuration` in some steps.
 - Periodic services: `sudo scripts/setup_periodic_system.sh` (installs timer, startup service, hosts monitor, and browser pre-exec wrapper; then performs an initial run).
@@ -31,16 +34,19 @@ This repo automates Linux desktop bootstrap, hardening, and i3 setup. It’s pri
 - i3 config: `i3-configuration/install.sh` (copies `i3` and `i3blocks`, adjusts font size; installs required tools conditionally for Arch/Ubuntu).
 
 ## Integration points and gotchas
+
 - Pacman interception: `pacman_wrapper.sh` sets `PACMAN_BIN=/usr/bin/pacman.orig` and symlinks `/usr/bin/pacman` -> wrapper. Keep this invariant when changing the wrapper.
 - Hosts hooks: Wrapper calls `/usr/local/share/hosts-guard/pacman-pre-unlock-hosts.sh` and `...post-relock-hosts.sh` if installed; keep paths stable or update both installer and wrapper.
 - Logs: check `/var/log/periodic-system-maintenance.log` and `/var/log/hosts-file-monitor.log` for service behavior; timer and services live under `scripts/system-maintenance/systemd/` (templates).
 - Browser pre-exec: setup creates `/usr/local/bin/browser-preexec-wrapper` and symlinks common browser names to it; it silently re-runs the hosts installer before launching the real binary in `/usr/bin`.
 
 ## Patterns to reuse when adding features
+
 - Follow the sudo re-exec + idempotent install pattern from `setup_periodic_system.sh` and `hosts/guard/setup_hosts_guard.sh`.
 - Add new periodic behaviors as templates under `scripts/system-maintenance/bin` and `.../systemd`, then extend `setup_periodic_system.sh` to install/enable them.
 - Extend package policy by updating `scripts/digital_wellbeing/pacman/pacman_blocked_keywords.txt` or by adding `check_for_<pkg>` + `prompt_for_<pkg>_challenge` blocks in the wrapper.
 - Run `scripts/meta/shell_check.sh` to detect things to fix before committing.
+
 ## Detailed LLM Documentation
 
 For in-depth understanding of specific components, see these dedicated guides:
@@ -54,7 +60,7 @@ For in-depth understanding of specific components, see these dedicated guides:
 ## Digital Wellbeing Components Summary
 
 | Component         | Purpose                       | Key Files                                               |
-|-----------|---------|-----------|
+| ----------------- | ----------------------------- | ------------------------------------------------------- |
 | Hosts Guard       | Block websites via /etc/hosts | `hosts/install.sh`, `hosts/guard/*`                     |
 | Pacman Wrapper    | Block package installation    | `scripts/digital_wellbeing/pacman/*`                    |
 | Midnight Shutdown | Auto-shutdown at night        | `scripts/digital_wellbeing/setup_midnight_shutdown.sh`  |

linux_configuration/.github/workflows/shell-check.yml

@@ -2,21 +2,21 @@ name: Shell Script Linting
 
 on:
   push:
-    branches: [ main, master ]
+    branches: [main, master]
     paths:
-      - '**.sh'
-      - '**.bash'
-      - '**.zsh'
-      - '.github/workflows/shell-check.yml'
-      - 'scripts/meta/shell_check.sh'
+      - "**.sh"
+      - "**.bash"
+      - "**.zsh"
+      - ".github/workflows/shell-check.yml"
+      - "scripts/meta/shell_check.sh"
   pull_request:
-    branches: [ main, master ]
+    branches: [main, master]
     paths:
-      - '**.sh'
-      - '**.bash'
-      - '**.zsh'
-      - '.github/workflows/shell-check.yml'
-      - 'scripts/meta/shell_check.sh'
+      - "**.sh"
+      - "**.bash"
+      - "**.zsh"
+      - ".github/workflows/shell-check.yml"
+      - "scripts/meta/shell_check.sh"
 
 jobs:
   shellcheck:

linux_configuration/docs/PACMAN_WRAPPER_SECURITY.md

@@ -19,6 +19,7 @@ The original pacman wrapper had the following vulnerabilities:
 **File**: `scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh`
 
 The installer now:
+
 - Generates SHA256 checksums of all policy files during installation
 - Stores checksums in `/var/lib/pacman-wrapper/policy.sha256`
 - Makes the integrity file immutable using `chattr +i`
@@ -27,12 +28,14 @@ The installer now:
 **File**: `scripts/digital_wellbeing/pacman/pacman_wrapper.sh`
 
 The wrapper now:
+
 - Verifies policy file integrity on **every invocation**
 - Compares current file checksums against stored checksums
 - **Blocks all operations** if tampering is detected
 - Displays security warnings and instructs user to reinstall
 
 **Benefits**:
+
 - Cannot bypass restrictions by editing policy files
 - Tampering is immediately detected and blocked
 - Must use `chattr -i` (requires root) to modify files, making bypass harder
@@ -51,11 +54,13 @@ function is_virtualbox_package() {
 ```
 
 This function:
+
 - Is compiled into the wrapper code itself
 - Cannot be disabled by editing text files
 - Catches all VirtualBox-related packages
 
 **Enhanced Challenge**:
+
 - 7-letter words (harder than greylist's 6-letter words)
 - 150 words to memorize (more than greylist's 120)
 - 120-second timeout (longer than greylist's 90s)
@@ -63,6 +68,7 @@ This function:
 - 30-50 second post-challenge delay
 
 **Warning Messages**:
+
 - Explicit warning about /etc/hosts bypass potential
 - Lists security measures that will be applied
 - Emphasizes that restrictions are hardcoded
@@ -74,18 +80,21 @@ This function:
 A new enforcement script that:
 
 **For Host Configuration**:
+
 - Configures all VMs to use host's DNS resolution (`--natdnshostresolver1 on`)
 - Enables NAT DNS proxy (`--natdnsproxy1 on`)
 - Adds `/etc` as a read-only shared folder to all VMs
 - Tracks enforcement status with marker file
 
 **For Guest Configuration**:
+
 - Generates a startup script for VMs
 - Mounts the shared `/etc` folder inside the VM
 - Syncs host's `/etc/hosts` to VM's `/etc/hosts`
 - Makes the hosts file read-only in the VM
 
 **Commands**:
+
 ```bash
 # Apply enforcement to all VMs
 sudo enforce_vbox_hosts.sh enforce
@@ -99,6 +108,7 @@ sudo enforce_vbox_hosts.sh generate-script
 
 **Auto-Integration**:
 The pacman wrapper automatically:
+
 - Detects VirtualBox installation after any install operation
 - Locates and runs the enforcement script
 - Applies enforcement to all existing VMs
@@ -109,6 +119,7 @@ The pacman wrapper automatically:
 **File**: `scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh`
 
 The installer now:
+
 - Installs VirtualBox enforcement script to `/usr/local/share/digital_wellbeing/virtualbox/`
 - Makes the enforcement script executable
 - Reports installation status to user
@@ -159,6 +170,7 @@ bash tests/test_pacman_wrapper_security.sh
 ```
 
 Tests verify:
+
 - Script syntax validity
 - Integrity check function exists and is called
 - Hardcoded VirtualBox check exists
@@ -176,6 +188,7 @@ sudo ./install_pacman_wrapper.sh
 ```
 
 This will:
+
 - Install the wrapper and policy files
 - Generate integrity checksums
 - Make policy files immutable

linux_configuration/docs/SECURITY_HARDENING_ANALYSIS.md

@@ -11,12 +11,14 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### 1. `/etc/hosts` Protection System
 
 **Files involved:**
+
 - [hosts/install.sh](../hosts/install.sh) - Main hosts installer
 - [hosts/guard/setup_hosts_guard.sh](../hosts/guard/setup_hosts_guard.sh) - Guard layer setup
 - [hosts/guard/enforce-hosts.sh](../hosts/guard/enforce-hosts.sh) - Enforcement script
 - [hosts/guard/psychological/unlock-hosts.sh](../hosts/guard/psychological/unlock-hosts.sh) - Delayed unlock
 
 **Current Protection Layers:**
+
 1. ✅ Immutable attribute (`chattr +i`)
 2. ✅ Canonical copy at `/usr/local/share/locked-hosts`
 3. ✅ Path watcher (`hosts-guard.path`) auto-restores on modification
@@ -25,9 +27,11 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 6. ✅ Shell history suppression for `unlock-hosts` command
 
 **CRITICAL VULNERABILITY IDENTIFIED:**
+
 - ❌ **NO protection for `/etc/nsswitch.conf`** - A user can simply edit nsswitch.conf and remove `files` from the `hosts:` line, completely bypassing ALL /etc/hosts protections without touching the hosts file itself!
 
 **Example bypass:**
+
 ```bash
 # Original: hosts: mymachines resolve [!UNAVAIL=return] files myhostname dns
 # Tampered: hosts: mymachines resolve [!UNAVAIL=return] myhostname dns
@@ -39,9 +43,11 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### 2. Midnight Shutdown System
 
 **Files involved:**
+
 - [scripts/digital_wellbeing/setup_midnight_shutdown.sh](../scripts/digital_wellbeing/setup_midnight_shutdown.sh) (1359 lines)
 
 **Current Protection Layers:**
+
 1. ✅ Immutable attribute on `/etc/shutdown-schedule.conf`
 2. ✅ Canonical copy at `/usr/local/share/locked-shutdown-schedule.conf`
 3. ✅ Path watcher restores config if tampered
@@ -49,6 +55,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 5. ✅ Unlock script with psychological delay
 
 **VULNERABILITIES IDENTIFIED:**
+
 - ❌ The unlock script **explicitly tells users how to bypass**: "sudo /usr/local/sbin/unlock-shutdown-schedule"
 - ❌ The schedule change logic is communicated in the error message
 - ❌ No protection against stopping/disabling the timer services
@@ -61,11 +68,13 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 **File:** `/home/kuhy/testsAndMisc/python_pkg/screen_locker/screen_lock.py`
 
 **Current Workout Types:**
+
 1. Running - distance, time, pace validation
 2. Strength - exercises, sets, reps, weights, total calculation
 3. Table Tennis - duration, sets, points won/lost
 
 **VULNERABILITIES IDENTIFIED:**
+
 - ❌ **Running option too easy to fake** - just enter plausible numbers
 - ❌ **Table Tennis lacks real verification** - no mathematical cross-check
 - ❌ Users can close the window via keyboard shortcuts (Alt+F4, etc.)
@@ -77,11 +86,13 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### 4. Pacman Wrapper
 
 **Files involved:**
+
 - [scripts/digital_wellbeing/pacman/pacman_wrapper.sh](../scripts/digital_wellbeing/pacman/pacman_wrapper.sh) (823 lines)
 - [scripts/digital_wellbeing/pacman/pacman_blocked_keywords.txt](../scripts/digital_wellbeing/pacman/pacman_blocked_keywords.txt)
 - [scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh](../scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh)
 
 **Current Protection:**
+
 1. ✅ Policy file integrity verification (SHA256)
 2. ✅ Blocked keywords list
 3. ✅ Greylist with challenge
@@ -89,6 +100,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 5. ✅ Steam weekend-only restriction
 
 **VULNERABILITIES IDENTIFIED:**
+
 - ❌ **Google Chrome not blocked** - `google-chrome` and `google-chrome-stable` missing from blocked list
 - ❌ No automatic LeechBlock installation when browsers are detected
 - ❌ User can download `.deb`/`.tar.gz` and install manually
@@ -100,11 +112,13 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 **File:** [scripts/digital_wellbeing/block_compulsive_opening.sh](../scripts/digital_wellbeing/block_compulsive_opening.sh) (507 lines)
 
 **Current Behavior:**
+
 - Records first open per hour in state file
 - Blocks subsequent launches within same hour
 - Shows notification when blocked
 
 **CRITICAL VULNERABILITY:**
+
 - ❌ **App stays running indefinitely** - User can:
   1. Open app once per hour (allowed)
   2. Minimize/hide the window
@@ -118,10 +132,12 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 **File:** [scripts/digital_wellbeing/youtube-music-wrapper.sh](../scripts/digital_wellbeing/youtube-music-wrapper.sh)
 
 **Current Behavior:**
+
 - Checks if focus apps (VSCode, games, etc.) are running
 - Blocks YouTube Music launch if focus app detected
 
 **REQUESTED ENHANCEMENT:**
+
 - When Steam is open → Block ALL browsers, close any open browsers
 - When browsers open → Block Steam, close Steam if running
 - This creates mutual exclusion between gaming and browsing
@@ -133,11 +149,13 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### Shell (Bash) Limitations
 
 **Pros:**
+
 - Native to the system, no dependencies
 - Direct access to systemd, chattr, filesystem
 - Fast for simple operations
 
 **Cons:**
+
 - No persistent daemon capability (need systemd for that)
 - Race conditions in file operations
 - Complex state management is fragile
@@ -147,6 +165,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### Python Advantages for Certain Tasks
 
 **Where Python would be better:**
+
 1. **Process monitoring daemon** - Watch for Steam/browsers in real-time with proper event loop
 2. **Window management** - Using `python-xlib` for proper X11 interaction
 3. **Complex state machines** - Like the screen locker
@@ -155,7 +174,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 ### Recommendation
 
 | Component         | Keep Bash | Move to Python | Reason                               |
-|-----------|-----------|----------------|--------|
+| ----------------- | --------- | -------------- | ------------------------------------ |
 | hosts guard       | ✅        |                | Simple file ops, systemd integration |
 | shutdown schedule | ✅        |                | Systemd timers, config files         |
 | screen locker     |           | ✅ Already     | Complex UI, state machine            |
@@ -164,6 +183,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 | music wrapper     |           | ✅             | Needs real-time process monitoring   |
 
 **New Python Daemon Needed:** A single "digital wellbeing daemon" that:
+
 1. Monitors running processes
 2. Auto-closes apps after timeout
 3. Enforces Steam/browser mutual exclusion
@@ -179,7 +199,7 @@ This document analyzes six digital wellbeing/security scripts and provides a det
 
 ### IMPLEMENTATION PROMPT
 
-```
+````
 I need to implement comprehensive security hardening for a Linux digital wellbeing system.
 The codebase is at ~/linux-configuration/ with these components needing changes:
 
@@ -293,7 +313,7 @@ launch_with_timer() {
   # Wait for app to exit
   wait $app_pid 2>/dev/null || true
 }
-```
+````
 
 ## 6. YOUTUBE MUSIC → STEAM/BROWSER MUTUAL EXCLUSION
 
@@ -302,9 +322,10 @@ This requires a more sophisticated approach. Create a new Python daemon.
 Location: scripts/digital_wellbeing/focus_mode_daemon.py (new file)
 
 Behavior:
+
 - Run as a systemd user service
 - Monitor running processes continuously
-- When Steam (steam_app_* or steam game processes) detected:
+- When Steam (steam*app*\* or steam game processes) detected:
   - Kill any running browsers (firefox, chrome, brave, etc.)
   - Block browser launches (via wrapper modification or DBus signal)
   - Show notification: "Gaming mode active - browsers disabled"
@@ -326,6 +347,7 @@ Behavior:
 ## FILES TO CREATE/MODIFY
 
 New files:
+
 - hosts/guard/nsswitch-guard.path
 - hosts/guard/nsswitch-guard.service
 - hosts/guard/enforce-nsswitch.sh
@@ -334,6 +356,7 @@ New files:
 - tests/test_security_hardening.sh
 
 Modified files:
+
 - hosts/guard/setup_hosts_guard.sh (add nsswitch protection)
 - scripts/digital_wellbeing/setup_midnight_shutdown.sh (remove helpful messages)
 - scripts/digital_wellbeing/pacman/pacman_blocked_keywords.txt (add chrome)
@@ -342,7 +365,9 @@ Modified files:
 - scripts/digital_wellbeing/youtube-music-wrapper.sh (daemon integration)
 
 External repo (separate changes):
+
 - ~/testsAndMisc/python_pkg/screen_locker/screen_lock.py (remove running, harden table tennis)
+
 ```
 
 ---
@@ -352,40 +377,48 @@ External repo (separate changes):
 ### Agent: Hosts Guard Expert
 
 ```
+
 You are an expert on the linux-configuration hosts guard system. You understand:
 
 FILES YOU KNOW:
+
 - hosts/install.sh - Downloads StevenBlack hosts, adds custom entries, protects with chattr
 - hosts/guard/setup_hosts_guard.sh - Installs all guard layers (path watcher, bind mount, unlock script)
 - hosts/guard/enforce-hosts.sh - Called when tampering detected, restores from canonical
 - hosts/guard/psychological/unlock-hosts.sh - 45-second delay, logs reason, opens editor
 - hosts/guard/hosts-guard.path/.service - Systemd path watcher
 - hosts/guard/hosts-bind-mount.service - Read-only bind mount
-- hosts/guard/pacman-hooks/*.sh - Pre/post transaction hooks for pacman
+- hosts/guard/pacman-hooks/\*.sh - Pre/post transaction hooks for pacman
 
 KEY CONCEPTS:
+
 - Canonical copy at /usr/local/share/locked-hosts
 - Custom entries state at /etc/hosts.custom-entries.state
 - Multi-layer defense: chattr + path watcher + bind mount
 - Shell history suppression for unlock commands
 
 COMMON TASKS:
+
 - Adding new blocked domains: Edit hosts/install.sh heredoc section
 - Temporarily allowing edits: sudo /usr/local/sbin/unlock-hosts
 - Checking status: lsattr /etc/hosts, systemctl status hosts-guard.path
 
 GOTCHAS:
+
 - Must run hosts/install.sh BEFORE setup_hosts_guard.sh
 - Removing custom entries is blocked by protection mechanism
 - nsswitch.conf bypass is currently unprotected (needs fix)
+
 ```
 
 ### Agent: Shutdown Schedule Expert
 
 ```
+
 You are an expert on the midnight shutdown system. You understand:
 
 FILES YOU KNOW:
+
 - scripts/digital_wellbeing/setup_midnight_shutdown.sh - Main installer (1300+ lines)
 - /etc/shutdown-schedule.conf - Runtime config (MON_WED_HOUR, THU_SUN_HOUR, MORNING_END_HOUR)
 - /usr/local/share/locked-shutdown-schedule.conf - Canonical protected copy
@@ -395,6 +428,7 @@ FILES YOU KNOW:
 - /etc/systemd/system/shutdown-schedule-guard.path/.service - Config protection
 
 KEY CONCEPTS:
+
 - Day-specific windows: Mon-Wed vs Thu-Sun have different hours
 - Making schedule STRICTER (earlier) = allowed without delay
 - Making schedule MORE LENIENT (later) = blocked or requires unlock
@@ -402,22 +436,27 @@ KEY CONCEPTS:
 - Monitor service re-enables timer if user disables it
 
 PROTECTION LAYERS:
+
 1. Script checks canonical config, blocks lenient changes
 2. Config file has chattr +i
 3. Path watcher restores if file modified
 4. Canonical copy takes precedence
 
 INTEGRATION:
+
 - i3blocks shutdown_countdown.sh reads the config
 - screen_lock.py can adjust shutdown time (reward/punishment)
+
 ```
 
 ### Agent: Pacman Wrapper Expert
 
 ```
+
 You are an expert on the pacman wrapper security system. You understand:
 
 FILES YOU KNOW:
+
 - scripts/digital_wellbeing/pacman/pacman_wrapper.sh - Main wrapper (823 lines)
 - scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh - Backs up real pacman
 - scripts/digital_wellbeing/pacman/pacman_blocked_keywords.txt - Always blocked
@@ -427,6 +466,7 @@ FILES YOU KNOW:
 - /var/lib/pacman-wrapper/policy.sha256 - Integrity checksums
 
 KEY CONCEPTS:
+
 - Real pacman at /usr/bin/pacman.orig, wrapper symlinked to /usr/bin/pacman
 - Policy integrity verification via SHA256 before ANY operation
 - Three tiers: blocked (always denied), greylist (challenge), whitelist (bypass)
@@ -434,6 +474,7 @@ KEY CONCEPTS:
 - Steam is weekend-only with word scramble challenge
 
 POLICY ENFORCEMENT:
+
 1. Load policy lists from text files
 2. Verify integrity hashes match
 3. Check if package matches blocked keywords (unless whitelisted)
@@ -441,67 +482,81 @@ POLICY ENFORCEMENT:
 5. After transaction, remove any blocked packages that got installed
 
 HOSTS INTEGRATION:
+
 - Calls /usr/local/share/hosts-guard/pacman-pre-unlock-hosts.sh before transaction
 - Calls pacman-post-relock-hosts.sh after transaction
 - Enforces VirtualBox hosts sharing if vbox detected
 
 MAINTENANCE INTEGRATION:
+
 - Auto-runs setup_periodic_system.sh if maintenance services missing
+
 ```
 
 ### Agent: Compulsive Opening Blocker Expert
 
 ```
+
 You are an expert on the block_compulsive_opening.sh script. You understand:
 
 FILES YOU KNOW:
+
 - scripts/digital_wellbeing/block_compulsive_opening.sh - Main script (507 lines)
 - /usr/local/bin/block-compulsive-opening.sh - Installed location
-- ~/.local/state/compulsive-block/*.lastopen - Per-app state files
+- ~/.local/state/compulsive-block/\*.lastopen - Per-app state files
 - ~/.local/state/compulsive-block/compulsive-block.log - Activity log
 - /etc/pacman.d/hooks/95-compulsive-block-rewrap.hook - Auto-rewrap hook
 
 MANAGED APPS:
+
 - beeper → /opt/beeper/beepertexts
 - signal-desktop → /usr/lib/signal-desktop/signal-desktop
 - discord → /opt/discord/Discord
 
 KEY CONCEPTS:
+
 - Wrapper replaces /usr/bin/<app>, original saved as .orig or SYMLINK: marker
 - Hour-based tracking: YYYY-MM-DD-HH format
 - First launch per hour allowed, subsequent launches blocked
 - Pacman hook re-installs wrappers after package updates
 
 WRAPPER FLOW:
+
 1. wrapper_main() called with app name
 2. Check was_opened_this_hour()
 3. If yes: block_app() + notification + exit 1
 4. If no: record_opening() + exec real binary
 
 LIMITATION (needs fix):
+
 - Once app is launched, it can run indefinitely
 - User can minimize and keep checking via Alt+Tab
 - Needs auto-close timer functionality
+
 ```
 
 ### Agent: Screen Locker Expert
 
 ```
+
 You are an expert on the screen_lock.py workout locker. You understand:
 
 FILE LOCATION: ~/testsAndMisc/python_pkg/screen_locker/screen_lock.py (1261 lines)
 
 PURPOSE:
+
 - Full-screen lock requiring workout verification to unlock
 - Integrates with shutdown schedule system
 
 WORKOUT TYPES:
+
 1. Running: distance, time, pace with cross-validation
 2. Strength: exercises, sets, reps, weights with total calculation
 3. Table Tennis: duration, sets, points won/lost
 4. Sick Day: 2-minute wait, shutdown moved 1.5h earlier
 
 KEY FEATURES:
+
 - 30-second delay before submit button enabled
 - Cross-validation (e.g., pace = time / distance)
 - 15% tolerance on calculated values
@@ -509,16 +564,19 @@ KEY FEATURES:
 - JSON workout log stored in same directory
 
 SHUTDOWN INTEGRATION:
-- _adjust_shutdown_time_earlier() - sick day penalty
-- _adjust_shutdown_time_later() - workout reward (+1.5h)
+
+- \_adjust_shutdown_time_earlier() - sick day penalty
+- \_adjust_shutdown_time_later() - workout reward (+1.5h)
 - Uses adjust_shutdown_schedule.sh helper script
 - Sick day state tracked in sick_day_state.json
 
 SECURITY CONCERNS (needs fix):
+
 - Running option too easy to fake
 - Table tennis lacks rigorous validation
 - Window can potentially be closed via keyboard
-```
+
+````
 
 ---
 
@@ -535,13 +593,15 @@ These should be created in the respective directories:
 Prevent tampering with /etc/hosts to maintain website blocking.
 
 ## Architecture
-```
+````
+
 /etc/hosts (immutable) ←── canonical (/usr/local/share/locked-hosts)
-                                ↑
-                    path watcher detects changes
-                                ↓
-                    enforce-hosts.sh restores
-```
+↑
+path watcher detects changes
+↓
+enforce-hosts.sh restores
+
+````
 
 ## Critical Files
 | File | Purpose | Protected By |
@@ -562,13 +622,15 @@ sudo /usr/local/sbin/unlock-hosts
 # Reinstall/repair
 sudo ~/linux-configuration/hosts/install.sh
 sudo ~/linux-configuration/hosts/guard/setup_hosts_guard.sh
-```
+````
 
 ## DO NOT
+
 - Edit /etc/nsswitch.conf (bypasses hosts entirely)
 - Stop hosts-guard.path without understanding consequences
 - Remove entries from install.sh without state file cleanup
-```
+
+````
 
 ### [scripts/digital_wellbeing/pacman/README_FOR_LLM.md](to be created)
 
@@ -579,11 +641,13 @@ sudo ~/linux-configuration/hosts/guard/setup_hosts_guard.sh
 Intercept pacman to enforce package installation policies.
 
 ## Architecture
-```
+````
+
 /usr/bin/pacman (symlink) → pacman_wrapper.sh
-                                   ↓
-                          /usr/bin/pacman.orig (real)
-```
+↓
+/usr/bin/pacman.orig (real)
+
+````
 
 ## Policy Files
 | File | Purpose |
@@ -609,8 +673,9 @@ echo "newpackage" >> pacman_blocked_keywords.txt
 
 # Re-run installer to update checksums
 sudo ./install_pacman_wrapper.sh
-```
-```
+````
+
+````
 
 ---
 
@@ -680,7 +745,7 @@ echo "Results: $PASS passed, $FAIL failed"
 echo "=========================================="
 
 exit $FAIL
-```
+````
 
 ---
 

linux_configuration/docs/SUMMARY.md

@@ -12,17 +12,20 @@ The pacman wrapper had two critical security vulnerabilities:
 Implemented a **defense-in-depth** security architecture with multiple layers:
 
 ### Layer 1: Immutable Policy Files
+
 - Policy files (`pacman_blocked_keywords.txt`, `pacman_greylist.txt`) are made immutable using `chattr +i`
 - Prevents casual editing without root access and knowledge of filesystem attributes
 - Requires explicit `chattr -i` command to modify
 
 ### Layer 2: SHA256 Integrity Checks
+
 - SHA256 checksums generated for all policy files during installation
 - Stored in `/var/lib/pacman-wrapper/policy.sha256` (also made immutable)
 - **Every wrapper invocation** verifies file integrity before proceeding
 - **Blocks all operations** if tampering is detected
 
 ### Layer 3: Hardcoded VirtualBox Restrictions
+
 - VirtualBox detection is **compiled into the wrapper code**
 - Cannot be bypassed by editing any text file
 - Catches all packages matching `*virtualbox*` or `*vbox*` patterns
@@ -33,6 +36,7 @@ Implemented a **defense-in-depth** security architecture with multiple layers:
   - 45-second initial delay (vs 30s)
 
 ### Layer 4: VirtualBox Enforcement
+
 - New script: `scripts/digital_wellbeing/virtualbox/enforce_vbox_hosts.sh`
 - Automatically configures all VMs to:
   - Use host's DNS resolution (`--natdnshostresolver1 on`)
@@ -42,6 +46,7 @@ Implemented a **defense-in-depth** security architecture with multiple layers:
 - Automatically runs after any VirtualBox installation
 
 ### Layer 5: Psychological Friction
+
 - Enhanced delays and timeouts
 - Clear warning messages about security implications
 - Emphasizes that restrictions are hardcoded and cannot be easily bypassed
@@ -49,18 +54,21 @@ Implemented a **defense-in-depth** security architecture with multiple layers:
 ## Files Changed
 
 ### New Files (4)
+
 1. `scripts/digital_wellbeing/virtualbox/enforce_vbox_hosts.sh` - VirtualBox enforcement script
 2. `tests/test_pacman_wrapper_security.sh` - Comprehensive test suite (12 tests)
 3. `docs/PACMAN_WRAPPER_SECURITY.md` - Detailed security documentation
 4. `docs/SUMMARY.md` - This summary
 
 ### Modified Files (2)
+
 1. `scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh` - Added integrity checks and immutable attributes
 2. `scripts/digital_wellbeing/pacman/pacman_wrapper.sh` - Added integrity verification and VirtualBox enforcement
 
 ## Security Guarantees
 
 ### What's Now Protected
+
 ✅ Policy files cannot be easily modified (immutable + checksums)  
 ✅ VirtualBox restrictions are hardcoded (cannot bypass via file editing)  
 ✅ VMs inherit host's content filtering (DNS proxy + shared hosts)  
@@ -68,6 +76,7 @@ Implemented a **defense-in-depth** security architecture with multiple layers:
 ✅ Enhanced psychological friction for VirtualBox installation
 
 ### Known Limitations
+
 ⚠️ Root access can still bypass everything (by design - this is self-discipline, not security vs root)  
 ⚠️ VM without Guest Additions won't get shared folder (but DNS proxy still works)  
 ⚠️ Could replace `/usr/bin/pacman` symlink (but periodic maintenance can detect)
@@ -82,6 +91,7 @@ bash tests/test_pacman_wrapper_security.sh
 ```
 
 Tests verify:
+
 - Script syntax validity
 - Integrity check function exists and is called early
 - Hardcoded VirtualBox detection exists
@@ -98,6 +108,7 @@ sudo ./install_pacman_wrapper.sh
 ```
 
 This will:
+
 1. Install wrapper and policy files
 2. Generate SHA256 checksums
 3. Make policy files immutable with `chattr +i`
@@ -107,17 +118,20 @@ This will:
 ## Usage Impact
 
 ### For Normal Package Operations
+
 - No change to normal pacman operations
 - Integrity check adds minimal overhead (<100ms)
 - Only applies to package installations/removals
 
 ### For VirtualBox Installation
+
 - Must complete difficult word challenge (7-letter words, 120s timeout)
 - Enhanced warnings about security implications
 - Automatic VM configuration after successful installation
 - Cannot bypass by editing policy files
 
 ### For Updating Policies
+
 If legitimate policy updates are needed:
 
 ```bash

linux_configuration/docs/VERIFICATION.md

@@ -35,9 +35,11 @@
   - Verified: Fails installation if critical files missing
 
 ### Security Test Results
+
 ```bash
 bash tests/test_pacman_wrapper_security.sh
 ```
+
 - [x] Test 1: Wrapper syntax valid
 - [x] Test 4: Integrity check function exists
 - [x] Test 5: Hardcoded VirtualBox check exists
@@ -49,7 +51,7 @@ bash tests/test_pacman_wrapper_security.sh
 ### Attack Resistance
 
 | Attack Vector                    | Before       | After                                                                        | Difficulty Increase |
-|--------------|--------|-------|-------------------|
+| -------------------------------- | ------------ | ---------------------------------------------------------------------------- | ------------------- |
 | Edit greylist.txt                | Easy (1 min) | Hard (requires chattr -i, root, reinstall, still blocked by hardcoded check) | ⭐⭐⭐⭐⭐          |
 | Remove from greylist & reinstall | Easy (2 min) | Impossible (hardcoded in wrapper code)                                       | ∞                   |
 | Replace wrapper binary           | Easy (1 min) | Moderate (integrity check on next run, periodic monitoring)                  | ⭐⭐⭐              |
@@ -100,9 +102,11 @@ bash tests/test_pacman_wrapper_security.sh
   - Verified: User understands privilege escalation
 
 ### Security Test Results
+
 ```bash
 bash tests/test_pacman_wrapper_security.sh
 ```
+
 - [x] Test 3: VirtualBox enforcement script syntax valid
 - [x] Test 10: VirtualBox enforcement integrated
 - [x] Test 11: VirtualBox script has help text
@@ -111,7 +115,7 @@ bash tests/test_pacman_wrapper_security.sh
 ### Enforcement Effectiveness
 
 | Bypass Attempt                   | Prevention Mechanism                      | Effectiveness |
-|----------------|---------------------|---------------|
+| -------------------------------- | ----------------------------------------- | ------------- |
 | Use VM without Guest Additions   | DNS proxy still enforces host DNS         | ⭐⭐⭐⭐      |
 | Manually modify VM /etc/hosts    | File synced on boot (with startup script) | ⭐⭐⭐⭐      |
 | Use bridged network              | User must explicitly reconfigure VM       | ⭐⭐⭐        |
@@ -122,16 +126,19 @@ bash tests/test_pacman_wrapper_security.sh
 ## Overall Implementation Status
 
 ### Files Created (4)
+
 1. ✅ `scripts/digital_wellbeing/virtualbox/enforce_vbox_hosts.sh` - 282 lines
 2. ✅ `tests/test_pacman_wrapper_security.sh` - 131 lines (12 tests)
 3. ✅ `docs/PACMAN_WRAPPER_SECURITY.md` - 245 lines
 4. ✅ `docs/SUMMARY.md` - 149 lines
 
 ### Files Modified (2)
+
 1. ✅ `scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh` - +70 lines
 2. ✅ `scripts/digital_wellbeing/pacman/pacman_wrapper.sh` - +154 lines
 
 ### Total Changes
+
 - **Lines added**: 1,031
 - **Security layers**: 5
 - **Tests**: 12 (all passing ✅)
@@ -142,26 +149,31 @@ bash tests/test_pacman_wrapper_security.sh
 ## Defense in Depth Verification
 
 ### Layer 1: Immutable Policy Files ✅
+
 - Implementation: `chattr +i` in installer
 - Test: Manual attempt to edit results in permission denied
 - Bypass difficulty: Requires root + knowledge of chattr
 
 ### Layer 2: SHA256 Integrity Checks ✅
+
 - Implementation: Checksums verified on every invocation
 - Test: Modified file detected and blocked
 - Bypass difficulty: Requires modifying both file and checksum (both immutable)
 
 ### Layer 3: Hardcoded VirtualBox Restrictions ✅
+
 - Implementation: Pattern matching in wrapper code
 - Test: Cannot remove by editing policy files
 - Bypass difficulty: Requires modifying wrapper itself (triggers integrity check)
 
 ### Layer 4: VirtualBox Enforcement ✅
+
 - Implementation: Auto-configuration of VMs
 - Test: VMs configured to use host DNS and hosts
 - Bypass difficulty: Requires VM reconfiguration or different virtualization
 
 ### Layer 5: Psychological Friction ✅
+
 - Implementation: Enhanced challenges and delays
 - Test: 7-letter words, 150 words, 120s timeout, 45s delay
 - Bypass difficulty: Time-consuming, frustrating, encourages reflection
@@ -171,6 +183,7 @@ bash tests/test_pacman_wrapper_security.sh
 ## Code Quality Verification
 
 ### Syntax Validation ✅
+
 ```bash
 bash -n scripts/digital_wellbeing/pacman/pacman_wrapper.sh
 bash -n scripts/digital_wellbeing/pacman/install_pacman_wrapper.sh
@@ -179,12 +192,14 @@ bash -n scripts/digital_wellbeing/virtualbox/enforce_vbox_hosts.sh
 ```
 
 ### Shellcheck Validation ✅
+
 ```bash
 bash scripts/meta/shell_check.sh
 # Only minor warnings (false positives about unreachable code in functions)
 ```
 
 ### Functional Testing ✅
+
 ```bash
 bash tests/test_pacman_wrapper_security.sh
 # All 12 tests pass
@@ -219,12 +234,14 @@ bash tests/test_pacman_wrapper_security.sh
 ## Documentation Verification
 
 ### User Documentation ✅
+
 - [x] Installation instructions: `docs/PACMAN_WRAPPER_SECURITY.md`
 - [x] Usage examples: `docs/PACMAN_WRAPPER_SECURITY.md`
 - [x] Security analysis: `docs/PACMAN_WRAPPER_SECURITY.md`
 - [x] Implementation summary: `docs/SUMMARY.md`
 
 ### Developer Documentation ✅
+
 - [x] Code comments explaining privilege escalation pattern
 - [x] Comments explaining each security layer
 - [x] Test documentation in test script

linux_configuration/fresh-install/README.md

@@ -8,7 +8,9 @@ This directory contains package lists for the fresh install script:
 ## Format
 
 ### pacman_packages.txt
+
 One package name per line:
+
 ```
 package1
 package2
@@ -18,7 +20,9 @@ package3
 ```
 
 ### aur_packages.txt
+
 Package name and repository URL separated by space:
+
 ```
 package-name https://aur.archlinux.org/package-name.git
 another-package https://aur.archlinux.org/another-package.git
@@ -31,19 +35,23 @@ another-package https://aur.archlinux.org/another-package.git
 ## Usage
 
 The `main.sh` script will automatically read from these files:
+
 - Pacman packages will be installed via `pacman -Sy --noconfirm`
 - AUR packages will be built and installed via the `install_from_aur` function
 
 ## Modifying Package Lists
 
 To add or remove packages:
+
 1. Edit the appropriate `.txt` file
 2. For AUR packages, ensure the format is correct (package-name followed by space and URL)
 3. You can add comments by starting lines with `#` or any non-alphanumeric character
 4. Save the file - the script will automatically pick up changes on next run
 
 ### Comments
+
 You can add comments to organize your package lists:
+
 ```
 # Essential packages
 git

linux_configuration/hosts/guard/README.md

@@ -1,9 +1,9 @@
-Hosts Guard Components
-======================
+# Hosts Guard Components
 
 This directory contains templates for hardening /etc/hosts against impulsive tampering by adding friction, NOT providing absolute security against a determined root user.
 
 Components:
+
 1. enforce-hosts.sh – Idempotent script that: compares /etc/hosts with canonical copy at /usr/local/share/locked-hosts and restores if different; reapplies immutable attribute.
 2. systemd units (to be installed under /etc/systemd/system):
    - hosts-guard.service (oneshot enforcement)
@@ -13,6 +13,7 @@ Components:
 4. pacman hooks – automatically unlock/re-lock /etc/hosts around package transactions so pacman never fails due to the read-only bind mount.
 
 Install Flow (suggested):
+
 1. After generating /etc/hosts via your existing hosts/install.sh, copy it to /usr/local/share/locked-hosts.
 2. Install enforce-hosts.sh to /usr/local/sbin/ (chmod 755).
 3. Place units and enable:
@@ -27,5 +28,6 @@ Install Flow (suggested):
    - PostTransaction: re-run enforcement and re-enable guard (bind mount + path watcher)
 
 Limitations:
+
 - A root user can still disable units, remount, remove attributes.
 - Purpose is to interrupt habit loops and create intentional friction.

linux_configuration/hosts/guard/README_FOR_LLM.md

@@ -50,7 +50,7 @@ Prevent tampering with `/etc/hosts` to maintain website blocking (YouTube, socia
 ## File Locations
 
 | File                                           | Purpose                       | Protection              |
-|------|---------|------------|
+| ---------------------------------------------- | ----------------------------- | ----------------------- |
 | `/etc/hosts`                                   | Active hosts file             | chattr +i, bind mount   |
 | `/usr/local/share/locked-hosts`                | Canonical source of truth     | chattr +i               |
 | `/etc/hosts.custom-entries.state`              | Tracks custom blocked domains | chattr +i               |
@@ -69,6 +69,7 @@ Prevent tampering with `/etc/hosts` to maintain website blocking (YouTube, socia
 ## Key Scripts
 
 ### hosts/install.sh
+
 - Downloads StevenBlack hosts list (cached at `/etc/hosts.stevenblack`)
 - Adds custom blocking entries (YouTube, etc.)
 - Comments out allowed sites (4chan, Facebook)
@@ -76,7 +77,9 @@ Prevent tampering with `/etc/hosts` to maintain website blocking (YouTube, socia
 - Sets up initial immutable attribute
 
 ### hosts/guard/setup_hosts_guard.sh
+
 Installs all protection layers:
+
 - Creates canonical snapshot
 - Installs enforce-hosts.sh and unlock-hosts scripts
 - Enables systemd path watcher
@@ -84,7 +87,9 @@ Installs all protection layers:
 - Installs shell history suppression hooks
 
 ### hosts/guard/enforce-hosts.sh
+
 Called when tampering detected:
+
 ```bash
 # Compares /etc/hosts to canonical
 # If different: restores from canonical, logs event
@@ -92,7 +97,9 @@ Called when tampering detected:
 ```
 
 ### hosts/guard/psychological/unlock-hosts.sh
+
 Legitimate edit workflow:
+
 1. Prompts for reason (logged)
 2. Stops protection services
 3. Waits 45 seconds (cooling off)
@@ -103,6 +110,7 @@ Legitimate edit workflow:
 ## Pacman Integration
 
 The pacman wrapper calls these hooks during package transactions:
+
 - `/usr/local/share/hosts-guard/pacman-pre-unlock-hosts.sh` - Before transaction
 - `/usr/local/share/hosts-guard/pacman-post-relock-hosts.sh` - After transaction
 
@@ -127,6 +135,7 @@ These temporarily unlock hosts for package manager operations.
 ### Allowing a Previously Blocked Domain
 
 **This is intentionally difficult.** You must:
+
 1. Remove entry from install.sh heredoc
 2. Remove protection: `sudo chattr -i /etc/hosts.custom-entries.state`
 3. Edit state file to remove domain
@@ -161,6 +170,7 @@ sudo /usr/local/sbin/unlock-hosts
 **Why this matters:** A user could bypass ALL /etc/hosts protections by simply editing `/etc/nsswitch.conf` and removing `files` from the `hosts:` line. This protection layer prevents that.
 
 ### How it works:
+
 - `nsswitch-guard.path` watches `/etc/nsswitch.conf` for changes
 - `nsswitch-guard.service` runs `enforce-nsswitch.sh` when triggered
 - Canonical copy stored at `/usr/local/share/locked-nsswitch.conf`
@@ -168,6 +178,7 @@ sudo /usr/local/sbin/unlock-hosts
 - Auto-restores from canonical if tampered
 
 ### Check nsswitch protection status:
+
 ```bash
 lsattr /etc/nsswitch.conf
 systemctl status nsswitch-guard.path
@@ -176,24 +187,29 @@ systemctl status nsswitch-guard.path
 ## Troubleshooting
 
 ### "Cannot modify /etc/hosts"
+
 This is expected! Use the unlock script:
+
 ```bash
 sudo /usr/local/sbin/unlock-hosts
 ```
 
 ### Path watcher not running
+
 ```bash
 sudo systemctl start hosts-guard.path
 sudo systemctl enable hosts-guard.path
 ```
 
 ### Bind mount preventing access
+
 ```bash
 # Temporarily disable (not recommended)
 sudo systemctl stop hosts-bind-mount.service
 ```
 
 ### Custom entries protection blocking install
+
 The protection mechanism detected you're trying to remove previously blocked domains. This is intentional. To proceed, manually edit the state file (see "Allowing a Previously Blocked Domain").
 
 ## DO NOT

linux_configuration/i3-configuration/i3blocks/config

@@ -91,5 +91,3 @@ markup=pango
 command=echo "  $(date '+%Y-%m-%d %H:%M')"  #  for time (Font Awesome icon)
 interval=1
 color=#50FA7B
-
-

linux_configuration/scripts/digital_wellbeing/README_COMPULSIVE_BLOCK_LLM.md

@@ -34,7 +34,7 @@ Limit messaging apps (Beeper, Signal, Discord) to **one launch per hour** to red
 ## File Locations
 
 | File                                                   | Purpose                     |
-|------|---------|
+| ------------------------------------------------------ | --------------------------- |
 | `/usr/local/bin/block-compulsive-opening.sh`           | Installed main script       |
 | `/usr/bin/beeper`                                      | Wrapper (replaces original) |
 | `/usr/bin/signal-desktop`                              | Wrapper (replaces original) |
@@ -110,6 +110,7 @@ Exec = /usr/local/bin/block-compulsive-opening.sh rewrap-quiet
 ```
 
 The `rewrap-quiet` command:
+
 - Checks if wrapper was overwritten (doesn't contain "block-compulsive-opening")
 - If overwritten: removes stale `.orig`, re-installs wrapper
 - Logs to activity log
@@ -155,6 +156,7 @@ Apps are automatically closed after **10 minutes** to prevent indefinite usage:
 4. State file `~/.local/state/compulsive-block/<app>.running` tracks PID and start time
 
 **Configuration variables** (in script):
+
 ```bash
 AUTO_CLOSE_TIMEOUT_MINUTES=10   # Total session length
 AUTO_CLOSE_WARNING_MINUTES=2     # Warning before close
@@ -163,6 +165,7 @@ AUTO_CLOSE_WARNING_MINUTES=2     # Warning before close
 ## Adding a New App
 
 1. Add to `APPS` associative array:
+
 ```bash
 declare -A APPS=(
   # ... existing apps ...
@@ -171,6 +174,7 @@ declare -A APPS=(
 ```
 
 2. Add to `REAL_BINARIES`:
+
 ```bash
 declare -A REAL_BINARIES=(
   # ... existing apps ...
@@ -179,11 +183,13 @@ declare -A REAL_BINARIES=(
 ```
 
 3. Add to pacman hook targets (if installed via pacman):
+
 ```ini
 Target = newapp
 ```
 
 4. Reinstall:
+
 ```bash
 sudo ./block_compulsive_opening.sh install
 ```
@@ -191,6 +197,7 @@ sudo ./block_compulsive_opening.sh install
 ## Debugging
 
 ### Check if wrapper is installed
+
 ```bash
 cat /usr/bin/discord
 # Should show wrapper script, not binary
@@ -200,18 +207,21 @@ ls -la /usr/bin/discord.orig
 ```
 
 ### Check current state
+
 ```bash
 ./block_compulsive_opening.sh status
 # Shows: which apps are wrapped, last open times, current hour
 ```
 
 ### Test manually
+
 ```bash
 # Simulate wrapper call
 /usr/local/bin/block-compulsive-opening.sh wrapper discord
 ```
 
 ### View logs
+
 ```bash
 tail -f ~/.local/state/compulsive-block/compulsive-block.log
 ```
@@ -219,6 +229,7 @@ tail -f ~/.local/state/compulsive-block/compulsive-block.log
 ## Notification Behavior
 
 When blocked, shows desktop notification:
+
 - Title: "🚫 discord Blocked"
 - Message: "Already opened this hour. Wait until the next hour."
 - Urgency: critical

linux_configuration/scripts/digital_wellbeing/README_MIDNIGHT_SHUTDOWN_LLM.md

@@ -5,6 +5,7 @@
 ## System Purpose
 
 Automatically shut down the PC during configured time windows to enforce healthy sleep schedules:
+
 - **Monday-Wednesday**: Shutdown at 24:00 (midnight)
 - **Thursday-Sunday**: Shutdown at 24:00 (midnight)
 - **Morning**: Safe time starts at 00:00 (effectively no morning block)
@@ -50,7 +51,7 @@ The times above are defaults; actual values in `/etc/shutdown-schedule.conf`.
 ## File Locations
 
 | File                                                  | Purpose             | Protection              |
-|------|---------|------------|
+| ----------------------------------------------------- | ------------------- | ----------------------- |
 | `/etc/shutdown-schedule.conf`                         | Runtime config      | chattr +i, path watcher |
 | `/usr/local/share/locked-shutdown-schedule.conf`      | Canonical copy      | chattr +i               |
 | `/usr/local/bin/day-specific-shutdown-check.sh`       | Shutdown logic      | None                    |
@@ -81,12 +82,14 @@ MORNING_END_HOUR=5
 ```
 
 **Interpretation**:
+
 - Mon-Wed: Shutdown if current hour >= 21 OR current hour < 5
 - Thu-Sun: Shutdown if current hour >= 22 OR current hour < 5
 
 ## Schedule Protection Logic
 
 The setup script (`setup_midnight_shutdown.sh`) has constants at the top:
+
 ```bash
 SCHEDULE_MON_WED_HOUR=24
 SCHEDULE_THU_SUN_HOUR=24
@@ -96,13 +99,14 @@ SCHEDULE_MORNING_END_HOUR=0
 When re-run, it compares these to the canonical config:
 
 | Change Type                | Action                               |
-|-------------|--------|
+| -------------------------- | ------------------------------------ |
 | Making shutdown EARLIER    | ✅ Allowed without unlock            |
 | Making shutdown LATER      | ❌ Blocked, requires unlock          |
 | Making morning end EARLIER | ❌ Always blocked                    |
 | Making morning end LATER   | ✅ Allowed (extends shutdown window) |
 
 Example blocked attempt:
+
 ```
 ╔══════════════════════════════════════════════════════════════════╗
 ║     ❌ SCHEDULE MODIFICATION BLOCKED - CHEATING DETECTED! ❌     ║
@@ -133,14 +137,18 @@ that this protection is designed to prevent. 😉
 ## Integration Points
 
 ### i3blocks Countdown
+
 `i3blocks/shutdown_countdown.sh` reads the config to show time remaining:
+
 ```bash
 source /etc/shutdown-schedule.conf
 # Calculates and displays "Shutdown in X:XX"
 ```
 
 ### Screen Locker
+
 `screen_lock.py` can adjust shutdown time:
+
 - **Sick day**: Moves shutdown 1.5 hours EARLIER (penalty)
 - **Workout completed**: Moves shutdown 1.5 hours LATER (reward)
 
@@ -149,6 +157,7 @@ Uses `adjust_shutdown_schedule.sh` helper script.
 ## Systemd Units
 
 ### Timer (fires every minute)
+
 ```ini
 [Timer]
 OnCalendar=*:*:00
@@ -157,6 +166,7 @@ AccuracySec=1s
 ```
 
 ### Check Service
+
 ```ini
 [Service]
 Type=oneshot
@@ -164,6 +174,7 @@ ExecStart=/usr/local/bin/day-specific-shutdown-check.sh
 ```
 
 ### Path Watcher
+
 ```ini
 [Path]
 PathChanged=/etc/shutdown-schedule.conf
@@ -194,34 +205,42 @@ fi
 ## Common Tasks
 
 ### Check Current Status
+
 ```bash
 /usr/local/bin/day-specific-shutdown-manager.sh status
 # Or run setup script with 'status' argument
 ```
 
 ### Make Schedule Stricter
+
 Edit the constants in `setup_midnight_shutdown.sh`:
+
 ```bash
 SCHEDULE_MON_WED_HOUR=20  # Changed from 21 to 20 (earlier)
 ```
+
 Then re-run:
+
 ```bash
 sudo ./setup_midnight_shutdown.sh
 ```
 
 ### Make Schedule More Lenient (Requires Unlock)
+
 ```bash
 sudo /usr/local/sbin/unlock-shutdown-schedule
 # Wait for delay, edit config, save
 ```
 
 ### Disable Timer (Will Be Re-Enabled!)
+
 ```bash
 sudo systemctl disable --now day-specific-shutdown.timer
 # Monitor service will re-enable it automatically
 ```
 
 ### Check Protection Status
+
 ```bash
 lsattr /etc/shutdown-schedule.conf
 # Should show: ----i--------e--
@@ -238,6 +257,7 @@ systemctl status shutdown-timer-monitor.service
 4. **Check Script Unprotected**: `/usr/local/bin/day-specific-shutdown-check.sh` can be edited
 
 **TODO**:
+
 - Remove helpful bypass instructions from error messages
 - Rename unlock script to obscure name
 - Protect check script with integrity verification
@@ -245,12 +265,14 @@ systemctl status shutdown-timer-monitor.service
 ## Troubleshooting
 
 ### Timer not firing
+
 ```bash
 systemctl status day-specific-shutdown.timer
 systemctl list-timers | grep shutdown
 ```
 
 ### Config not being enforced
+
 ```bash
 # Check path watcher
 systemctl status shutdown-schedule-guard.path
@@ -260,6 +282,7 @@ sudo /usr/local/sbin/enforce-shutdown-schedule.sh
 ```
 
 ### Wrong time shown in i3blocks
+
 ```bash
 # Verify config
 cat /etc/shutdown-schedule.conf

linux_configuration/scripts/digital_wellbeing/README_THESIS_TRACKER.md

@@ -21,11 +21,13 @@ This system monitors your active windows and tracks time spent on thesis-related
 The following applications count as "thesis work":
 
 ### Game Engines
+
 - **Unreal Engine** (all versions: UE4, UE5, UnrealEditor)
 - **Unity Engine** (Unity Editor and Unity Hub)
 - **Nvidia Omniverse** (Omniverse and Kit)
 
 ### Development Tools
+
 - **Visual Studio Code** - **ONLY** when working on the `praca_magisterska` repository
   - The window title must contain the repository name
   - Or the workspace must have the repository open
@@ -35,15 +37,18 @@ The following applications count as "thesis work":
 When you haven't met your work quota, the following are blocked via `/etc/hosts`:
 
 ### Gaming
+
 - All Steam domains (steampowered.com, steamcommunity.com, etc.)
 
 ### Social Media
+
 - Reddit
 - Twitter/X
 - Facebook
 - Instagram
 
 ### Video/Entertainment
+
 - YouTube
 - Twitch
 - 9gag
@@ -83,15 +88,18 @@ sudo scripts/digital_wellbeing/setup_thesis_work_tracker.sh \
 ### Prerequisites
 
 The installer will check for required dependencies:
+
 - `xdotool` - for window detection
 - `systemd` - for service management
 
 On Arch Linux:
+
 ```bash
 sudo pacman -S xdotool
 ```
 
 On Ubuntu/Debian:
+
 ```bash
 sudo apt install xdotool
 ```
@@ -118,6 +126,7 @@ sudo cat /var/lib/thesis-work-tracker/work-time.state
 ### Understanding the State File
 
 The state file shows:
+
 - `TOTAL_WORK_SECONDS`: Your accumulated work time (in seconds)
 - `STEAM_ACCESS_GRANTED`: Whether distractions are currently unblocked (1=yes, 0=no)
 - `CURRENT_SESSION_SECONDS`: Time in your current work session
@@ -164,31 +173,37 @@ sudo rm -rf /var/log/thesis-work-tracker
 This system is designed to be difficult to bypass:
 
 ### 1. **Immutable State Files**
+
 - State files are protected with `chattr +i` (immutable flag)
 - Cannot be edited even by root without removing the flag first
 - Automatically re-applied after each update
 
 ### 2. **Auto-Restart Service**
+
 - Systemd service automatically restarts if killed
 - Runs continuously in the background
 - Starts automatically on boot
 
 ### 3. **Hosts File Integration**
+
 - Integrates with the repository's hosts guard system
 - Uses immutable `/etc/hosts` file
 - Cannot be easily bypassed by changing DNS
 
 ### 4. **Process Integrity**
+
 - Monitors actual active windows, not just running processes
 - Detects if you switch away from work applications
 - VS Code requires specific repository to be open
 
 ### 5. **Decay Mechanism**
+
 - Using Steam/distractions consumes your earned work time
 - Forces sustained work habits, not just one-time work sessions
 - Fair: 30 minutes of decay per hour of distraction usage
 
 ### 6. **Locked Configuration**
+
 - Configuration is embedded in the installed script
 - Cannot be easily modified without reinstalling
 - Protected script location in `/usr/local/bin`
@@ -228,11 +243,13 @@ ls -la ~/.Xauthority
 ### VS Code Repository Not Detected
 
 Make sure:
+
 1. The window title shows the repository name
 2. You're working in the correct repository folder
 3. The repository name matches what you specified during installation
 
 Test with:
+
 ```bash
 xdotool getactivewindow getwindowname
 # Should show something like: "praca_magisterska - Visual Studio Code"
@@ -241,6 +258,7 @@ xdotool getactivewindow getwindowname
 ### Hosts File Not Updating
 
 Check:
+
 ```bash
 # View current hosts file
 sudo cat /etc/hosts | grep steam
@@ -272,6 +290,7 @@ tail -f /var/log/thesis-work-tracker/tracker.log
 ### Can I bypass this system?
 
 Technically yes, but it's designed to make bypassing more effort than just doing the work:
+
 - You'd need to disable the service (but it auto-restarts)
 - You'd need to modify immutable files (requires chattr commands)
 - You'd need to fake window activity (complex)
@@ -286,6 +305,7 @@ VS Code only counts as work when you're in the `praca_magisterska` repository. O
 ### Can I adjust the work quota after installation?
 
 Yes, but you need to:
+
 1. Uninstall the current system
 2. Reinstall with new parameters
 3. Your accumulated time is preserved in the state file
@@ -309,6 +329,7 @@ Found a bug or have a suggestion? Please open an issue in the main repository.
 ## Acknowledgments
 
 This tool is built on top of the digital wellbeing framework in this repository, including:
+
 - Hosts guard system
 - Psychological friction mechanisms
 - Systemd service patterns

linux_configuration/scripts/digital_wellbeing/focus_mode_daemon.py

@@ -1,6 +1,5 @@
 #!/usr/bin/env python3
-"""
-Focus Mode Daemon - Steam/Browser Mutual Exclusion
+"""Focus Mode Daemon - Steam/Browser Mutual Exclusion
 
 This daemon monitors running processes and enforces mutual exclusion between
 Steam (gaming) and web browsers. Whichever starts first "wins" and the other
@@ -9,31 +8,35 @@ category is blocked/killed.
 Run as a systemd user service for continuous monitoring.
 """
 
+from datetime import datetime
 import os
+from pathlib import Path
 import signal
 import subprocess
 import sys
 import time
-from datetime import datetime
-from pathlib import Path
-from typing import Set, Optional
 
 # Configuration
-STATE_DIR = Path(os.environ.get("XDG_STATE_HOME", Path.home() / ".local/state")) / "focus-mode"
+STATE_DIR = (
+    Path(os.environ.get("XDG_STATE_HOME", Path.home() / ".local/state")) / "focus-mode"
+)
 LOG_FILE = STATE_DIR / "focus-mode.log"
 POLL_INTERVAL = 2  # seconds between process checks
 
 # Process patterns
-STEAM_PATTERNS = frozenset([
+STEAM_PATTERNS = frozenset(
+    [
         "steam",
         "steamwebhelper",
         "steam_ocompati",  # Proton compatibility tool
-])
+    ]
+)
 
 # Games often have steam_app_ prefix in process name
 STEAM_GAME_PREFIX = "steam_app_"
 
-BROWSER_PATTERNS = frozenset([
+BROWSER_PATTERNS = frozenset(
+    [
         "firefox",
         "firefox-esr",
         "librewolf",
@@ -46,23 +49,28 @@ BROWSER_PATTERNS = frozenset([
         "microsoft-edge",
         "ungoogled-chromium",
         "thorium",
-])
+    ]
+)
 
 # Electron apps that should NOT be treated as browsers
 # These use Chromium under the hood but are not web browsers
-ELECTRON_IGNORE = frozenset([
+ELECTRON_IGNORE = frozenset(
+    [
         "electron",
         "code",  # VS Code
         "chrome_crashpad",  # Crashpad handler used by all Electron apps
-])
+    ]
+)
 
 # Patterns to ignore (browser helpers that aren't the main browser)
-IGNORE_PATTERNS = frozenset([
+IGNORE_PATTERNS = frozenset(
+    [
         "crashhandler",
         "update",
         "helper",
         "crashpad",
-])
+    ]
+)
 
 
 def log(message: str) -> None:
@@ -85,12 +93,13 @@ def notify(title: str, message: str, urgency: str = "normal") -> None:
             ["notify-send", "-u", urgency, title, message],
             capture_output=True,
             timeout=5,
+            check=False,
         )
     except Exception:
         pass
 
 
-def get_running_processes() -> Set[str]:
+def get_running_processes() -> set[str]:
     """Get set of currently running process names."""
     processes = set()
     try:
@@ -99,6 +108,7 @@ def get_running_processes() -> Set[str]:
             capture_output=True,
             text=True,
             timeout=10,
+            check=False,
         )
         if result.returncode == 0:
             for line in result.stdout.strip().split("\n"):
@@ -110,7 +120,7 @@ def get_running_processes() -> Set[str]:
     return processes
 
 
-def is_steam_running(processes: Set[str]) -> bool:
+def is_steam_running(processes: set[str]) -> bool:
     """Check if Steam or any Steam game is running."""
     for proc in processes:
         # Check for Steam main processes
@@ -122,7 +132,7 @@ def is_steam_running(processes: Set[str]) -> bool:
     return False
 
 
-def is_browser_running(processes: Set[str]) -> bool:
+def is_browser_running(processes: set[str]) -> bool:
     """Check if any browser is running."""
     for proc in processes:
         # Skip Electron apps and ignored patterns
@@ -143,11 +153,15 @@ def kill_steam() -> None:
 
     try:
         # First try graceful shutdown
-        subprocess.run(["pkill", "-f", "steam"], capture_output=True, timeout=5)
+        subprocess.run(
+            ["pkill", "-f", "steam"], capture_output=True, timeout=5, check=False
+        )
         time.sleep(2)
 
         # Force kill if still running
-        subprocess.run(["pkill", "-9", "-f", "steam"], capture_output=True, timeout=5)
+        subprocess.run(
+            ["pkill", "-9", "-f", "steam"], capture_output=True, timeout=5, check=False
+        )
     except Exception as e:
         log(f"Error killing Steam: {e}")
 
@@ -159,7 +173,9 @@ def kill_browsers() -> None:
 
     for browser in BROWSER_PATTERNS:
         try:
-            subprocess.run(["pkill", "-f", browser], capture_output=True, timeout=5)
+            subprocess.run(
+                ["pkill", "-f", browser], capture_output=True, timeout=5, check=False
+            )
         except Exception:
             pass
 
@@ -168,7 +184,12 @@ def kill_browsers() -> None:
     # Force kill if still running
     for browser in BROWSER_PATTERNS:
         try:
-            subprocess.run(["pkill", "-9", "-f", browser], capture_output=True, timeout=5)
+            subprocess.run(
+                ["pkill", "-9", "-f", browser],
+                capture_output=True,
+                timeout=5,
+                check=False,
+            )
         except Exception:
             pass
 
@@ -177,10 +198,10 @@ class FocusMode:
     """Tracks current focus mode and enforces mutual exclusion."""
 
     def __init__(self):
-        self.current_mode: Optional[str] = None  # "gaming" or "browsing" or None
-        self.mode_start_time: Optional[datetime] = None
+        self.current_mode: str | None = None  # "gaming" or "browsing" or None
+        self.mode_start_time: datetime | None = None
 
-    def update(self, processes: Set[str]) -> None:
+    def update(self, processes: set[str]) -> None:
         """Update focus mode based on running processes."""
         steam_running = is_steam_running(processes)
         browser_running = is_browser_running(processes)
@@ -189,7 +210,9 @@ class FocusMode:
             # No mode set yet - first to start wins
             if steam_running and browser_running:
                 # Both running at startup - prefer gaming mode (close browsers)
-                log("Both Steam and browsers detected at startup - entering GAMING mode")
+                log(
+                    "Both Steam and browsers detected at startup - entering GAMING mode"
+                )
                 self.current_mode = "gaming"
                 self.mode_start_time = datetime.now()
                 kill_browsers()
@@ -197,12 +220,20 @@ class FocusMode:
                 log("Steam detected - entering GAMING mode")
                 self.current_mode = "gaming"
                 self.mode_start_time = datetime.now()
-                notify("🎮 Gaming Mode", "Steam detected. Browsers are now blocked.", "normal")
+                notify(
+                    "🎮 Gaming Mode",
+                    "Steam detected. Browsers are now blocked.",
+                    "normal",
+                )
             elif browser_running:
                 log("Browser detected - entering BROWSING mode")
                 self.current_mode = "browsing"
                 self.mode_start_time = datetime.now()
-                notify("🌐 Browsing Mode", "Browser detected. Steam is now blocked.", "normal")
+                notify(
+                    "🌐 Browsing Mode",
+                    "Browser detected. Steam is now blocked.",
+                    "normal",
+                )
 
         elif self.current_mode == "gaming":
             if not steam_running:
@@ -241,7 +272,6 @@ class FocusMode:
 
         if self.current_mode == "gaming":
             return f"🎮 GAMING mode{duration} - browsers blocked"
-        else:
         return f"🌐 BROWSING mode{duration} - Steam blocked"
 
 

linux_configuration/scripts/digital_wellbeing/pacman/README_FOR_LLM.md

@@ -5,6 +5,7 @@
 ## System Purpose
 
 Intercept all `pacman` commands to:
+
 1. Block installation of restricted packages (browsers, games, etc.)
 2. Require challenges for greylisted packages
 3. Enforce hosts file sharing on VirtualBox VMs
@@ -37,7 +38,7 @@ Intercept all `pacman` commands to:
 ## File Locations
 
 | File                                    | Purpose                            |
-|------|---------|
+| --------------------------------------- | ---------------------------------- |
 | `/usr/bin/pacman`                       | Symlink to wrapper                 |
 | `/usr/bin/pacman.orig`                  | Real pacman binary                 |
 | `pacman_wrapper.sh`                     | Main wrapper script (823 lines)    |
@@ -51,6 +52,7 @@ Intercept all `pacman` commands to:
 ## Policy Files Explained
 
 ### pacman_blocked_keywords.txt
+
 ```
 # Lines starting with # are comments
 # Any package containing these substrings is BLOCKED
@@ -64,6 +66,7 @@ stremio
 If user tries `pacman -S firefox-developer-edition`, it's blocked because it contains "firefox".
 
 ### pacman_whitelist.txt
+
 ```
 # Exact package names that bypass keyword blocking
 minizip          # Contains nothing bad but might match a pattern
@@ -71,6 +74,7 @@ python-requests  # Safe despite containing blocked substrings
 ```
 
 ### pacman_greylist.txt
+
 ```
 # Packages requiring word scramble challenge
 # Currently empty - add packages here for challenge requirement
@@ -81,22 +85,26 @@ python-requests  # Safe despite containing blocked substrings
 These checks are in the script itself and **cannot be bypassed by editing policy files**:
 
 ### VirtualBox Check
+
 ```bash
 function is_virtualbox_package() {
   local pkg_lower="${1,,}"
   [[ $pkg_lower == *"virtualbox"* || $pkg_lower == *"vbox"* ]]
 }
 ```
+
 - Detects any package with "virtualbox" or "vbox" in name
 - Requires word scramble challenge (7-letter words, 120s timeout)
 - Auto-enforces hosts file sharing on all VMs after install
 
 ### Steam Check
+
 ```bash
 function is_steam_package() {
   [[ $1 == "steam" ]]
 }
 ```
+
 - Only exact match "steam" (not steam-native-runtime etc.)
 - **Weekend only** - blocked Monday through Friday 4PM
 - Requires word scramble challenge (5-letter words, 60s timeout)
@@ -134,6 +142,7 @@ verify_policy_integrity() {
 ```
 
 If tampering detected:
+
 ```
 SECURITY WARNING: Policy file integrity check failed!
 CRITICAL: Policy files have been tampered with!
@@ -163,11 +172,13 @@ This allows package installations to modify `/etc/hosts` temporarily (e.g., for
 ### Adding a Blocked Package
 
 1. Edit `pacman_blocked_keywords.txt`:
+
 ```bash
 echo "newkeyword" >> pacman_blocked_keywords.txt
 ```
 
 2. Reinstall wrapper to update checksums:
+
 ```bash
 sudo ./install_pacman_wrapper.sh
 ```
@@ -177,11 +188,13 @@ sudo ./install_pacman_wrapper.sh
 If a legitimate package is being blocked (e.g., `python-firefox-sync` blocked by "firefox" keyword):
 
 1. Edit `pacman_whitelist.txt`:
+
 ```bash
 echo "python-firefox-sync" >> pacman_whitelist.txt
 ```
 
 2. Reinstall wrapper:
+
 ```bash
 sudo ./install_pacman_wrapper.sh
 ```
@@ -189,6 +202,7 @@ sudo ./install_pacman_wrapper.sh
 ### Adding a Challenge Requirement
 
 1. Edit `pacman_greylist.txt`:
+
 ```bash
 echo "suspicious-package" >> pacman_greylist.txt
 ```
@@ -198,6 +212,7 @@ echo "suspicious-package" >> pacman_greylist.txt
 ### Bypassing the Wrapper (Emergency)
 
 If wrapper is broken and you need real pacman:
+
 ```bash
 sudo /usr/bin/pacman.orig -S package
 ```
@@ -227,6 +242,7 @@ remove_installed_blocked_packages() {
 ## Stale Lock Handling
 
 If `/var/lib/pacman/db.lck` exists but no pacman is running:
+
 - Interactive: Prompts user to remove (15s timeout)
 - Non-interactive (`--noconfirm`): Auto-removes if lock is >10 minutes old
 - If another pacman is actually running: Blocks with error
@@ -234,6 +250,7 @@ If `/var/lib/pacman/db.lck` exists but no pacman is running:
 ## Maintenance Auto-Setup
 
 On first run, wrapper checks if periodic maintenance services exist:
+
 ```bash
 ensure_periodic_maintenance() {
   # Checks: periodic-system-maintenance.timer
@@ -253,6 +270,7 @@ ensure_periodic_maintenance() {
 ## Debugging
 
 ### Check if wrapper is installed
+
 ```bash
 ls -la /usr/bin/pacman
 # Should show: /usr/bin/pacman -> /path/to/pacman_wrapper.sh
@@ -262,6 +280,7 @@ ls -la /usr/bin/pacman.orig
 ```
 
 ### Test policy integrity
+
 ```bash
 cat /var/lib/pacman-wrapper/policy.sha256
 sha256sum /path/to/pacman_blocked_keywords.txt
@@ -269,7 +288,9 @@ sha256sum /path/to/pacman_blocked_keywords.txt
 ```
 
 ### Verbose mode
+
 The wrapper outputs colored status messages to stderr. To see them:
+
 ```bash
 pacman -S package 2>&1 | cat
 ```

linux_configuration/scripts/digital_wellbeing/setup_pc_startup_monitor.sh

@@ -64,30 +64,30 @@ was_booted_in_window_today() {
 	boot_time=""
 
 	# Get the last boot time using multiple methods for reliability
-  if command -v uptime &> /dev/null; then
+	if command -v uptime &>/dev/null; then
 		# Method 1: Calculate boot time from uptime
 		local uptime_seconds
-    uptime_seconds=$(awk '{print int($1)}' /proc/uptime 2> /dev/null || echo "0")
+		uptime_seconds=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0")
 		if [[ $uptime_seconds -gt 0 ]]; then
 			boot_time=$(date -d "@$(($(date +%s) - uptime_seconds))" +"%Y-%m-%d %H:%M:%S")
 		fi
 	fi
 
 	# Method 2: Use systemd if available (fallback)
-  if [[ -z $boot_time ]] && command -v systemctl &> /dev/null; then
-    boot_time=$(systemd-analyze | grep "Startup finished" | sed -n 's/.*finished in .* = \(.*\)$/\1/p' 2> /dev/null || echo "")
+	if [[ -z $boot_time ]] && command -v systemctl &>/dev/null; then
+		boot_time=$(systemd-analyze | grep "Startup finished" | sed -n 's/.*finished in .* = \(.*\)$/\1/p' 2>/dev/null || echo "")
 		if [[ -n $boot_time ]]; then
 			# This gives us relative time, need to calculate absolute time
 			local current_time uptime_sec
 			current_time=$(date +%s)
-      uptime_sec=$(awk '{print int($1)}' /proc/uptime 2> /dev/null || echo "0")
+			uptime_sec=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0")
 			boot_time=$(date -d "@$((current_time - uptime_sec))" +"%Y-%m-%d %H:%M:%S")
 		fi
 	fi
 
 	# Method 3: Use who -b (fallback)
-  if [[ -z $boot_time ]] && command -v who &> /dev/null; then
-    boot_time=$(who -b | awk '{print $3, $4}' 2> /dev/null || echo "")
+	if [[ -z $boot_time ]] && command -v who &>/dev/null; then
+		boot_time=$(who -b | awk '{print $3, $4}' 2>/dev/null || echo "")
 		if [[ -n $boot_time ]]; then
 			boot_time="$today $boot_time"
 		fi
@@ -96,7 +96,7 @@ was_booted_in_window_today() {
 	# Method 4: Use /proc/uptime as final fallback
 	if [[ -z $boot_time ]]; then
 		local uptime_seconds
-    uptime_seconds=$(awk '{print int($1)}' /proc/uptime 2> /dev/null || echo "0")
+		uptime_seconds=$(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo "0")
 		boot_time=$(date -d "@$(($(date +%s) - uptime_seconds))" +"%Y-%m-%d %H:%M:%S")
 	fi
 
@@ -151,12 +151,12 @@ show_startup_warning() {
 	logger -t pc-startup-monitor "WARNING: PC was not turned on during expected window (5AM-8AM) on $day_name $today"
 
 	# Try to show desktop notification if possible
-  if command -v notify-send &> /dev/null && [[ -n $DISPLAY ]]; then
+	if command -v notify-send &>/dev/null && [[ -n $DISPLAY ]]; then
 		if [[ $EUID -eq 0 ]]; then
 			# Running as root, send notification as user
-      sudo -u "$ACTUAL_USER" DISPLAY="$DISPLAY" notify-send "PC Startup Warning" "PC was not turned on between 5AM-8AM as expected on $day_name" --urgency=normal --expire-time=10000 2> /dev/null || true
+			sudo -u "$ACTUAL_USER" DISPLAY="$DISPLAY" notify-send "PC Startup Warning" "PC was not turned on between 5AM-8AM as expected on $day_name" --urgency=normal --expire-time=10000 2>/dev/null || true
 		else
-      notify-send "PC Startup Warning" "PC was not turned on between 5AM-8AM as expected on $day_name" --urgency=normal --expire-time=10000 2> /dev/null || true
+			notify-send "PC Startup Warning" "PC was not turned on between 5AM-8AM as expected on $day_name" --urgency=normal --expire-time=10000 2>/dev/null || true
 		fi
 	fi
 
@@ -173,7 +173,7 @@ create_monitoring_service() {
 
 	local service_file="/etc/systemd/system/pc-startup-monitor.service"
 
-  cat > "$service_file" << 'EOF'
+	cat >"$service_file" <<'EOF'
 [Unit]
 Description=PC Startup Time Monitor
 After=multi-user.target
@@ -201,7 +201,7 @@ create_monitoring_timer() {
 
 	local timer_file="/etc/systemd/system/pc-startup-monitor.timer"
 
-  cat > "$timer_file" << 'EOF'
+	cat >"$timer_file" <<'EOF'
 [Unit]
 Description=Timer for PC startup monitoring
 Requires=pc-startup-monitor.service
@@ -226,7 +226,7 @@ create_monitoring_script() {
 
 	local script_file="/usr/local/bin/pc-startup-check.sh"
 
-  cat > "$script_file" << 'EOF'
+	cat >"$script_file" <<'EOF'
 #!/bin/bash
 # PC Startup Time Monitor Check Script
 # Monitors if PC was turned on during expected hours on specific days
@@ -344,7 +344,7 @@ create_management_script() {
 
 	local script_file="/usr/local/bin/pc-startup-monitor-manager.sh"
 
-  cat > "$script_file" << 'EOF'
+	cat >"$script_file" <<'EOF'
 #!/bin/bash
 # PC Startup Monitor Manager
 # Provides easy management of the PC startup monitoring feature
@@ -450,13 +450,13 @@ test_setup() {
 
 	echo ""
 	echo "Timer status:"
-  if systemctl is-enabled pc-startup-monitor.timer &> /dev/null; then
+	if systemctl is-enabled pc-startup-monitor.timer &>/dev/null; then
 		echo "✓ Timer is enabled"
 	else
 		echo "✗ Timer is not enabled"
 	fi
 
-  if systemctl is-active pc-startup-monitor.timer &> /dev/null; then
+	if systemctl is-active pc-startup-monitor.timer &>/dev/null; then
 		echo "✓ Timer is active"
 	else
 		echo "✗ Timer is not active"

linux_configuration/scripts/digital_wellbeing/setup_thesis_work_tracker.sh

@@ -96,7 +96,7 @@ check_dependencies() {
 	local missing=()
 
 	for cmd in xdotool systemctl; do
-        if ! command -v "$cmd" &> /dev/null; then
+		if ! command -v "$cmd" &>/dev/null; then
 			missing+=("$cmd")
 		fi
 	done
@@ -162,7 +162,7 @@ while [[ $# -gt 0 ]]; do
 		UNINSTALL=1
 		shift
 		;;
-        -h|--help)
+	-h | --help)
 		usage
 		exit 0
 		;;

linux_configuration/scripts/digital_wellbeing/thesis_work_tracker.sh

@@ -12,6 +12,7 @@
 set -euo pipefail
 
 # Configuration
+# shellcheck disable=SC2034  # SCRIPT_DIR reserved for future use
 SCRIPT_DIR="$(dirname "$(readlink -f "$0")")"
 STATE_DIR="/var/lib/thesis-work-tracker"
 STATE_FILE="$STATE_DIR/work-time.state"
@@ -67,12 +68,19 @@ DISTRACTION_DOMAINS=(
 )
 
 # Colors for logging
+# shellcheck disable=SC2034  # Colors available for log formatting
 RED='\033[0;31m'
+# shellcheck disable=SC2034
 GREEN='\033[0;32m'
+# shellcheck disable=SC2034
 YELLOW='\033[0;33m'
+# shellcheck disable=SC2034
 BLUE='\033[0;34m'
+# shellcheck disable=SC2034
 CYAN='\033[0;36m'
+# shellcheck disable=SC2034
 BOLD='\033[1m'
+# shellcheck disable=SC2034
 NC='\033[0m' # No Color
 
 # Logging function
@@ -109,7 +117,7 @@ init_state() {
 
 	# Initialize state file if it doesn't exist
 	if [[ ! -f $STATE_FILE ]]; then
-        cat <<EOF | sudo tee "$STATE_FILE" > /dev/null
+		cat <<EOF | sudo tee "$STATE_FILE" >/dev/null
 # Thesis Work Tracker State File
 # DO NOT EDIT MANUALLY - Managed by thesis_work_tracker daemon
 # Last updated: $(date)
@@ -143,6 +151,7 @@ load_state() {
 	STEAM_ACCESS_GRANTED=$(grep "^STEAM_ACCESS_GRANTED=" "$STATE_FILE" 2>/dev/null | cut -d= -f2 || echo "0")
 	CURRENT_SESSION_SECONDS=$(grep "^CURRENT_SESSION_SECONDS=" "$STATE_FILE" 2>/dev/null | cut -d= -f2 || echo "0")
 	LAST_WORK_SESSION_START=$(grep "^LAST_WORK_SESSION_START=" "$STATE_FILE" 2>/dev/null | cut -d= -f2 || echo "0")
+	# shellcheck disable=SC2034  # Written back to state file in save_state
 	LAST_UPDATE_TIMESTAMP=$(grep "^LAST_UPDATE_TIMESTAMP=" "$STATE_FILE" 2>/dev/null | cut -d= -f2 || echo "0")
 
 	# Validate that values are numeric
@@ -166,7 +175,7 @@ save_state() {
 	sudo chattr -i "$STATE_FILE" 2>/dev/null || true
 
 	# Write new state
-    cat <<EOF | sudo tee "$STATE_FILE" > /dev/null
+	cat <<EOF | sudo tee "$STATE_FILE" >/dev/null
 # Thesis Work Tracker State File
 # DO NOT EDIT MANUALLY - Managed by thesis_work_tracker daemon
 # Last updated: $(date)
@@ -188,12 +197,12 @@ EOF
 # Check if a process is running
 is_process_running() {
 	local process_name="$1"
-    pgrep -x "$process_name" > /dev/null 2>&1
+	pgrep -x "$process_name" >/dev/null 2>&1
 }
 
 # Get active window title and process name
 get_active_window_info() {
-    if ! command -v xdotool &> /dev/null; then
+	if ! command -v xdotool &>/dev/null; then
 		log_error "xdotool not installed, cannot detect active window"
 		return 1
 	fi
@@ -244,7 +253,7 @@ is_thesis_work_active() {
 
 	local process_name
 	local window_title
-    IFS='|' read -r process_name window_title <<< "$window_info"
+	IFS='|' read -r process_name window_title <<<"$window_info"
 
 	log_debug "Active window: process='$process_name' title='$window_title'"
 
@@ -302,7 +311,7 @@ block_distractions() {
 
 	for domain in "${STEAM_DOMAINS[@]}" "${DISTRACTION_DOMAINS[@]}"; do
 		if ! grep -q "^0.0.0.0[[:space:]]*$domain" /etc/hosts 2>/dev/null; then
-            echo "0.0.0.0 $domain" | sudo tee -a /etc/hosts > /dev/null
+			echo "0.0.0.0 $domain" | sudo tee -a /etc/hosts >/dev/null
 			hosts_modified=1
 		fi
 	done
@@ -346,7 +355,7 @@ unblock_distractions() {
 
 # Check if Steam is currently running (to track decay)
 is_steam_running() {
-    pgrep -x "steam" > /dev/null 2>&1
+	pgrep -x "steam" >/dev/null 2>&1
 }
 
 # Main tracking loop
@@ -369,11 +378,14 @@ main_loop() {
 		block_distractions
 	fi
 
-    local last_status_log=$(date +%s)
-    local last_decay_check=$(date +%s)
+	local last_status_log
+	last_status_log=$(date +%s)
+	local last_decay_check
+	last_decay_check=$(date +%s)
 
 	while true; do
-        local current_time=$(date +%s)
+		local current_time
+		current_time=$(date +%s)
 
 		# Check if thesis work is active
 		if is_thesis_work_active; then

linux_configuration/scripts/features/install_unreal_mcp_kvick.sh

@@ -13,7 +13,7 @@ echo -e "${BLUE}=== Unreal MCP Installer for Arch Linux ===${NC}"
 # Check dependencies
 echo -e "${BLUE}Checking dependencies...${NC}"
 for cmd in git python pip; do
-  if ! command -v $cmd &> /dev/null; then
+	if ! command -v $cmd &>/dev/null; then
 		echo -e "${RED}Error: $cmd is not installed. Please install it (e.g., sudo pacman -S $cmd)${NC}"
 		exit 1
 	fi
@@ -29,7 +29,7 @@ fi
 # Validate path
 # Expand tilde if present
 PROJECT_PATH="${PROJECT_PATH/#\~/$HOME}"
-PROJECT_PATH=$(realpath "$PROJECT_PATH" 2> /dev/null || echo "")
+PROJECT_PATH=$(realpath "$PROJECT_PATH" 2>/dev/null || echo "")
 
 if [ -z "$PROJECT_PATH" ] || [ ! -d "$PROJECT_PATH" ]; then
 	echo -e "${RED}Error: Invalid directory: $PROJECT_PATH${NC}"
@@ -79,26 +79,26 @@ fi
 echo "Installing dependencies in virtual environment..."
 # shellcheck source=/dev/null
 source "$VENV_DIR/bin/activate"
-pip install --upgrade pip > /dev/null
-pip install "mcp>=0.1.0" > /dev/null
+pip install --upgrade pip >/dev/null
+pip install "mcp>=0.1.0" >/dev/null
 
 # Patch unreal_mcp_bridge.py for newer mcp package compatibility
 # The newer mcp package (1.x) renamed 'description' parameter to 'instructions'
 BRIDGE_SCRIPT="$MCP_DIR/unreal_mcp_bridge.py"
-if grep -q 'description="Unreal Engine integration' "$BRIDGE_SCRIPT" 2> /dev/null; then
+if grep -q 'description="Unreal Engine integration' "$BRIDGE_SCRIPT" 2>/dev/null; then
 	echo "Patching unreal_mcp_bridge.py for mcp package compatibility..."
 	sed -i 's/description="Unreal Engine integration through the Model Context Protocol"/instructions="Unreal Engine integration through the Model Context Protocol"/' "$BRIDGE_SCRIPT"
 fi
 
 # Fix case-sensitive includes for Linux (Windows is case-insensitive, Linux is not)
 echo "Fixing case-sensitive includes for Linux..."
-find "$MCP_PLUGIN_DIR/Source/" \( -name "*.cpp" -o -name "*.h" \) -exec sed -i 's/HAL\/PlatformFilemanager\.h/HAL\/PlatformFileManager.h/g' {} + 2> /dev/null || true
+find "$MCP_PLUGIN_DIR/Source/" \( -name "*.cpp" -o -name "*.h" \) -exec sed -i 's/HAL\/PlatformFilemanager\.h/HAL\/PlatformFileManager.h/g' {} + 2>/dev/null || true
 
 # Create Linux Run Script
 RUN_SCRIPT="$MCP_DIR/run_unreal_mcp.sh"
 echo -e "${BLUE}Creating run script at $RUN_SCRIPT...${NC}"
 
-cat << EOF > "$RUN_SCRIPT"
+cat <<EOF >"$RUN_SCRIPT"
 #!/bin/bash
 set -e
 SCRIPT_DIR="\$(cd "\$(dirname "\${BASH_SOURCE[0]}")" && pwd)"
@@ -115,7 +115,7 @@ echo -e "${BLUE}=== Configuration Setup ===${NC}"
 
 # Python script to update JSON configs
 CONFIG_UPDATER_SCRIPT=$(mktemp)
-cat << EOF > "$CONFIG_UPDATER_SCRIPT"
+cat <<EOF >"$CONFIG_UPDATER_SCRIPT"
 import json
 import os
 import sys
@@ -190,7 +190,7 @@ MCP_JSON="$VSCODE_DIR/mcp.json"
 
 if [ ! -f "$MCP_JSON" ]; then
 	echo -e "${BLUE}Creating workspace MCP config at $MCP_JSON...${NC}"
-  cat << EOF > "$MCP_JSON"
+	cat <<EOF >"$MCP_JSON"
 {
     "mcpServers": {
         "unreal": {
@@ -232,7 +232,7 @@ echo -e "${YELLOW}$RUN_SCRIPT${NC}"
 echo
 echo "For VS Code (User Settings), add this to your settings.json:"
 echo -e "${GREEN}"
-cat << EOF
+cat <<EOF
 "mcpServers": {
     "unreal": {
         "command": "$RUN_SCRIPT",

linux_configuration/scripts/features/raspberry_pi_nextcloud.sh

@@ -71,7 +71,7 @@ check_root() {
 }
 
 save_config() {
-  cat > "$CONFIG_FILE" << EOF
+	cat >"$CONFIG_FILE" <<EOF
 # Raspberry Pi Nextcloud Setup - Auto-generated config
 # This file is gitignored and stores discovered settings
 
@@ -97,7 +97,7 @@ EOF
 generate_password() {
 	local length="${1:-16}"
 	local chars
-  chars=$(dd if=/dev/urandom bs=256 count=1 2> /dev/null | tr -dc 'A-Za-z0-9!@#$%&*' | cut -c1-"$length")
+	chars=$(dd if=/dev/urandom bs=256 count=1 2>/dev/null | tr -dc 'A-Za-z0-9!@#$%&*' | cut -c1-"$length")
 	echo "$chars"
 }
 
@@ -112,7 +112,7 @@ wait_for_apt_lock() {
 	local max_wait=600
 	local waited=0
 
-  while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/cache/apt/archives/lock > /dev/null 2>&1; do
+	while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/cache/apt/archives/lock >/dev/null 2>&1; do
 		if [[ $waited -eq 0 ]]; then
 			log_info "Waiting for other apt/dpkg processes to finish..."
 			pgrep -a 'apt|dpkg' | head -5 >&2 || true
@@ -139,22 +139,22 @@ wait_for_apt_lock() {
 ensure_dependencies() {
 	local missing_packages=()
 
-  if ! command -v nmap &> /dev/null; then
+	if ! command -v nmap &>/dev/null; then
 		missing_packages+=("nmap")
 	fi
 
-  if ! command -v sshpass &> /dev/null; then
+	if ! command -v sshpass &>/dev/null; then
 		missing_packages+=("sshpass")
 	fi
 
 	if [[ ${#missing_packages[@]} -gt 0 ]]; then
 		log_info "Installing missing packages: ${missing_packages[*]}"
 
-    if command -v pacman &> /dev/null; then
+		if command -v pacman &>/dev/null; then
 			sudo pacman -S --noconfirm "${missing_packages[@]}"
-    elif command -v apt-get &> /dev/null; then
+		elif command -v apt-get &>/dev/null; then
 			sudo apt-get update && sudo apt-get install -y "${missing_packages[@]}"
-    elif command -v dnf &> /dev/null; then
+		elif command -v dnf &>/dev/null; then
 			sudo dnf install -y "${missing_packages[@]}"
 		else
 			die "Could not detect package manager. Please install manually: ${missing_packages[*]}"
@@ -179,9 +179,9 @@ discover_raspberry_pi() {
 	local pi_ip=""
 
 	# Try resolving hostname directly
-  pi_ip=$(getent hosts "$PI_HOSTNAME" 2> /dev/null | awk '{print $1}' | head -1) || true
+	pi_ip=$(getent hosts "$PI_HOSTNAME" 2>/dev/null | awk '{print $1}' | head -1) || true
 	if [[ -z $pi_ip ]]; then
-    pi_ip=$(getent hosts "${PI_HOSTNAME}.local" 2> /dev/null | awk '{print $1}' | head -1) || true
+		pi_ip=$(getent hosts "${PI_HOSTNAME}.local" 2>/dev/null | awk '{print $1}' | head -1) || true
 	fi
 
 	if [[ -n $pi_ip ]]; then
@@ -191,10 +191,10 @@ discover_raspberry_pi() {
 	fi
 
 	log_info "Hostname resolution failed, scanning network..."
-  nmap -sn -T4 "$network" &> /dev/null || true
+	nmap -sn -T4 "$network" &>/dev/null || true
 
 	local ssh_hosts
-  ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2> /dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | sort -u) || true
+	ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2>/dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | sort -u) || true
 
 	if [[ -z $ssh_hosts ]]; then
 		die "No SSH-enabled devices found. Is the Pi connected and booted?"
@@ -205,13 +205,13 @@ discover_raspberry_pi() {
 	for ip in $ssh_hosts; do
 		log_info "Trying $ip with user '$PI_USER'..."
 
-    if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "hostname" 2> /dev/null | grep -qi "$PI_HOSTNAME"; then
+		if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "hostname" 2>/dev/null | grep -qi "$PI_HOSTNAME"; then
 			log_success "Found Raspberry Pi at $ip"
 			echo "$ip"
 			return
 		fi
 
-    if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "echo ok" 2> /dev/null | grep -q "ok"; then
+		if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "echo ok" 2>/dev/null | grep -q "ok"; then
 			log_success "Found device responding to Pi credentials at $ip"
 			echo "$ip"
 			return
@@ -250,7 +250,7 @@ phase_configure_system() {
 	log_info "Hardening SSH configuration..."
 	cp /etc/ssh/sshd_config /etc/ssh/sshd_config.backup
 
-  cat >> /etc/ssh/sshd_config.d/hardening.conf << 'EOF'
+	cat >>/etc/ssh/sshd_config.d/hardening.conf <<'EOF'
 # Security hardening
 PermitRootLogin no
 PasswordAuthentication yes
@@ -283,7 +283,7 @@ EOF
 	ufw --force enable
 
 	log_info "Configuring fail2ban..."
-  cat > /etc/fail2ban/jail.local << 'EOF'
+	cat >/etc/fail2ban/jail.local <<'EOF'
 [DEFAULT]
 bantime = 1h
 findtime = 10m
@@ -301,7 +301,7 @@ EOF
 	systemctl restart fail2ban
 
 	log_info "Enabling automatic security updates..."
-  cat > /etc/apt/apt.conf.d/50unattended-upgrades << 'EOF'
+	cat >/etc/apt/apt.conf.d/50unattended-upgrades <<'EOF'
 Unattended-Upgrade::Origins-Pattern {
     "origin=Debian,codename=${distro_codename},label=Debian-Security";
     "origin=Raspbian,codename=${distro_codename},label=Raspbian";
@@ -310,7 +310,7 @@ Unattended-Upgrade::AutoFixInterruptedDpkg "true";
 Unattended-Upgrade::Remove-Unused-Dependencies "true";
 EOF
 
-  cat > /etc/apt/apt.conf.d/20auto-upgrades << 'EOF'
+	cat >/etc/apt/apt.conf.d/20auto-upgrades <<'EOF'
 APT::Periodic::Update-Package-Lists "1";
 APT::Periodic::Unattended-Upgrade "1";
 APT::Periodic::AutocleanInterval "7";
@@ -365,14 +365,14 @@ phase_install_nextcloud() {
 	local db_password
 	db_password=$(generate_password 32)
 
-  mysql -u root << EOF
+	mysql -u root <<EOF
 CREATE DATABASE IF NOT EXISTS nextcloud CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
 CREATE USER IF NOT EXISTS 'nextcloud'@'localhost' IDENTIFIED BY '${db_password}';
 GRANT ALL PRIVILEGES ON nextcloud.* TO 'nextcloud'@'localhost';
 FLUSH PRIVILEGES;
 EOF
 
-  echo "$db_password" > /root/.nextcloud_db_password
+	echo "$db_password" >/root/.nextcloud_db_password
 	chmod 600 /root/.nextcloud_db_password
 	log_success "MariaDB configured"
 
@@ -393,7 +393,7 @@ EOF
 	# Configure Apache
 	log_info "Configuring Apache..."
 
-  cat > /etc/apache2/sites-available/nextcloud.conf << 'EOF'
+	cat >/etc/apache2/sites-available/nextcloud.conf <<'EOF'
 <VirtualHost *:80>
     ServerAdmin admin@localhost
     DocumentRoot /var/www/nextcloud
@@ -442,7 +442,7 @@ EOF
 	sed -i 's/;date.timezone =.*/date.timezone = Europe\/Warsaw/' "$php_ini"
 
 	if ! grep -q "opcache.interned_strings_buffer" "$php_ini"; then
-    cat >> "$php_ini" << 'EOF'
+		cat >>"$php_ini" <<'EOF'
 
 ; Nextcloud optimizations
 opcache.enable=1
@@ -514,7 +514,7 @@ EOF
 
 	# Add cron job
 	(
-    crontab -u www-data -l 2> /dev/null || true
+		crontab -u www-data -l 2>/dev/null || true
 		echo "*/5 * * * * php -f /var/www/nextcloud/cron.php"
 	) | sort -u | crontab -u www-data -
 
@@ -545,6 +545,7 @@ EOF
 # Fix Nextcloud Issues
 # =============================================================================
 
+# shellcheck disable=SC2120  # Function does not use positional args
 phase_fix_issues() {
 	check_root
 
@@ -560,7 +561,7 @@ phase_fix_issues() {
 
 	# Ensure cron job exists and is correct
 	(
-    crontab -u www-data -l 2> /dev/null | grep -v "cron.php"
+		crontab -u www-data -l 2>/dev/null | grep -v "cron.php"
 		echo "*/5 * * * * php -f /var/www/nextcloud/cron.php"
 	) | crontab -u www-data -
 
@@ -613,7 +614,7 @@ phase_fix_issues() {
 
 		# Create extension file for SAN (Subject Alternative Names)
 		# This allows the certificate to be valid for hostname, IP, and .local
-    cat > "$ssl_dir/server.ext" << EXTEOF
+		cat >"$ssl_dir/server.ext" <<EXTEOF
 authorityKeyIdentifier=keyid,issuer
 basicConstraints=CA:FALSE
 keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
@@ -650,7 +651,7 @@ EXTEOF
 	log_info "CA certificate available at: https://$PI_HOSTNAME/ca/nextcloud-ca.crt"
 
 	# Create HTTPS Apache config
-  cat > /etc/apache2/sites-available/nextcloud-ssl.conf << EOF
+	cat >/etc/apache2/sites-available/nextcloud-ssl.conf <<EOF
 <VirtualHost *:443>
     ServerAdmin admin@localhost
     DocumentRoot /var/www/nextcloud
@@ -837,14 +838,14 @@ phase_setup_ssl() {
 	# Set up automatic DuckDNS updates (cron) - auto-detect public IP
 	log_info "Setting up automatic DuckDNS IP updates..."
 	mkdir -p /opt/duckdns
-  cat > /opt/duckdns/duck.sh << DUCKEOF
+	cat >/opt/duckdns/duck.sh <<DUCKEOF
 #!/bin/bash
 echo url="https://www.duckdns.org/update?domains=${DUCKDNS_DOMAIN}&token=${DUCKDNS_TOKEN}&ip=" | curl -k -o /opt/duckdns/duck.log -K -
 DUCKEOF
 	chmod 700 /opt/duckdns/duck.sh
 
 	# Add cron job for DuckDNS update every 5 minutes
-  (crontab -l 2> /dev/null || true) | grep -v "duckdns" | {
+	(crontab -l 2>/dev/null || true) | grep -v "duckdns" | {
 		cat
 		echo "*/5 * * * * /opt/duckdns/duck.sh >/dev/null 2>&1"
 	} | crontab -
@@ -857,7 +858,7 @@ DUCKEOF
 	local attempts=0
 	while [[ $dns_ip != "$public_ip" ]] && [[ $attempts -lt 12 ]]; do
 		sleep 5
-    dns_ip=$(dig +short "$full_domain" 2> /dev/null | tail -1) || true
+		dns_ip=$(dig +short "$full_domain" 2>/dev/null | tail -1) || true
 		attempts=$((attempts + 1))
 		log_info "  DNS lookup: $dns_ip (expecting $public_ip, attempt $attempts/12)"
 	done
@@ -869,7 +870,7 @@ DUCKEOF
 	fi
 
 	# Install certbot if not present
-  if ! command -v certbot &> /dev/null; then
+	if ! command -v certbot &>/dev/null; then
 		log_info "Installing certbot..."
 		DEBIAN_FRONTEND=noninteractive apt-get install -y certbot python3-certbot-apache
 	fi
@@ -878,7 +879,7 @@ DUCKEOF
 	log_info "Obtaining Let's Encrypt certificate..."
 
 	# First update Apache config with the new domain
-  cat > /etc/apache2/sites-available/nextcloud-ssl.conf << EOF
+	cat >/etc/apache2/sites-available/nextcloud-ssl.conf <<EOF
 <VirtualHost *:443>
     ServerAdmin ${LETSENCRYPT_EMAIL}
     DocumentRoot /var/www/nextcloud
@@ -1026,7 +1027,7 @@ phase_install_remote() {
 	log_info "Using Raspberry Pi at: $pi_ip"
 
 	# Remove old host key if present
-  ssh-keygen -R "$pi_ip" 2> /dev/null || true
+	ssh-keygen -R "$pi_ip" 2>/dev/null || true
 
 	log_info "Copying script to Pi..."
 	sshpass -p "$PI_PASSWORD" scp -o StrictHostKeyChecking=no "$0" "${PI_USER}@${pi_ip}:/tmp/raspberry_pi_nextcloud.sh"
@@ -1087,7 +1088,7 @@ phase_install_ca() {
 
 	# Use SSH with sudo to cat the file (since it's in a protected directory)
 	sshpass -p "$PI_PASSWORD" ssh -o StrictHostKeyChecking=no \
-    "${PI_USER}@${pi_ip}" "echo '$PI_PASSWORD' | sudo -S cat /etc/ssl/nextcloud/ca.crt" > "$ca_file" 2> /dev/null
+		"${PI_USER}@${pi_ip}" "echo '$PI_PASSWORD' | sudo -S cat /etc/ssl/nextcloud/ca.crt" >"$ca_file" 2>/dev/null
 
 	if [[ ! -f $ca_file ]] || [[ ! -s $ca_file ]]; then
 		die "Failed to download CA certificate"
@@ -1127,12 +1128,12 @@ phase_install_ca() {
 	log_info "Installing CA in browser certificate stores..."
 
 	# Chrome/Chromium (uses NSS)
-  if [[ -d ~/.pki/nssdb ]] || command -v certutil &> /dev/null; then
+	if [[ -d ~/.pki/nssdb ]] || command -v certutil &>/dev/null; then
 		mkdir -p ~/.pki/nssdb
-    if ! certutil -d sql:~/.pki/nssdb -L 2> /dev/null | grep -q "Nextcloud"; then
+		if ! certutil -d sql:~/.pki/nssdb -L 2>/dev/null | grep -q "Nextcloud"; then
 			# Initialize NSS db if needed
-      certutil -d sql:~/.pki/nssdb -N --empty-password 2> /dev/null || true
-      if certutil -d sql:~/.pki/nssdb -A -n "Nextcloud Home CA" -t "CT,C,C" -i "$ca_file" 2> /dev/null; then
+			certutil -d sql:~/.pki/nssdb -N --empty-password 2>/dev/null || true
+			if certutil -d sql:~/.pki/nssdb -A -n "Nextcloud Home CA" -t "CT,C,C" -i "$ca_file" 2>/dev/null; then
 				log_success "CA installed in Chrome/Chromium"
 			else
 				log_warning "Could not install in Chrome/Chromium NSS db"
@@ -1147,8 +1148,8 @@ phase_install_ca() {
 		local installed=0
 		for profile_dir in ~/.mozilla/firefox/*.default* ~/.mozilla/firefox/*.esr*; do
 			if [[ -d $profile_dir ]]; then
-        if ! certutil -d sql:"$profile_dir" -L 2> /dev/null | grep -q "Nextcloud"; then
-          certutil -d sql:"$profile_dir" -A -n "Nextcloud Home CA" -t "CT,C,C" -i "$ca_file" 2> /dev/null &&
+				if ! certutil -d sql:"$profile_dir" -L 2>/dev/null | grep -q "Nextcloud"; then
+					certutil -d sql:"$profile_dir" -A -n "Nextcloud Home CA" -t "CT,C,C" -i "$ca_file" 2>/dev/null &&
 						installed=1
 				else
 					installed=1
@@ -1163,9 +1164,9 @@ phase_install_ca() {
 	fi
 
 	# Add hostname to /etc/hosts if not present
-  if ! grep -q "$PI_HOSTNAME" /etc/hosts 2> /dev/null; then
+	if ! grep -q "$PI_HOSTNAME" /etc/hosts 2>/dev/null; then
 		log_info "Adding $PI_HOSTNAME to /etc/hosts..."
-    echo "$pi_ip $PI_HOSTNAME ${PI_HOSTNAME}.local" | sudo tee -a /etc/hosts > /dev/null
+		echo "$pi_ip $PI_HOSTNAME ${PI_HOSTNAME}.local" | sudo tee -a /etc/hosts >/dev/null
 		log_success "Added $PI_HOSTNAME to /etc/hosts"
 	else
 		log_info "$PI_HOSTNAME already in /etc/hosts"
@@ -1173,7 +1174,7 @@ phase_install_ca() {
 
 	# Verify
 	log_info "Verifying HTTPS connection..."
-  if curl -s --max-time 5 "https://$PI_HOSTNAME/status.php" 2> /dev/null | grep -q "installed"; then
+	if curl -s --max-time 5 "https://$PI_HOSTNAME/status.php" 2>/dev/null | grep -q "installed"; then
 		log_success "HTTPS connection verified - no certificate warnings!"
 	else
 		log_warning "Could not verify HTTPS - you may need to restart your browser"
@@ -1196,7 +1197,7 @@ phase_install_ca() {
 # =============================================================================
 
 show_help() {
-  cat << 'EOF'
+	cat <<'EOF'
 Nextcloud Installation Script for Raspberry Pi
 
 Usage: ./raspberry_pi_nextcloud.sh <command>

linux_configuration/scripts/features/setup_activitywatch.sh

@@ -36,7 +36,7 @@ check_activitywatch_installed() {
 	echo "========================================"
 
 	# Check if activitywatch-bin is installed via pacman
-  if pacman -Qi activitywatch-bin &> /dev/null; then
+	if pacman -Qi activitywatch-bin &>/dev/null; then
 		echo "✓ activitywatch-bin package is installed"
 		return 0
 	fi
@@ -76,7 +76,7 @@ install_activitywatch() {
 	local helper_found=""
 
 	for helper in "${aur_helpers[@]}"; do
-    if command -v "$helper" &> /dev/null; then
+		if command -v "$helper" &>/dev/null; then
 			helper_found="$helper"
 			break
 		fi
@@ -108,7 +108,7 @@ install_activitywatch_manual() {
 	cd "$temp_dir"
 
 	# Download PKGBUILD
-  if command -v git &> /dev/null; then
+	if command -v git &>/dev/null; then
 		sudo -u "$original_user" git clone https://aur.archlinux.org/activitywatch-bin.git .
 	else
 		echo "Installing git..."
@@ -131,13 +131,13 @@ check_activitywatch_running() {
 	echo "=================================="
 
 	# Check for aw-qt process
-  if pgrep -f "aw-qt" > /dev/null; then
+	if pgrep -f "aw-qt" >/dev/null; then
 		echo "✓ ActivityWatch (aw-qt) is running"
 		return 0
 	fi
 
 	# Check for aw-server process
-  if pgrep -f "aw-server" > /dev/null; then
+	if pgrep -f "aw-server" >/dev/null; then
 		echo "✓ ActivityWatch server is running"
 		return 0
 	fi
@@ -155,7 +155,7 @@ start_activitywatch() {
 	# Find aw-qt executable
 	local aw_qt_path=""
 
-  if command -v aw-qt &> /dev/null; then
+	if command -v aw-qt &>/dev/null; then
 		aw_qt_path="$(which aw-qt)"
 	elif [[ -x "/usr/bin/aw-qt" ]]; then
 		aw_qt_path="/usr/bin/aw-qt"
@@ -179,7 +179,7 @@ start_activitywatch() {
 	# Give it time to start
 	sleep 3
 
-  if check_activitywatch_running > /dev/null 2>&1; then
+	if check_activitywatch_running >/dev/null 2>&1; then
 		echo "✓ ActivityWatch started successfully"
 	else
 		echo "! ActivityWatch may be starting (check system tray)"
@@ -204,7 +204,7 @@ setup_autostart() {
 	fi
 
 	# Create desktop file for autostart
-  cat > "$desktop_file" << EOF
+	cat >"$desktop_file" <<EOF
 [Desktop Entry]
 Type=Application
 Name=ActivityWatch
@@ -243,7 +243,7 @@ EOF"
 					printf '\n'
 					printf '# Auto-start ActivityWatch\n'
 					printf 'exec --no-startup-id aw-qt\n'
-        } >> "$i3_config"
+				} >>"$i3_config"
 			fi
 
 			echo "✓ Added ActivityWatch to i3 config autostart"
@@ -272,7 +272,7 @@ create_i3blocks_status() {
 	fi
 
 	# Create the status script
-  cat > "$status_script" << 'EOF'
+	cat >"$status_script" <<'EOF'
 #!/bin/bash
 # ActivityWatch status script for i3blocks
 # Shows ActivityWatch installation and running status
@@ -350,14 +350,14 @@ test_setup() {
 	echo "=================="
 
 	echo "Installation status:"
-  if check_activitywatch_installed > /dev/null 2>&1; then
+	if check_activitywatch_installed >/dev/null 2>&1; then
 		echo "✓ ActivityWatch is installed"
 	else
 		echo "✗ ActivityWatch is not installed"
 	fi
 
 	echo "Running status:"
-  if check_activitywatch_running > /dev/null 2>&1; then
+	if check_activitywatch_running >/dev/null 2>&1; then
 		echo "✓ ActivityWatch is running"
 	else
 		echo "✗ ActivityWatch is not running"

linux_configuration/scripts/features/setup_nextcloud_raspberry.sh

@@ -76,7 +76,7 @@ check_root() {
 
 save_config() {
 	# Save discovered/used configuration to gitignored config file
-  cat > "$CONFIG_FILE" << EOF
+	cat >"$CONFIG_FILE" <<EOF
 # Nextcloud Raspberry Pi Setup - Auto-generated config
 # This file is gitignored and stores discovered settings
 
@@ -103,7 +103,7 @@ generate_password() {
 	# Use /dev/urandom for randomness, base64 encode, take first N chars
 	# Using dd to avoid SIGPIPE with pipefail
 	local chars
-  chars=$(dd if=/dev/urandom bs=256 count=1 2> /dev/null | tr -dc 'A-Za-z0-9!@#$%&*' | cut -c1-"$length")
+	chars=$(dd if=/dev/urandom bs=256 count=1 2>/dev/null | tr -dc 'A-Za-z0-9!@#$%&*' | cut -c1-"$length")
 	echo "$chars"
 }
 
@@ -201,7 +201,7 @@ download_raspberry_pi_os() {
 	# Check if download exists and is complete
 	if [[ -f $image_file ]]; then
 		local actual_size
-    actual_size=$(stat -c%s "$image_file" 2> /dev/null || stat -f%z "$image_file" 2> /dev/null || echo 0)
+		actual_size=$(stat -c%s "$image_file" 2>/dev/null || stat -f%z "$image_file" 2>/dev/null || echo 0)
 		if [[ $actual_size -lt $expected_size ]]; then
 			log_warning "Incomplete download detected ($actual_size < $expected_size bytes), re-downloading..."
 			rm -f "$image_file"
@@ -216,11 +216,11 @@ download_raspberry_pi_os() {
 
 		# Try to use aria2c for faster download, fall back to wget/curl
 		# Redirect all output to stderr so it doesn't interfere with function return value
-    if command -v aria2c &> /dev/null; then
+		if command -v aria2c &>/dev/null; then
 			aria2c -x 4 -c -d "$download_dir" --out="raspios.img.xz" "$image_url" >&2
-    elif command -v wget &> /dev/null; then
+		elif command -v wget &>/dev/null; then
 			wget --continue --show-progress -O "$image_file" "$image_url" >&2
-    elif command -v curl &> /dev/null; then
+		elif command -v curl &>/dev/null; then
 			curl -L -C - -o "$image_file" "$image_url" --progress-bar >&2
 		else
 			die "No download tool available. Install wget, curl, or aria2c"
@@ -228,7 +228,7 @@ download_raspberry_pi_os() {
 
 		# Verify download size
 		local actual_size
-    actual_size=$(stat -c%s "$image_file" 2> /dev/null || stat -f%z "$image_file" 2> /dev/null || echo 0)
+		actual_size=$(stat -c%s "$image_file" 2>/dev/null || stat -f%z "$image_file" 2>/dev/null || echo 0)
 		if [[ $actual_size -lt $expected_size ]]; then
 			die "Download incomplete: got $actual_size bytes, expected $expected_size"
 		fi
@@ -258,8 +258,8 @@ flash_sd_card() {
 	# Unmount any mounted partitions
 	log_info "Unmounting partitions on $SD_CARD_DEVICE..."
 	for partition in "${SD_CARD_DEVICE}"*; do
-    if mountpoint -q "$partition" 2> /dev/null || mount | grep -q "$partition"; then
-      umount "$partition" 2> /dev/null || true
+		if mountpoint -q "$partition" 2>/dev/null || mount | grep -q "$partition"; then
+			umount "$partition" 2>/dev/null || true
 		fi
 	done
 
@@ -277,7 +277,7 @@ configure_headless_boot() {
 
 	# Wait for partitions to be available
 	sleep 2
-  partprobe "$SD_CARD_DEVICE" 2> /dev/null || true
+	partprobe "$SD_CARD_DEVICE" 2>/dev/null || true
 	sleep 2
 
 	# Mount boot partition
@@ -305,7 +305,7 @@ configure_headless_boot() {
 		read -r -s -p "WiFi Password: " wifi_password
 		echo
 
-    cat > "$boot_mount/wpa_supplicant.conf" << EOF
+		cat >"$boot_mount/wpa_supplicant.conf" <<EOF
 country=US
 ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
 update_config=1
@@ -326,7 +326,7 @@ EOF
 
 	local encrypted_password
 	encrypted_password=$(echo "$PI_PASSWORD" | openssl passwd -6 -stdin)
-  echo "${PI_USER}:${encrypted_password}" > "$boot_mount/userconf.txt"
+	echo "${PI_USER}:${encrypted_password}" >"$boot_mount/userconf.txt"
 	log_success "User '$PI_USER' configured"
 
 	# Set hostname
@@ -342,7 +342,7 @@ EOF
 		mkdir -p "$root_mount"
 		mount "$root_partition" "$root_mount"
 
-    echo "$PI_HOSTNAME" > "$root_mount/etc/hostname"
+		echo "$PI_HOSTNAME" >"$root_mount/etc/hostname"
 		sed -i "s/raspberrypi/$PI_HOSTNAME/g" "$root_mount/etc/hosts"
 
 		log_success "Hostname set to '$PI_HOSTNAME'"
@@ -387,7 +387,7 @@ setup_ssh_key_to_remote() {
 	local remote_user="$2"
 
 	# Check if we already have passwordless access
-  if ssh -o BatchMode=yes -o ConnectTimeout=5 "${remote_user}@${remote_host}" "echo 'SSH key works'" 2> /dev/null; then
+	if ssh -o BatchMode=yes -o ConnectTimeout=5 "${remote_user}@${remote_host}" "echo 'SSH key works'" 2>/dev/null; then
 		log_success "SSH key authentication to ${remote_user}@${remote_host} already configured"
 		return 0
 	fi
@@ -406,7 +406,7 @@ setup_ssh_key_to_remote() {
 	ssh-copy-id -o StrictHostKeyChecking=accept-new "${remote_user}@${remote_host}"
 
 	# Verify it works
-  if ssh -o BatchMode=yes -o ConnectTimeout=5 "${remote_user}@${remote_host}" "echo 'SSH key works'" 2> /dev/null; then
+	if ssh -o BatchMode=yes -o ConnectTimeout=5 "${remote_user}@${remote_host}" "echo 'SSH key works'" 2>/dev/null; then
 		log_success "SSH key authentication configured successfully"
 		return 0
 	else
@@ -420,12 +420,12 @@ ensure_dependencies() {
 	local missing_packages=()
 
 	# Check for nmap (fast network scanning)
-  if ! command -v nmap &> /dev/null; then
+	if ! command -v nmap &>/dev/null; then
 		missing_packages+=("nmap")
 	fi
 
 	# Check for sshpass (for initial SSH key setup)
-  if ! command -v sshpass &> /dev/null; then
+	if ! command -v sshpass &>/dev/null; then
 		missing_packages+=("sshpass")
 	fi
 
@@ -433,13 +433,13 @@ ensure_dependencies() {
 		log_info "Installing missing packages: ${missing_packages[*]}"
 
 		# Detect package manager and install
-    if command -v pacman &> /dev/null; then
+		if command -v pacman &>/dev/null; then
 			sudo pacman -S --noconfirm "${missing_packages[@]}"
-    elif command -v apt-get &> /dev/null; then
+		elif command -v apt-get &>/dev/null; then
 			sudo apt-get update && sudo apt-get install -y "${missing_packages[@]}"
-    elif command -v dnf &> /dev/null; then
+		elif command -v dnf &>/dev/null; then
 			sudo dnf install -y "${missing_packages[@]}"
-    elif command -v yum &> /dev/null; then
+		elif command -v yum &>/dev/null; then
 			sudo yum install -y "${missing_packages[@]}"
 		else
 			die "Could not detect package manager. Please install manually: ${missing_packages[*]}"
@@ -470,9 +470,9 @@ discover_remote_laptop() {
 	log_info "Scanning network for SSH-enabled devices (using nmap)..."
 	local ssh_hosts
 	# First do a ping sweep to wake up hosts, then scan SSH port
-  nmap -sn -T4 "$network" &> /dev/null || true
+	nmap -sn -T4 "$network" &>/dev/null || true
 	# Extract IPs from nmap output - grep for report lines then extract IP
-  ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2> /dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | sort -u)
+	ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2>/dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | sort -u)
 
 	if [[ -z $ssh_hosts ]]; then
 		die "No SSH-enabled devices found on network"
@@ -519,14 +519,14 @@ discover_remote_laptop() {
 
 		# Try each username
 		for try_user in "${users[@]}"; do
-      if ssh -o BatchMode=yes -o ConnectTimeout=2 -o StrictHostKeyChecking=accept-new "${try_user}@${ip}" "echo ok" 2> /dev/null | grep -q "ok"; then
+			if ssh -o BatchMode=yes -o ConnectTimeout=2 -o StrictHostKeyChecking=accept-new "${try_user}@${ip}" "echo ok" 2>/dev/null | grep -q "ok"; then
 				log_success "[$idx/$host_count] $ip - SSH key access confirmed with user '$try_user'!"
 				found_user="$try_user"
 
 				# Check if there's a removable device (SD card)
 				log_info "[$idx/$host_count] $ip - Checking for SD card..."
 				local has_sd
-        has_sd=$(ssh -o BatchMode=yes -o ConnectTimeout=2 "${try_user}@${ip}" "lsblk -d -o NAME,RM,TRAN 2>/dev/null | grep -E '1.*(usb|mmc)' | head -1" 2> /dev/null || true)
+				has_sd=$(ssh -o BatchMode=yes -o ConnectTimeout=2 "${try_user}@${ip}" "lsblk -d -o NAME,RM,TRAN 2>/dev/null | grep -E '1.*(usb|mmc)' | head -1" 2>/dev/null || true)
 
 				if [[ -n $has_sd ]]; then
 					log_success "[$idx/$host_count] $ip - Found SD card: $has_sd"
@@ -594,7 +594,7 @@ phase_flash_remote() {
 	# Auto-detect SD card on remote laptop
 	log_info "Auto-detecting SD card on remote laptop..."
 	local sd_device
-  sd_device=$(ssh "$remote" "lsblk -d -o NAME,RM,TRAN | grep -E '1.*(usb|mmc)' | awk '{print \"/dev/\"\$1}' | head -1" 2> /dev/null || true)
+	sd_device=$(ssh "$remote" "lsblk -d -o NAME,RM,TRAN | grep -E '1.*(usb|mmc)' | awk '{print \"/dev/\"\$1}' | head -1" 2>/dev/null || true)
 
 	if [[ -z $sd_device ]]; then
 		die "No SD card detected on remote laptop. Please insert an SD card and try again."
@@ -610,7 +610,7 @@ phase_flash_remote() {
 
 	# Verify device exists on remote
 	# shellcheck disable=SC2029  # Intentional client-side expansion
-  if ! ssh "$remote" "[[ -b '$SD_CARD_DEVICE' ]]" 2> /dev/null; then
+	if ! ssh "$remote" "[[ -b '$SD_CARD_DEVICE' ]]" 2>/dev/null; then
 		die "Device $SD_CARD_DEVICE does not exist on remote laptop"
 	fi
 
@@ -668,8 +668,8 @@ phase_flash_remote_execute() {
 	# Unmount any mounted partitions
 	log_info "Unmounting partitions on $SD_CARD_DEVICE..."
 	for partition in "${SD_CARD_DEVICE}"*; do
-    if mountpoint -q "$partition" 2> /dev/null || mount | grep -q "$partition"; then
-      umount "$partition" 2> /dev/null || true
+		if mountpoint -q "$partition" 2>/dev/null || mount | grep -q "$partition"; then
+			umount "$partition" 2>/dev/null || true
 		fi
 	done
 
@@ -681,7 +681,7 @@ phase_flash_remote_execute() {
 	# Configure headless boot
 	log_info "Configuring headless boot..."
 	sleep 2
-  partprobe "$SD_CARD_DEVICE" 2> /dev/null || true
+	partprobe "$SD_CARD_DEVICE" 2>/dev/null || true
 	sleep 2
 
 	# Mount boot partition
@@ -704,7 +704,7 @@ phase_flash_remote_execute() {
 
 	# Create userconf.txt for first user
 	if [[ -n $encrypted_password ]]; then
-    echo "${PI_USER}:${encrypted_password}" > "$boot_mount/userconf.txt"
+		echo "${PI_USER}:${encrypted_password}" >"$boot_mount/userconf.txt"
 		log_success "User '$PI_USER' configured"
 	fi
 
@@ -721,7 +721,7 @@ phase_flash_remote_execute() {
 		mkdir -p "$root_mount"
 		mount "$root_partition" "$root_mount"
 
-    echo "$PI_HOSTNAME" > "$root_mount/etc/hostname"
+		echo "$PI_HOSTNAME" >"$root_mount/etc/hostname"
 		sed -i "s/raspberrypi/$PI_HOSTNAME/g" "$root_mount/etc/hosts"
 
 		log_success "Hostname set to '$PI_HOSTNAME'"
@@ -744,7 +744,7 @@ wait_for_apt_lock() {
 	local max_wait=600 # 10 minutes max
 	local waited=0
 
-  while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/cache/apt/archives/lock > /dev/null 2>&1; do
+	while fuser /var/lib/dpkg/lock-frontend /var/lib/apt/lists/lock /var/cache/apt/archives/lock >/dev/null 2>&1; do
 		if [[ $waited -eq 0 ]]; then
 			log_info "Waiting for other apt/dpkg processes to finish..."
 			log_info "Current apt processes:"
@@ -799,7 +799,7 @@ phase_configure() {
 	cp /etc/ssh/sshd_config /etc/ssh/sshd_config.backup
 
 	# Apply security settings
-  cat >> /etc/ssh/sshd_config.d/hardening.conf << 'EOF'
+	cat >>/etc/ssh/sshd_config.d/hardening.conf <<'EOF'
 # Security hardening
 PermitRootLogin no
 PasswordAuthentication yes
@@ -836,7 +836,7 @@ EOF
 
 	# Configure fail2ban
 	log_info "Configuring fail2ban..."
-  cat > /etc/fail2ban/jail.local << 'EOF'
+	cat >/etc/fail2ban/jail.local <<'EOF'
 [DEFAULT]
 bantime = 1h
 findtime = 10m
@@ -855,7 +855,7 @@ EOF
 
 	# Enable automatic security updates
 	log_info "Enabling automatic security updates..."
-  cat > /etc/apt/apt.conf.d/50unattended-upgrades << 'EOF'
+	cat >/etc/apt/apt.conf.d/50unattended-upgrades <<'EOF'
 Unattended-Upgrade::Origins-Pattern {
     "origin=Debian,codename=${distro_codename},label=Debian-Security";
     "origin=Raspbian,codename=${distro_codename},label=Raspbian";
@@ -936,7 +936,7 @@ configure_mariadb() {
 	mysql -e "FLUSH PRIVILEGES;"
 
 	# Save password for later use
-  echo "$db_password" > /root/.nextcloud_db_password
+	echo "$db_password" >/root/.nextcloud_db_password
 	chmod 600 /root/.nextcloud_db_password
 
 	log_success "MariaDB configured"
@@ -985,7 +985,7 @@ configure_apache() {
 	server_ip=$(hostname -I | awk '{print $1}')
 
 	# Create Apache virtual host
-  cat > /etc/apache2/sites-available/nextcloud.conf << EOF
+	cat >/etc/apache2/sites-available/nextcloud.conf <<EOF
 <VirtualHost *:80>
     ServerName $server_ip
     DocumentRoot /var/www/nextcloud
@@ -1035,7 +1035,7 @@ configure_php() {
 	sed -i 's/;date.timezone.*/date.timezone = Europe\/Warsaw/' "$php_ini"
 
 	# Configure OPcache
-  cat >> "$php_ini" << 'EOF'
+	cat >>"$php_ini" <<'EOF'
 
 ; Nextcloud OPcache settings
 opcache.enable=1
@@ -1047,7 +1047,7 @@ opcache.revalidate_freq=1
 EOF
 
 	# Configure APCu
-  echo "apc.enable_cli=1" >> "/etc/php/${php_version}/mods-available/apcu.ini"
+	echo "apc.enable_cli=1" >>"/etc/php/${php_version}/mods-available/apcu.ini"
 
 	systemctl restart apache2
 
@@ -1117,9 +1117,9 @@ setup_nextcloud_cron() {
 	log_info "Setting up Nextcloud background jobs..."
 
 	# Add cron job for background tasks
-  crontab -u www-data -l 2> /dev/null || echo "" | crontab -u www-data -
+	crontab -u www-data -l 2>/dev/null || echo "" | crontab -u www-data -
 	(
-    crontab -u www-data -l 2> /dev/null | grep -v 'nextcloud/cron.php'
+		crontab -u www-data -l 2>/dev/null | grep -v 'nextcloud/cron.php'
 		echo "*/5 * * * * php -f /var/www/nextcloud/cron.php"
 	) | crontab -u www-data -
 
@@ -1205,9 +1205,9 @@ discover_raspberry_pi() {
 	local pi_ip=""
 
 	# Try resolving hostname directly
-  pi_ip=$(getent hosts "$PI_HOSTNAME" 2> /dev/null | awk '{print $1}' | head -1) || true
+	pi_ip=$(getent hosts "$PI_HOSTNAME" 2>/dev/null | awk '{print $1}' | head -1) || true
 	if [[ -z $pi_ip ]]; then
-    pi_ip=$(getent hosts "${PI_HOSTNAME}.local" 2> /dev/null | awk '{print $1}' | head -1) || true
+		pi_ip=$(getent hosts "${PI_HOSTNAME}.local" 2>/dev/null | awk '{print $1}' | head -1) || true
 	fi
 
 	if [[ -n $pi_ip ]]; then
@@ -1218,11 +1218,11 @@ discover_raspberry_pi() {
 
 	# Ping sweep to wake up hosts
 	log_info "Hostname resolution failed, scanning network..."
-  nmap -sn -T4 "$network" &> /dev/null || true
+	nmap -sn -T4 "$network" &>/dev/null || true
 
 	# Scan for SSH-enabled devices (excluding our IP and known laptop)
 	local ssh_hosts
-  ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2> /dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | grep -vw "$REMOTE_LAPTOP_IP" 2> /dev/null | sort -u) || true
+	ssh_hosts=$(nmap -p 22 --open -sT -T4 "$network" 2>/dev/null | grep "Nmap scan report" | grep -oP '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | grep -vw "$my_ip" | grep -vw "$REMOTE_LAPTOP_IP" 2>/dev/null | sort -u) || true
 
 	if [[ -z $ssh_hosts ]]; then
 		die "No new SSH-enabled devices found. Is the Pi connected and booted?"
@@ -1235,14 +1235,14 @@ discover_raspberry_pi() {
 		log_info "Trying $ip with user '$PI_USER'..."
 
 		# Try with password
-    if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "hostname" 2> /dev/null | grep -qi "$PI_HOSTNAME"; then
+		if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "hostname" 2>/dev/null | grep -qi "$PI_HOSTNAME"; then
 			log_success "Found Raspberry Pi at $ip"
 			echo "$ip"
 			return
 		fi
 
 		# Even if hostname doesn't match, check if it's a fresh Pi responding to our credentials
-    if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "echo ok" 2> /dev/null | grep -q "ok"; then
+		if sshpass -p "$PI_PASSWORD" ssh -o BatchMode=no -o ConnectTimeout=5 -o StrictHostKeyChecking=no "${PI_USER}@${ip}" "echo ok" 2>/dev/null | grep -q "ok"; then
 			log_success "Found device responding to Pi credentials at $ip"
 			echo "$ip"
 			return
@@ -1306,7 +1306,7 @@ phase_all_remote() {
 # =============================================================================
 
 show_help() {
-  cat << 'EOF'
+	cat <<'EOF'
 Nextcloud on Raspberry Pi 5 Setup Script
 
 Usage: ./setup_nextcloud_raspberry.sh <command>

linux_configuration/scripts/fixes/fix_virtualbox.sh

@@ -44,7 +44,7 @@ collect_kernel_headers() {
 	local -a headers=()
 	local kernel_pkg header_pkg
 	for kernel_pkg in linux linux-lts linux-zen linux-hardened; do
-    if pacman -Q "${kernel_pkg}" > /dev/null 2>&1; then
+		if pacman -Q "${kernel_pkg}" >/dev/null 2>&1; then
 			header_pkg="${kernel_pkg}-headers"
 			headers+=("${header_pkg}")
 		fi
@@ -59,7 +59,7 @@ maybe_remove_conflicting_host_packages() {
 	local -a candidates=("virtualbox-host-dkms" "virtualbox-host-modules-arch" "virtualbox-host-modules-lts")
 	local pkg
 	for pkg in "${candidates[@]}"; do
-    if [[ ${pkg} != "${selected_package}" ]] && pacman -Q "${pkg}" > /dev/null 2>&1; then
+		if [[ ${pkg} != "${selected_package}" ]] && pacman -Q "${pkg}" >/dev/null 2>&1; then
 			log_warn "Removing conflicting package ${pkg} before installing ${selected_package}."
 			pacman -Rsn "${PACMAN_REMOVE_FLAGS[@]}" "${pkg}"
 		fi
@@ -88,7 +88,7 @@ install_packages() {
 rebuild_virtualbox_modules() {
 	local host_package=$1
 	if [[ ${host_package} == "virtualbox-host-dkms" ]]; then
-    if command -v dkms > /dev/null 2>&1; then
+		if command -v dkms >/dev/null 2>&1; then
 			log_info "Rebuilding VirtualBox DKMS modules for all installed kernels."
 			dkms autoinstall
 		else
@@ -109,7 +109,7 @@ reload_virtualbox_modules() {
 	local mod
 	for mod in "${modules[@]}"; do
 		if ! lsmod | awk '{print $1}' | grep -Fxq "${mod}"; then
-      if ! modprobe "${mod}" > /dev/null 2>&1; then
+			if ! modprobe "${mod}" >/dev/null 2>&1; then
 				log_warn "Module ${mod} failed to load; check dmesg for details."
 			fi
 		fi
@@ -124,10 +124,10 @@ reload_virtualbox_modules() {
 warn_if_secure_boot_enabled() {
 	local secure_boot_file
 	if [[ -d /sys/firmware/efi/efivars ]]; then
-    secure_boot_file=$(find /sys/firmware/efi/efivars -maxdepth 1 -name 'SecureBoot-*' -print -quit 2> /dev/null || true)
+		secure_boot_file=$(find /sys/firmware/efi/efivars -maxdepth 1 -name 'SecureBoot-*' -print -quit 2>/dev/null || true)
 		if [[ -n ${secure_boot_file} && -r ${secure_boot_file} ]]; then
 			local state
-      state=$(hexdump -n 1 -s 4 -e '1 "%d"' "${secure_boot_file}" 2> /dev/null || echo "0")
+			state=$(hexdump -n 1 -s 4 -e '1 "%d"' "${secure_boot_file}" 2>/dev/null || echo "0")
 			if [[ ${state} == "1" ]]; then
 				log_warn "EFI Secure Boot appears to be enabled. You may need to sign VirtualBox modules manually."
 			fi

linux_configuration/scripts/lib/android.sh

@@ -45,7 +45,7 @@ check_adb_device() {
 # Check if device has root access
 check_adb_root() {
 	log "Checking root access..."
-  if ! adb shell "su -c 'echo test'" 2> /dev/null | grep -q "test"; then
+	if ! adb shell "su -c 'echo test'" 2>/dev/null | grep -q "test"; then
 		die "Root access not available. Make sure Magisk is installed and grant root to Shell."
 	fi
 	log "Root access confirmed"

linux_configuration/scripts/lib/common.sh

@@ -22,7 +22,7 @@ log_message() {
 	formatted="$(date '+%Y-%m-%d %H:%M:%S') - $msg"
 	echo "$formatted" >&2
 	if [[ -n $log_file ]]; then
-    echo "$formatted" >> "$log_file" 2> /dev/null || true
+		echo "$formatted" >>"$log_file" 2>/dev/null || true
 	fi
 }
 
@@ -181,10 +181,10 @@ FOCUS_APPS_PROCESSES=(
 # Echoes the name of the found app
 is_focus_app_running() {
 	# Check windows first
-  if command -v xdotool &> /dev/null; then
+	if command -v xdotool &>/dev/null; then
 		local app
 		for app in "${FOCUS_APPS_WINDOWS[@]}"; do
-      if xdotool search --name "$app" &> /dev/null 2>&1; then
+			if xdotool search --name "$app" &>/dev/null 2>&1; then
 				echo "$app"
 				return 0
 			fi
@@ -194,7 +194,7 @@ is_focus_app_running() {
 	# Check specific processes
 	local app
 	for app in "${FOCUS_APPS_PROCESSES[@]}"; do
-    if pgrep -f "$app" &> /dev/null; then
+		if pgrep -f "$app" &>/dev/null; then
 			echo "$app"
 			return 0
 		fi
@@ -212,7 +212,7 @@ is_focus_app_running() {
 require_command() {
 	local cmd="$1"
 	local pkg="${2:-$1}"
-  if ! command -v "$cmd" > /dev/null 2>&1; then
+	if ! command -v "$cmd" >/dev/null 2>&1; then
 		echo "Error: '$cmd' is not installed or not in PATH." >&2
 		echo "Install with: sudo pacman -S $pkg" >&2
 		return 1
@@ -227,7 +227,7 @@ require_imagemagick() {
 	local preferred="${1:-}"
 
 	if [[ $preferred == "magick" ]] || [[ -z $preferred ]]; then
-    if command -v magick &> /dev/null; then
+		if command -v magick &>/dev/null; then
 			MAGICK_CMD="magick"
 			export MAGICK_CMD
 			return 0
@@ -235,7 +235,7 @@ require_imagemagick() {
 	fi
 
 	if [[ $preferred == "convert" ]] || [[ -z $preferred ]]; then
-    if command -v convert &> /dev/null; then
+		if command -v convert &>/dev/null; then
 			MAGICK_CMD="convert"
 			export MAGICK_CMD
 			return 0
@@ -257,7 +257,7 @@ install_missing_pacman_packages() {
 	local missing=()
 
 	for pkg in "${packages[@]}"; do
-    if ! pacman -Qi "$pkg" > /dev/null 2>&1; then
+		if ! pacman -Qi "$pkg" >/dev/null 2>&1; then
 			missing+=("$pkg")
 		fi
 	done
@@ -287,8 +287,8 @@ notify() {
 	local urgency="${3:-normal}"
 	local timeout="${4:-5000}"
 
-  if command -v notify-send &> /dev/null; then
-    notify-send -u "$urgency" -t "$timeout" "$title" "$message" 2> /dev/null || true
+	if command -v notify-send &>/dev/null; then
+		notify-send -u "$urgency" -t "$timeout" "$title" "$message" 2>/dev/null || true
 	fi
 }
 
@@ -344,7 +344,7 @@ is_service_active() {
 # Check if a systemd service is enabled
 # Usage: if is_service_enabled "service-name" [--user]; then ...
 is_service_enabled() {
-  _systemctl_cmd "${2:-}" is-enabled --quiet "$1" 2> /dev/null
+	_systemctl_cmd "${2:-}" is-enabled --quiet "$1" 2>/dev/null
 }
 
 # =============================================================================
@@ -397,7 +397,7 @@ ask_yes_no() {
 # Check if a command is available
 # Usage: if has_cmd git; then ...
 has_cmd() {
-  command -v "$1" > /dev/null 2>&1
+	command -v "$1" >/dev/null 2>&1
 }
 
 # =============================================================================
@@ -429,7 +429,7 @@ print_setup_header() {
 # Usage: count=$(mount_layers_count "/etc/hosts")
 mount_layers_count() {
 	local target="$1"
-  awk -v t="$target" '$5==t{c++} END{print c+0}' /proc/self/mountinfo 2> /dev/null || echo 0
+	awk -v t="$target" '$5==t{c++} END{print c+0}' /proc/self/mountinfo 2>/dev/null || echo 0
 }
 
 # Collapse all bind mount layers for a path
@@ -441,7 +441,7 @@ collapse_mounts() {
 
 	if has_cmd mountpoint; then
 		while mountpoint -q "$target"; do
-      umount -l "$target" > /dev/null 2>&1 || break
+			umount -l "$target" >/dev/null 2>&1 || break
 			i=$((i + 1))
 			((i >= max_iter)) && break
 		done
@@ -449,7 +449,7 @@ collapse_mounts() {
 		local cnt
 		cnt=$(mount_layers_count "$target")
 		while ((cnt > 1)); do
-      umount -l "$target" > /dev/null 2>&1 || break
+			umount -l "$target" >/dev/null 2>&1 || break
 			i=$((i + 1))
 			((i >= max_iter)) && break
 			cnt=$(mount_layers_count "$target")

linux_configuration/scripts/misc/testsAndMisc-bash/.vscode/tasks.json

@@ -12,9 +12,7 @@
         "tiny"
       ],
       "isBackground": false,
-			"problemMatcher": [
-				"$gcc"
-			],
+      "problemMatcher": ["$gcc"],
       "group": "build"
     }
   ]

linux_configuration/scripts/misc/testsAndMisc-bash/README_clean_audio.md

@@ -16,27 +16,34 @@ chmod +x Bash/clean_audio.sh
 ## Quick start
 
 - Single file, default ASR preset (16k mono, denoise, high‑pass, limiter):
+
 ```bash
 Bash/clean_audio.sh path/to/file.wav
 ```
+
 This produces `path/to/file_clean.wav`.
 
 - Whole folder, 4 parallel jobs, output to `cleaned/`:
+
 ```bash
 Bash/clean_audio.sh path/to/folder -O cleaned -j 4
 ```
 
 - Use an RNNoise model explicitly (if your ffmpeg has arnndn):
+
 ```bash
 Bash/clean_audio.sh input.wav -m models/rnnoise_model.nn
 ```
+
 If you omit `-m`, the script will look in common locations; if not found, it will attempt a download via `Bash/get_rnnoise_model.sh`.
 
 Advanced options and compatibility:
+
 - The cleaner requires RNNoise by default. To allow non-ML fallback filters (afftdn), add `--allow-fallback`.
 - The script uses advanced filter settings when available (e.g., afftdn with `md`). If your ffmpeg build lacks these options, it will error with guidance. Add `--no-advanced` (or `--compat`) to avoid such params.
 
 - Podcast preset (adds dynamics and loudness leveling):
+
 ```bash
 Bash/clean_audio.sh input.wav --preset podcast
 ```
@@ -64,6 +71,7 @@ Options:
 Default output format is mono, 16 kHz, PCM 16‑bit WAV—ideal for most Whisper/faster‑whisper pipelines. You can feed the cleaned files directly into your transcription step.
 
 If you prefer FLAC to save space without quality loss:
+
 ```bash
 Bash/clean_audio.sh input.wav -e flac -O cleaned
 ```
@@ -78,12 +86,13 @@ Bash/clean_audio.sh input.wav -e flac -O cleaned
 
 - If you see artifacts from RNNoise, try without a model (uses `afftdn`), or add a low‑pass (e.g., `--lowpass 8000`).
 - For extremely boomy bar recordings, raise high‑pass by editing `HIGHPASS` in the script or add `--lowpass`.
-- If your ffmpeg lacks `arnndn`, you can install a newer build or keep the fallback (afftdn works fine for many cases).
-        - If your ffmpeg is missing features, you can use the helper:
+- If your ffmpeg lacks `arnndn`, you can install a newer build or keep the fallback (afftdn works fine for many cases). - If your ffmpeg is missing features, you can use the helper:
+
 ```bash
 chmod +x Bash/install_ffmpeg_with_arnndn.sh
 Bash/install_ffmpeg_with_arnndn.sh
 ```
+
 It will suggest distro options or build FFmpeg from source with `--enable-librnnoise`.
 
     RNNoise model downloader helper:

linux_configuration/scripts/misc/testsAndMisc-bash/fix_thorium_unity.sh

@@ -28,7 +28,7 @@ SET_DEFAULT=false
 DO_RESTART=false
 
 usage() {
-  cat << EOF
+	cat <<EOF
 fix_thorium_unity.sh - Auto-allow unityhub:// from Unity origins in Thorium/Chromium
 
 Options:
@@ -70,7 +70,7 @@ while [[ $# -gt 0 ]]; do
 done
 
 ensure_sudo() {
-  if ! command -v sudo > /dev/null 2>&1; then
+	if ! command -v sudo >/dev/null 2>&1; then
 		log_error "sudo not found; cannot install system policy. Use --set-default or run from root."
 		exit 1
 	fi
@@ -89,7 +89,7 @@ install_policy() {
 		log_info "Installing policy into: $target"
 		sudo mkdir -p "$target"
 		local policy_file="$target/unityhub-policy.json"
-    sudo tee "$policy_file" > /dev/null << 'JSON'
+		sudo tee "$policy_file" >/dev/null <<'JSON'
 {
   "AutoLaunchProtocolsFromOrigins": [
     { "protocol": "unityhub", "origin": "https://id.unity.com", "allow": true },
@@ -111,7 +111,7 @@ JSON
 }
 
 set_default_browser() {
-  if command -v xdg-settings > /dev/null 2>&1; then
+	if command -v xdg-settings >/dev/null 2>&1; then
 		# Prefer the upstream desktop id if it exists
 		local desktop="thorium-browser.desktop"
 		if [[ ! -f "/usr/share/applications/$desktop" && -f "$HOME/.local/share/applications/$desktop" ]]; then
@@ -122,7 +122,7 @@ set_default_browser() {
 		fi
 		log_info "Setting default browser to $desktop"
 		xdg-settings set default-web-browser "$desktop" || log_warn "Failed to set default browser via xdg-settings"
-    log_ok "Default browser set to: $(xdg-settings get default-web-browser 2> /dev/null || echo "$desktop")"
+		log_ok "Default browser set to: $(xdg-settings get default-web-browser 2>/dev/null || echo "$desktop")"
 	else
 		log_warn "xdg-settings not found; cannot set default browser automatically."
 	fi
@@ -131,12 +131,12 @@ set_default_browser() {
 restart_thorium() {
 	# Kill Thorium processes and start fresh
 	log_info "Restarting Thorium..."
-  pkill -9 -f 'thorium-browser' 2> /dev/null || true
+	pkill -9 -f 'thorium-browser' 2>/dev/null || true
 	# Also kill unityhub-bin's embedded Chromium if any leftover (harmless)
-  pkill -9 -f 'unityhub-bin' 2> /dev/null || true
+	pkill -9 -f 'unityhub-bin' 2>/dev/null || true
 	# Start Thorium detached if available
-  if command -v thorium-browser > /dev/null 2>&1; then
-    nohup thorium-browser > /dev/null 2>&1 &
+	if command -v thorium-browser >/dev/null 2>&1; then
+		nohup thorium-browser >/dev/null 2>&1 &
 		disown || true
 	fi
 	log_ok "Thorium restart attempted."
@@ -147,7 +147,7 @@ main() {
 	$SET_DEFAULT && set_default_browser
 	$DO_RESTART && restart_thorium
 
-  cat << 'NEXT'
+	cat <<'NEXT'
 ---
 Next steps:
 - Open Unity Hub, click Sign in, complete in Thorium; when prompted, allow the unityhub link to open the app.

linux_configuration/scripts/misc/testsAndMisc-bash/mcp_readme.md

@@ -13,9 +13,10 @@ MCP for Unity connects your tools using two components:
 
 ### Prerequisites
 
-  *   **Python:** Version 3.12 or newer. [Download Python](https://www.python.org/downloads/)
-  *   **Unity Hub & Editor:** Version 2021.3 LTS or newer. [Download Unity](https://unity.com/download)
-  *   **uv (Python toolchain manager):**
+- **Python:** Version 3.12 or newer. [Download Python](https://www.python.org/downloads/)
+- **Unity Hub & Editor:** Version 2021.3 LTS or newer. [Download Unity](https://unity.com/download)
+- **uv (Python toolchain manager):**
+
   ```bash
   # macOS / Linux
   curl -LsSf https://astral.sh/uv/install.sh | sh
@@ -26,9 +27,9 @@ MCP for Unity connects your tools using two components:
   # Docs: https://docs.astral.sh/uv/getting-started/installation/
   ```
 
-  *   **An MCP Client:** : [Claude Desktop](https://claude.ai/download) | [Claude Code](https://github.com/anthropics/claude-code) | [Cursor](https://www.cursor.com/en/downloads) | [Visual Studio Code Copilot](https://code.visualstudio.com/docs/copilot/overview) | [Windsurf](https://windsurf.com) | Others work with manual config
+- **An MCP Client:** : [Claude Desktop](https://claude.ai/download) | [Claude Code](https://github.com/anthropics/claude-code) | [Cursor](https://www.cursor.com/en/downloads) | [Visual Studio Code Copilot](https://code.visualstudio.com/docs/copilot/overview) | [Windsurf](https://windsurf.com) | Others work with manual config
 
- *    <details> <summary><strong>[Optional] Roslyn for Advanced Script Validation</strong></summary>
+- <details> <summary><strong>[Optional] Roslyn for Advanced Script Validation</strong></summary>
 
   For **Strict** validation level that catches undefined namespaces, types, and methods:
 
@@ -51,6 +52,7 @@ MCP for Unity connects your tools using two components:
   **Note:** Without Roslyn, script validation falls back to basic structural checks. Roslyn enables full C# compiler diagnostics with precise error reporting.</details>
 
 ---
+
 ### 🚀 Arch Linux Quick Setup Script
 
 If you're on Arch Linux and use Visual Studio Code as your MCP client, run the helper script in `Bash/install_unity_mcp.sh` to install the MCP server dependencies, clone the latest `unity-mcp` repository, and configure `~/.config/Code/User/mcp.json` automatically:
@@ -63,6 +65,7 @@ chmod +x Bash/install_unity_mcp.sh
 The script requires `sudo` access for `pacman` and optionally uses `yay` or `flatpak` to install Unity Hub. After it finishes, continue with the Unity-side steps below to import the MCP for Unity Bridge package inside your project.
 
 ---
+
 ### 🌟 Step 1: Install the Unity Package
 
 #### To install via Git URL
@@ -86,6 +89,7 @@ The script requires `sudo` access for `pacman` and optionally uses `yay` or `fla
 **Note:** If you installed the MCP Server before Coplay's maintenance, you will need to uninstall the old package before re-installing the new one.
 
 ### 🛠️ Step 2: Configure Your MCP Client
+
 Connect your MCP Client (Claude, Cursor, etc.) to the Python server set up in Step 1 (auto) or via Manual Configuration (below).
 
 <img width="648" height="599" alt="MCPForUnity-Readme-Image" src="https://github.com/user-attachments/assets/b4a725da-5c43-4bd6-80d6-ee2e3cca9596" />
@@ -94,23 +98,22 @@ Connect your MCP Client (Claude, Cursor, etc.) to the Python server set up in St
 
 1.  In Unity, go to `Window > MCP for Unity`.
 2.  Click `Auto-Setup`.
-3.  Look for a green status indicator 🟢 and "Connected ✓". *(This attempts to modify the MCP Client's config file automatically).* 
+3.  Look for a green status indicator 🟢 and "Connected ✓". _(This attempts to modify the MCP Client's config file automatically)._
 
 <details><summary><strong>Client-specific troubleshooting</strong></summary>
 
-  - **VSCode**: uses `Code/User/mcp.json` with top-level `servers.unityMCP` and `"type": "stdio"`. On Windows, MCP for Unity writes an absolute `uv.exe` (prefers WinGet Links shim) to avoid PATH issues.
-  - **Cursor / Windsurf** [(**help link**)](https://github.com/CoplayDev/unity-mcp/wiki/1.-Fix-Unity-MCP-and-Cursor,-VSCode-&-Windsurf): if `uv` is missing, the MCP for Unity window shows "uv Not Found" with a quick [HELP] link and a "Choose `uv` Install Location" button.
-  - **Claude Code** [(**help link**)](https://github.com/CoplayDev/unity-mcp/wiki/2.-Fix-Unity-MCP-and-Claude-Code): if `claude` isn't found, the window shows "Claude Not Found" with [HELP] and a "Choose Claude Location" button. Unregister now updates the UI immediately.</details>
-
+- **VSCode**: uses `Code/User/mcp.json` with top-level `servers.unityMCP` and `"type": "stdio"`. On Windows, MCP for Unity writes an absolute `uv.exe` (prefers WinGet Links shim) to avoid PATH issues.
+- **Cursor / Windsurf** [(**help link**)](https://github.com/CoplayDev/unity-mcp/wiki/1.-Fix-Unity-MCP-and-Cursor,-VSCode-&-Windsurf): if `uv` is missing, the MCP for Unity window shows "uv Not Found" with a quick [HELP] link and a "Choose `uv` Install Location" button.
+- **Claude Code** [(**help link**)](https://github.com/CoplayDev/unity-mcp/wiki/2.-Fix-Unity-MCP-and-Claude-Code): if `claude` isn't found, the window shows "Claude Not Found" with [HELP] and a "Choose Claude Location" button. Unregister now updates the UI immediately.</details>
 
 **Option B: Manual Configuration**
 
 If Auto-Setup fails or you use a different client:
 
 1.  **Find your MCP Client's configuration file.** (Check client documentation).
-    *   *Claude Example (macOS):* `~/Library/Application Support/Claude/claude_desktop_config.json`
-    *   *Claude Example (Windows):* `%APPDATA%\Claude\claude_desktop_config.json`
-2.  **Edit the file** to add/update the `mcpServers` section, using the *exact* paths from Step 1.
+    - _Claude Example (macOS):_ `~/Library/Application Support/Claude/claude_desktop_config.json`
+    - _Claude Example (Windows):_ `%APPDATA%\Claude\claude_desktop_config.json`
+2.  **Edit the file** to add/update the `mcpServers` section, using the _exact_ paths from Step 1.
 
 <details>
 <summary><strong>Click for Client-Specific JSON Configuration Snippets...</strong></summary>
@@ -122,7 +125,12 @@ If Auto-Setup fails or you use a different client:
   "servers": {
     "unityMCP": {
       "command": "uv",
-      "args": ["--directory","<ABSOLUTE_PATH_TO>/UnityMcpServer/src","run","server.py"],
+      "args": [
+        "--directory",
+        "<ABSOLUTE_PATH_TO>/UnityMcpServer/src",
+        "run",
+        "server.py"
+      ],
       "type": "stdio"
     }
   }
@@ -150,7 +158,6 @@ If Auto-Setup fails or you use a different client:
 
 (Replace YOUR_USERNAME)
 
-
 </details>
 
 ---

linux_configuration/scripts/misc/testsAndMisc-bash/test_fw.srt

@@ -1,4 +1,3 @@
 1
 00:00:00,000 --> 00:00:02,760
 This is a quick test on faster with but run creep shun.
-

linux_configuration/scripts/misc/testsAndMisc-bash/tools/transcribe_fw.py

@@ -1,17 +1,16 @@
 #!/usr/bin/env python3
 import argparse
+from datetime import timedelta
 import os
 import shutil
 import subprocess
 import sys
 import time
-from datetime import timedelta
-from typing import List, Optional
 
 
 def format_bytes(size: int) -> str:
     """Format bytes as human-readable string."""
-    for unit in ['B', 'KB', 'MB', 'GB']:
+    for unit in ["B", "KB", "MB", "GB"]:
         if size < 1024:
             return f"{size:.1f}{unit}"
         size /= 1024
@@ -24,10 +23,13 @@ def download_model_with_progress(model_name: str) -> str:
     Returns the local path to the downloaded model.
     """
     try:
-        from huggingface_hub import snapshot_download, hf_hub_download
+        from huggingface_hub import hf_hub_download
         from huggingface_hub.utils import EntryNotFoundError
     except ImportError:
-        print("[WARN] huggingface_hub not available, falling back to default download", file=sys.stderr)
+        print(
+            "[WARN] huggingface_hub not available, falling back to default download",
+            file=sys.stderr,
+        )
         return model_name
 
     # Map common model names to HF repo IDs
@@ -65,24 +67,36 @@ def download_model_with_progress(model_name: str) -> str:
     try:
         # Use snapshot_download which handles caching and shows what's happening
         # First, let's check if model.bin needs downloading by checking cache
-        from huggingface_hub import try_to_load_from_cache, HfFileSystem
+        from huggingface_hub import HfFileSystem, try_to_load_from_cache
 
         cache_path = try_to_load_from_cache(repo_id, "model.bin")
         if cache_path is not None:
-            print(f"[INFO] Model already cached, loading from: {os.path.dirname(cache_path)}", flush=True)
+            print(
+                f"[INFO] Model already cached, loading from: {os.path.dirname(cache_path)}",
+                flush=True,
+            )
             # Return the directory containing the cached files
             return os.path.dirname(cache_path)
 
         # Model not cached, need to download
         print(f"[INFO] Downloading model files from {repo_id}...", flush=True)
-        print("[INFO] This may take several minutes for large models (~3GB for large-v3)", flush=True)
+        print(
+            "[INFO] This may take several minutes for large models (~3GB for large-v3)",
+            flush=True,
+        )
 
         # Get file sizes to show progress
         try:
             fs = HfFileSystem()
             files_info = fs.ls(repo_id, detail=True)
-            total_size = sum(f.get('size', 0) for f in files_info if f.get('name', '').split('/')[-1] in required_files)
-            print(f"[INFO] Total download size: ~{format_bytes(total_size)}", flush=True)
+            total_size = sum(
+                f.get("size", 0)
+                for f in files_info
+                if f.get("name", "").split("/")[-1] in required_files
+            )
+            print(
+                f"[INFO] Total download size: ~{format_bytes(total_size)}", flush=True
+            )
         except Exception:
             pass  # Size info is optional
 
@@ -100,7 +114,9 @@ def download_model_with_progress(model_name: str) -> str:
                     resume_download=True,
                 )
                 elapsed = time.time() - file_start
-                file_size = os.path.getsize(local_path) if os.path.exists(local_path) else 0
+                file_size = (
+                    os.path.getsize(local_path) if os.path.exists(local_path) else 0
+                )
                 print(f"done ({format_bytes(file_size)}, {elapsed:.1f}s)", flush=True)
                 downloaded += 1
 
@@ -118,7 +134,10 @@ def download_model_with_progress(model_name: str) -> str:
         return model_dir
 
     except Exception as e:
-        print(f"[WARN] Custom download failed ({e}), falling back to default", file=sys.stderr)
+        print(
+            f"[WARN] Custom download failed ({e}), falling back to default",
+            file=sys.stderr,
+        )
         return model_name
 
 
@@ -152,34 +171,38 @@ def write_txt(segments, txt_path: str):
                 f.write(text + "\n")
 
 
-def write_srt_with_speakers(segments, labels: List[int], path: str):
+def write_srt_with_speakers(segments, labels: list[int], path: str):
     with open(path, "w", encoding="utf-8") as f:
-        for i, (seg, lab) in enumerate(zip(segments, labels), start=1):
+        for i, (seg, lab) in enumerate(zip(segments, labels, strict=False), start=1):
             text = (seg.text or "").strip()
             if not text:
                 continue
             spk = f"SPK{lab+1}"
-            f.write(f"{i}\n{format_timestamp(seg.start)} --> {format_timestamp(seg.end)}\n[{spk}] {text}\n\n")
+            f.write(
+                f"{i}\n{format_timestamp(seg.start)} --> {format_timestamp(seg.end)}\n[{spk}] {text}\n\n"
+            )
 
 
-def write_txt_with_speakers(segments, labels: List[int], path: str):
+def write_txt_with_speakers(segments, labels: list[int], path: str):
     with open(path, "w", encoding="utf-8") as f:
-        for seg, lab in zip(segments, labels):
+        for seg, lab in zip(segments, labels, strict=False):
             text = (seg.text or "").strip()
             if text:
                 spk = f"SPK{lab+1}"
                 f.write(f"[{spk}] {text}\n")
 
 
-def write_rttm(segments, labels: List[int], path: str, file_id: str = "audio"):
+def write_rttm(segments, labels: list[int], path: str, file_id: str = "audio"):
     # RTTM format: SPEAKER <file-id> 1 <start> <duration> <ortho> <stype> <name> <conf>
     with open(path, "w", encoding="utf-8") as f:
-        for seg, lab in zip(segments, labels):
+        for seg, lab in zip(segments, labels, strict=False):
             start = float(getattr(seg, "start", 0.0) or 0.0)
             end = float(getattr(seg, "end", start) or start)
             dur = max(0.0, end - start)
             name = f"SPK{lab+1}"
-            f.write(f"SPEAKER {file_id} 1 {start:.3f} {dur:.3f} <NA> <NA> {name} <NA>\n")
+            f.write(
+                f"SPEAKER {file_id} 1 {start:.3f} {dur:.3f} <NA> <NA> {name} <NA>\n"
+            )
 
 
 def hhmmss(seconds: float) -> str:
@@ -230,6 +253,7 @@ def get_media_duration(path: str) -> float | None:
 
 def _resample_linear(x, src_sr: int, tgt_sr: int):
     import numpy as np
+
     if src_sr == tgt_sr:
         return x
     ratio = float(tgt_sr) / float(src_sr)
@@ -242,6 +266,7 @@ def _resample_linear(x, src_sr: int, tgt_sr: int):
 
 def _kmeans_cosine(embs, k: int, iters: int = 50, seed: int = 0):
     import numpy as np
+
     rng = np.random.default_rng(seed)
     X = np.asarray(embs, dtype=np.float32)
     if X.ndim != 2 or X.shape[0] == 0:
@@ -254,7 +279,7 @@ def _kmeans_cosine(embs, k: int, iters: int = 50, seed: int = 0):
     # If fewer samples than k, pad with random
     if C.shape[0] < k:
         pad = rng.standard_normal(size=(k - C.shape[0], X.shape[1])).astype(np.float32)
-        pad /= (np.linalg.norm(pad, axis=1, keepdims=True) + 1e-8)
+        pad /= np.linalg.norm(pad, axis=1, keepdims=True) + 1e-8
         C = np.concatenate([C, pad], axis=0)
     for _ in range(iters):
         # Assign by cosine similarity (maximize dot product)
@@ -267,7 +292,7 @@ def _kmeans_cosine(embs, k: int, iters: int = 50, seed: int = 0):
                 newC[j] = C[j]
             else:
                 v = sel.mean(axis=0)
-                v /= (np.linalg.norm(v) + 1e-8)
+                v /= np.linalg.norm(v) + 1e-8
                 newC[j] = v
         if np.allclose(newC, C, atol=1e-4):
             break
@@ -275,11 +300,12 @@ def _kmeans_cosine(embs, k: int, iters: int = 50, seed: int = 0):
     return labels
 
 
-def _ffmpeg_transcode_to_wav16_mono(src_path: str) -> Optional[str]:
+def _ffmpeg_transcode_to_wav16_mono(src_path: str) -> str | None:
     """If ffmpeg is available, transcode input to a temporary 16k mono WAV and return its path."""
     if not shutil.which("ffmpeg"):
         return None
     import tempfile
+
     tmp = tempfile.NamedTemporaryFile(prefix="fw_diar_", suffix=".wav", delete=False)
     tmp_path = tmp.name
     tmp.close()
@@ -300,7 +326,9 @@ def _ffmpeg_transcode_to_wav16_mono(src_path: str) -> Optional[str]:
         tmp_path,
     ]
     try:
-        subprocess.run(cmd, check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
+        subprocess.run(
+            cmd, check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL
+        )
         return tmp_path
     except Exception:
         try:
@@ -310,35 +338,44 @@ def _ffmpeg_transcode_to_wav16_mono(src_path: str) -> Optional[str]:
         return None
 
 
-def diarize_segments(audio_path: str, segments, num_speakers: int = 2) -> Optional[list]:
+def diarize_segments(audio_path: str, segments, num_speakers: int = 2) -> list | None:
     """Simple diarization: compute speaker embeddings per segment and cluster with KMeans.
     Returns a list of speaker labels aligned with segments, or None on failure.
     """
     try:
-        import numpy as np
         import soundfile as sf
+
         # Use non-deprecated import path
         from speechbrain.inference import EncoderClassifier
         import torch
     except Exception as e:
-        print(f"[WARN] Diarization dependencies missing ({e}); skipping speaker labels.", file=sys.stderr)
+        print(
+            f"[WARN] Diarization dependencies missing ({e}); skipping speaker labels.",
+            file=sys.stderr,
+        )
         return None
 
     # Load audio
-    temp_to_cleanup: Optional[str] = None
+    temp_to_cleanup: str | None = None
     try:
         wav, sr = sf.read(audio_path, dtype="float32", always_2d=False)
     except Exception as e:
         # Try ffmpeg transcoding fallback
         alt = _ffmpeg_transcode_to_wav16_mono(audio_path)
         if alt is None:
-            print(f"[WARN] Could not read audio for diarization and no ffmpeg fallback available: {e}", file=sys.stderr)
+            print(
+                f"[WARN] Could not read audio for diarization and no ffmpeg fallback available: {e}",
+                file=sys.stderr,
+            )
             return None
         try:
             wav, sr = sf.read(alt, dtype="float32", always_2d=False)
             temp_to_cleanup = alt
         except Exception as e2:
-            print(f"[WARN] Could not read transcoded audio for diarization: {e2}", file=sys.stderr)
+            print(
+                f"[WARN] Could not read transcoded audio for diarization: {e2}",
+                file=sys.stderr,
+            )
             try:
                 os.unlink(alt)
             except Exception:
@@ -354,7 +391,9 @@ def diarize_segments(audio_path: str, segments, num_speakers: int = 2) -> Option
         classifier = EncoderClassifier.from_hparams(
             source="speechbrain/spkrec-ecapa-voxceleb",
             run_opts={"device": "cpu"},
-            savedir=os.path.join(os.path.expanduser("~"), ".cache", "speechbrain_ecapa"),
+            savedir=os.path.join(
+                os.path.expanduser("~"), ".cache", "speechbrain_ecapa"
+            ),
         )
     except Exception as e:
         print(f"[WARN] Could not load speaker embedding model: {e}", file=sys.stderr)
@@ -383,7 +422,9 @@ def diarize_segments(audio_path: str, segments, num_speakers: int = 2) -> Option
             i1 = min(len(wav16), i0 + 1600)
         segment_wav = torch.tensor(wav16[i0:i1]).unsqueeze(0)
         with torch.no_grad():
-            emb = classifier.encode_batch(segment_wav).squeeze(0).squeeze(0).cpu().numpy()
+            emb = (
+                classifier.encode_batch(segment_wav).squeeze(0).squeeze(0).cpu().numpy()
+            )
         embs.append(emb.astype("float32"))
 
     if len(embs) == 0:
@@ -399,22 +440,56 @@ def diarize_segments(audio_path: str, segments, num_speakers: int = 2) -> Option
 
 
 def main():
-    parser = argparse.ArgumentParser(description="Transcribe audio with faster-whisper and write .txt and .srt")
+    parser = argparse.ArgumentParser(
+        description="Transcribe audio with faster-whisper and write .txt and .srt"
+    )
     parser.add_argument("input", help="Path to audio/video file")
-    parser.add_argument("--model", default=os.environ.get("FW_MODEL", "large-v3"), help="Model size or path (default: large-v3)")
-    parser.add_argument("--language", default=None, help="Language code (e.g., en). Leave None for auto-detect")
-    parser.add_argument("--device", default=os.environ.get("FW_DEVICE", "auto"), choices=["auto", "cpu", "cuda"], help="Device to run on")
-    parser.add_argument("--compute-type", dest="compute_type", default=os.environ.get("FW_COMPUTE", "auto"), help="Compute type (auto,int8,float16,float32,int8_float16,etc.)")
-    parser.add_argument("--outdir", default=None, help="Output directory (default: next to input)")
-    parser.add_argument("--no-progress", action="store_true", help="Disable live progress output")
-    parser.add_argument("--diarize", action="store_true", help="Enable speaker diarization (labels)")
-    parser.add_argument("--num-speakers", type=int, default=int(os.environ.get("FW_NUM_SPEAKERS", "2")), help="Assumed number of speakers (default: 2)")
+    parser.add_argument(
+        "--model",
+        default=os.environ.get("FW_MODEL", "large-v3"),
+        help="Model size or path (default: large-v3)",
+    )
+    parser.add_argument(
+        "--language",
+        default=None,
+        help="Language code (e.g., en). Leave None for auto-detect",
+    )
+    parser.add_argument(
+        "--device",
+        default=os.environ.get("FW_DEVICE", "auto"),
+        choices=["auto", "cpu", "cuda"],
+        help="Device to run on",
+    )
+    parser.add_argument(
+        "--compute-type",
+        dest="compute_type",
+        default=os.environ.get("FW_COMPUTE", "auto"),
+        help="Compute type (auto,int8,float16,float32,int8_float16,etc.)",
+    )
+    parser.add_argument(
+        "--outdir", default=None, help="Output directory (default: next to input)"
+    )
+    parser.add_argument(
+        "--no-progress", action="store_true", help="Disable live progress output"
+    )
+    parser.add_argument(
+        "--diarize", action="store_true", help="Enable speaker diarization (labels)"
+    )
+    parser.add_argument(
+        "--num-speakers",
+        type=int,
+        default=int(os.environ.get("FW_NUM_SPEAKERS", "2")),
+        help="Assumed number of speakers (default: 2)",
+    )
     args = parser.parse_args()
 
     try:
         from faster_whisper import WhisperModel
     except Exception as e:
-        print("[ERROR] faster-whisper is not installed in this environment.", file=sys.stderr)
+        print(
+            "[ERROR] faster-whisper is not installed in this environment.",
+            file=sys.stderr,
+        )
         print(str(e), file=sys.stderr)
         return 2
 
@@ -438,7 +513,9 @@ def main():
         # Prefer accuracy over speed by default
         compute_type = "float16" if device == "cuda" else "float32"
 
-    print(f"[INFO] Loading model='{args.model}', device='{device}', compute_type='{compute_type}'")
+    print(
+        f"[INFO] Loading model='{args.model}', device='{device}', compute_type='{compute_type}'"
+    )
 
     # Pre-download model files with explicit progress if not already cached
     model_path = args.model
@@ -447,7 +524,8 @@ def main():
 
     # Show CTranslate2 conversion progress
     import logging
-    logging.basicConfig(level=logging.INFO, format='[%(levelname)s] %(message)s')
+
+    logging.basicConfig(level=logging.INFO, format="[%(levelname)s] %(message)s")
     ct2_logger = logging.getLogger("faster_whisper")
     ct2_logger.setLevel(logging.INFO)
 
@@ -495,9 +573,11 @@ def main():
 
     # Finish progress line
     if not args.no_progress and sys.stderr.isatty():
-        print("", file=sys.stderr)  # newline
+        print(file=sys.stderr)  # newline
 
-    print(f"[INFO] Detected language: {getattr(info, 'language', None)} (prob={getattr(info, 'language_probability', None)})")
+    print(
+        f"[INFO] Detected language: {getattr(info, 'language', None)} (prob={getattr(info, 'language_probability', None)})"
+    )
     print(f"[INFO] Segments: {len(collected)}")
 
     # Optionally diarize
@@ -510,9 +590,14 @@ def main():
             write_srt_with_speakers(collected, labels, diar_srt)
             write_txt_with_speakers(collected, labels, diar_txt)
             write_rttm(collected, labels, rttm_path, file_id=base)
-            print(f"[OK] Wrote: {diar_txt}\n[OK] Wrote: {diar_srt}\n[OK] Wrote: {rttm_path}")
+            print(
+                f"[OK] Wrote: {diar_txt}\n[OK] Wrote: {diar_srt}\n[OK] Wrote: {rttm_path}"
+            )
         else:
-            print("[WARN] Diarization failed or returned mismatched labels; writing plain outputs.", file=sys.stderr)
+            print(
+                "[WARN] Diarization failed or returned mismatched labels; writing plain outputs.",
+                file=sys.stderr,
+            )
 
     # Write base outputs
     write_txt(collected, txt_path)

linux_configuration/scripts/misc/testsAndMisc-bash/tools/transcribe_helpers.py

@@ -2,10 +2,10 @@
 """Helper utilities for transcribe.sh - replaces inline Python snippets."""
 
 import argparse
+import array
 import math
 import os
 import sys
-import array
 import wave
 
 
@@ -18,6 +18,7 @@ def check_faster_whisper() -> bool:
     """Check if faster_whisper is importable. Exit 7 if not."""
     try:
         import faster_whisper  # noqa: F401
+
         return True
     except ImportError:
         return False
@@ -29,9 +30,12 @@ def check_diarization_deps() -> bool:
         import soundfile  # noqa: F401
         import speechbrain  # noqa: F401
         import torch  # noqa: F401
+
         return True
     except Exception as e:
-        print(f"[WARN] Diarization deps missing offline ({e}); speaker labels will be skipped.")
+        print(
+            f"[WARN] Diarization deps missing offline ({e}); speaker labels will be skipped."
+        )
         return False
 
 
@@ -39,6 +43,7 @@ def check_ctranslate2() -> bool:
     """Check if ctranslate2 is importable."""
     try:
         import ctranslate2  # noqa: F401
+
         return True
     except ImportError:
         return False
@@ -49,8 +54,13 @@ def print_deps_installed():
     print(f"[PY] Python {sys.version.split()[0]} dependencies installed.")
 
 
-def generate_sine_wav(outfile: str, frequency: float = 1000.0, duration: int = 3,
-                      sample_rate: int = 16000, amplitude: float = 0.3) -> bool:
+def generate_sine_wav(
+    outfile: str,
+    frequency: float = 1000.0,
+    duration: int = 3,
+    sample_rate: int = 16000,
+    amplitude: float = 0.3,
+) -> bool:
     """Generate a sine wave WAV file using only Python stdlib.
 
     Args:
@@ -65,10 +75,23 @@ def generate_sine_wav(outfile: str, frequency: float = 1000.0, duration: int = 3
     """
     try:
         n_samples = sample_rate * duration
-        data = array.array("h", [
-            int(max(-1.0, min(1.0, amplitude * math.sin(2 * math.pi * frequency * (i / sample_rate)))) * 32767)
+        data = array.array(
+            "h",
+            [
+                int(
+                    max(
+                        -1.0,
+                        min(
+                            1.0,
+                            amplitude
+                            * math.sin(2 * math.pi * frequency * (i / sample_rate)),
+                        ),
+                    )
+                    * 32767
+                )
                 for i in range(n_samples)
-        ])
+            ],
+        )
         with wave.open(outfile, "w") as wf:
             wf.setnchannels(1)
             wf.setsampwidth(2)
@@ -96,16 +119,23 @@ def prepare_model(model_name: str, model_dir: str) -> bool:
         # Enable HuggingFace Hub progress bars for model download
         try:
             from huggingface_hub import logging as hf_logging
+
             hf_logging.set_verbosity_info()
             import huggingface_hub
+
             huggingface_hub.constants.HF_HUB_DISABLE_PROGRESS_BARS = False
             os.environ["HF_HUB_DISABLE_PROGRESS_BARS"] = "0"
         except ImportError:
             pass
 
         print(f"[PY] Preparing model '{model_name}' into {model_dir}")
-        print("[INFO] Downloading model files (progress bar should appear below)...", flush=True)
-        WhisperModel(model_name, device="cpu", compute_type="int8", download_root=model_dir)
+        print(
+            "[INFO] Downloading model files (progress bar should appear below)...",
+            flush=True,
+        )
+        WhisperModel(
+            model_name, device="cpu", compute_type="int8", download_root=model_dir
+        )
         print("[PY] Model prepared.")
         return True
     except Exception as e:
@@ -121,6 +151,7 @@ def test_cuda() -> bool:
     """
     try:
         from faster_whisper import WhisperModel
+
         WhisperModel("tiny", device="cuda", compute_type="float16")
         print("[PY] CUDA test init succeeded.")
         return True
@@ -143,8 +174,11 @@ Commands:
   generate-wav FILE    Generate a 3s 1kHz sine wave WAV file
   prepare-model        Download model for offline use (requires --model and --model-dir)
   test-cuda            Test CUDA initialization
-""")
-    parser.add_argument("command", choices=[
+""",
+    )
+    parser.add_argument(
+        "command",
+        choices=[
             "python-version",
             "check-faster-whisper",
             "check-diarization",
@@ -153,7 +187,9 @@ Commands:
             "generate-wav",
             "prepare-model",
             "test-cuda",
-    ], help="Command to run")
+        ],
+        help="Command to run",
+    )
     parser.add_argument("--file", help="Output file path (for generate-wav)")
     parser.add_argument("--model", help="Model name (for prepare-model)")
     parser.add_argument("--model-dir", help="Model directory (for prepare-model)")
@@ -164,7 +200,10 @@ Commands:
         print(get_python_version())
     elif args.command == "check-faster-whisper":
         if not check_faster_whisper():
-            print("Python dependency 'faster_whisper' not found in offline mode. Run with --online to install.", file=sys.stderr)
+            print(
+                "Python dependency 'faster_whisper' not found in offline mode. Run with --online to install.",
+                file=sys.stderr,
+            )
             sys.exit(7)
     elif args.command == "check-diarization":
         check_diarization_deps()
@@ -181,7 +220,10 @@ Commands:
             sys.exit(1)
     elif args.command == "prepare-model":
         if not args.model or not args.model_dir:
-            print("--model and --model-dir are required for prepare-model", file=sys.stderr)
+            print(
+                "--model and --model-dir are required for prepare-model",
+                file=sys.stderr,
+            )
             sys.exit(2)
         if not prepare_model(args.model, args.model_dir):
             sys.exit(1)

linux_configuration/scripts/setup_thorium_startup.sh

@@ -28,7 +28,7 @@ check_thorium_browser() {
 	echo "1. Checking Thorium Browser Installation..."
 	echo "=========================================="
 
-  if ! command -v "$BROWSER_COMMAND" &> /dev/null; then
+	if ! command -v "$BROWSER_COMMAND" &>/dev/null; then
 		echo "Warning: Thorium browser not found in PATH"
 		echo "Checking alternative locations..."
 
@@ -89,7 +89,7 @@ create_launcher_script() {
 
 	local launcher_script="/usr/local/bin/thorium-fitatu-launcher.sh"
 
-  cat > "$launcher_script" << EOF
+	cat >"$launcher_script" <<EOF
 #!/bin/bash
 # Thorium browser launcher for Fitatu website
 # Created by setup_thorium_startup.sh on $(date)
@@ -180,7 +180,7 @@ create_user_systemd_service() {
 	sudo -u "${SUDO_USER}" mkdir -p "$user_systemd_dir"
 
 	# Create the service file
-  sudo -u "${SUDO_USER}" tee "$service_file" > /dev/null << EOF
+	sudo -u "${SUDO_USER}" tee "$service_file" >/dev/null <<EOF
 [Unit]
 Description=Launch Thorium Browser with Fitatu on Startup
 After=graphical-session.target
@@ -216,7 +216,7 @@ create_system_systemd_service() {
 
 	local service_file="/etc/systemd/system/thorium-fitatu-startup.service"
 
-  cat > "$service_file" << EOF
+	cat >"$service_file" <<EOF
 [Unit]
 Description=Launch Thorium Browser with Fitatu on Startup
 After=multi-user.target network-online.target
@@ -259,7 +259,7 @@ create_autostart_entry() {
 	sudo -u "${SUDO_USER}" mkdir -p "$autostart_dir"
 
 	# Create desktop entry
-  sudo -u "${SUDO_USER}" tee "$desktop_file" > /dev/null << EOF
+	sudo -u "${SUDO_USER}" tee "$desktop_file" >/dev/null <<EOF
 [Desktop Entry]
 Type=Application
 Name=Thorium Fitatu Startup
@@ -312,7 +312,7 @@ create_i3_autostart() {
 create_user_enable_script() {
 	local enable_script="$USER_HOME/.config/thorium-enable-service.sh"
 
-  sudo -u "${SUDO_USER}" tee "$enable_script" > /dev/null << 'EOF'
+	sudo -u "${SUDO_USER}" tee "$enable_script" >/dev/null <<'EOF'
 #!/bin/bash
 # Script to enable thorium-fitatu-startup user service
 # This runs once to enable the service, then removes itself

linux_configuration/scripts/system-maintenance/bin/shutdown-timer-monitor.sh

@@ -18,13 +18,13 @@ log_message() {
 # Function to check if timer needs to be re-enabled
 timer_needs_restoration() {
 	# Check if timer is enabled
-  if ! systemctl is-enabled "$TIMER_NAME" &> /dev/null; then
+	if ! systemctl is-enabled "$TIMER_NAME" &>/dev/null; then
 		log_message "Timer $TIMER_NAME is not enabled"
 		return 0
 	fi
 
 	# Check if timer is active
-  if ! systemctl is-active "$TIMER_NAME" &> /dev/null; then
+	if ! systemctl is-active "$TIMER_NAME" &>/dev/null; then
 		log_message "Timer $TIMER_NAME is not active"
 		return 0
 	fi
@@ -58,19 +58,19 @@ restore_timer() {
 	systemctl daemon-reload
 
 	# Re-enable timer if disabled
-  if ! systemctl is-enabled "$TIMER_NAME" &> /dev/null; then
+	if ! systemctl is-enabled "$TIMER_NAME" &>/dev/null; then
 		log_message "Re-enabling $TIMER_NAME"
-    systemctl enable "$TIMER_NAME" 2> /dev/null || true
+		systemctl enable "$TIMER_NAME" 2>/dev/null || true
 	fi
 
 	# Re-start timer if not active
-  if ! systemctl is-active "$TIMER_NAME" &> /dev/null; then
+	if ! systemctl is-active "$TIMER_NAME" &>/dev/null; then
 		log_message "Re-starting $TIMER_NAME"
-    systemctl start "$TIMER_NAME" 2> /dev/null || true
+		systemctl start "$TIMER_NAME" 2>/dev/null || true
 	fi
 
 	# Verify restoration
-  if systemctl is-active "$TIMER_NAME" &> /dev/null; then
+	if systemctl is-active "$TIMER_NAME" &>/dev/null; then
 		log_message "Timer restoration completed successfully"
 	else
 		log_message "WARNING: Timer restoration may have failed"
@@ -83,9 +83,9 @@ monitor_with_dbus() {
 
 	# Use busctl to monitor systemd unit changes
 	# Fall back to polling if this fails
-  if command -v busctl &> /dev/null; then
+	if command -v busctl &>/dev/null; then
 		# Monitor for unit state changes
-    busctl monitor --system org.freedesktop.systemd1 2> /dev/null |
+		busctl monitor --system org.freedesktop.systemd1 2>/dev/null |
 			while read -r line; do
 				# Check if the line mentions our timer
 				if echo "$line" | grep -q "$TIMER_NAME\|$SERVICE_NAME"; then

linux_configuration/scripts/test_removal.sh

@@ -13,7 +13,7 @@ test_file_removal() {
 	# Find a few test files
 	while IFS= read -r -d '' file; do
 		files+=("$file")
-  done < <(find "$DOWNLOADS_DIR" -name "*.jpg" -print0 2> /dev/null | head -z -n 2)
+	done < <(find "$DOWNLOADS_DIR" -name "*.jpg" -print0 2>/dev/null | head -z -n 2)
 
 	echo "Found ${#files[@]} test files:"
 	for file in "${files[@]}"; do
@@ -26,7 +26,7 @@ test_file_removal() {
 
 	for file in "${files[@]}"; do
 		echo "Removing: $file"
-    if rm "$file" 2> /dev/null; then
+		if rm "$file" 2>/dev/null; then
 			echo "  SUCCESS"
 			((removed++))
 		else

linux_configuration/scripts/utils/analyze_repo.sh

@@ -84,7 +84,7 @@ print_subheader() {
 
 # Check if we're in a git repository
 is_git_repo() {
-  git rev-parse --is-inside-work-tree &> /dev/null
+	git rev-parse --is-inside-work-tree &>/dev/null
 }
 
 # Helper function to find files while respecting exclusions
@@ -102,8 +102,8 @@ find_files() {
 			done
 			# Get tracked files + untracked (but not ignored) files
 			{
-        git ls-files -- "${git_patterns[@]}" 2> /dev/null
-        git ls-files --others --exclude-standard -- "${git_patterns[@]}" 2> /dev/null
+				git ls-files -- "${git_patterns[@]}" 2>/dev/null
+				git ls-files --others --exclude-standard -- "${git_patterns[@]}" 2>/dev/null
 			} | sort -u
 		else
 			# Not a git repo - fall back to manual exclusion
@@ -115,7 +115,7 @@ find_files() {
 					find_args+=(-o -name "${patterns[$i]}")
 				fi
 			done
-      find . -type f \( "${find_args[@]}" \) 2> /dev/null | grep -Ev "/($EXCLUDE_DIRS)/"
+			find . -type f \( "${find_args[@]}" \) 2>/dev/null | grep -Ev "/($EXCLUDE_DIRS)/"
 		fi
 	else
 		# No filtering - find all files
@@ -127,7 +127,7 @@ find_files() {
 				find_args+=(-o -name "${patterns[$i]}")
 			fi
 		done
-    find . -type f \( "${find_args[@]}" \) 2> /dev/null
+		find . -type f \( "${find_args[@]}" \) 2>/dev/null
 	fi
 }
 
@@ -144,21 +144,21 @@ install_missing_tools() {
 	local MISSING_AUR=()
 
 	# Check for required tools
-  command -v git &> /dev/null || MISSING_TOOLS+=("git")
-  command -v ctags &> /dev/null || MISSING_TOOLS+=("ctags")
-  command -v cscope &> /dev/null || MISSING_TOOLS+=("cscope")
-  command -v clang &> /dev/null || MISSING_TOOLS+=("clang")
-  command -v ugrep &> /dev/null || MISSING_TOOLS+=("ugrep")
+	command -v git &>/dev/null || MISSING_TOOLS+=("git")
+	command -v ctags &>/dev/null || MISSING_TOOLS+=("ctags")
+	command -v cscope &>/dev/null || MISSING_TOOLS+=("cscope")
+	command -v clang &>/dev/null || MISSING_TOOLS+=("clang")
+	command -v ugrep &>/dev/null || MISSING_TOOLS+=("ugrep")
 
 	# Check for AUR tools
-  command -v tokei &> /dev/null || MISSING_AUR+=("tokei")
-  command -v scc &> /dev/null || MISSING_AUR+=("scc")
+	command -v tokei &>/dev/null || MISSING_AUR+=("tokei")
+	command -v scc &>/dev/null || MISSING_AUR+=("scc")
 
 	# Check for Rust 'counts' tool (install via cargo if missing)
-  if ! command -v counts &> /dev/null; then
-    if command -v cargo &> /dev/null; then
+	if ! command -v counts &>/dev/null; then
+		if command -v cargo &>/dev/null; then
 			echo "Installing 'counts' via cargo (fast word counter)..."
-      cargo install counts 2> /dev/null || echo "Warning: counts install failed, will use Python fallback"
+			cargo install counts 2>/dev/null || echo "Warning: counts install failed, will use Python fallback"
 		fi
 	fi
 
@@ -171,7 +171,7 @@ install_missing_tools() {
 	echo -e "${YELLOW}Missing tools detected. Installing...${NC}"
 
 	# Detect package manager
-  if command -v pacman &> /dev/null; then
+	if command -v pacman &>/dev/null; then
 		# Arch Linux
 		if [ ${#MISSING_TOOLS[@]} -gt 0 ]; then
 			echo "Installing from official repos: ${MISSING_TOOLS[*]}"
@@ -180,9 +180,9 @@ install_missing_tools() {
 
 		if [ ${#MISSING_AUR[@]} -gt 0 ]; then
 			# Find or install AUR helper
-      if command -v yay &> /dev/null; then
+			if command -v yay &>/dev/null; then
 				AUR_HELPER="yay"
-      elif command -v paru &> /dev/null; then
+			elif command -v paru &>/dev/null; then
 				AUR_HELPER="paru"
 			else
 				echo "No AUR helper found. Installing yay..."
@@ -198,7 +198,7 @@ install_missing_tools() {
 			$AUR_HELPER -S --needed --noconfirm "${MISSING_AUR[@]}"
 		fi
 
-  elif command -v apt-get &> /dev/null; then
+	elif command -v apt-get &>/dev/null; then
 		# Debian/Ubuntu
 		echo "Installing tools via apt..."
 		sudo apt-get update
@@ -217,10 +217,10 @@ install_missing_tools() {
 
 		# Install tokei/scc via cargo or snap
 		for aur_tool in "${MISSING_AUR[@]}"; do
-      if command -v cargo &> /dev/null; then
+			if command -v cargo &>/dev/null; then
 				echo "Installing $aur_tool via cargo..."
 				cargo install "$aur_tool"
-      elif command -v snap &> /dev/null; then
+			elif command -v snap &>/dev/null; then
 				echo "Installing $aur_tool via snap..."
 				sudo snap install "$aur_tool"
 			else
@@ -228,19 +228,19 @@ install_missing_tools() {
 			fi
 		done
 
-  elif command -v dnf &> /dev/null; then
+	elif command -v dnf &>/dev/null; then
 		# Fedora
 		echo "Installing tools via dnf..."
-    sudo dnf install -y "${MISSING_TOOLS[@]}" "${MISSING_AUR[@]}" 2> /dev/null || {
+		sudo dnf install -y "${MISSING_TOOLS[@]}" "${MISSING_AUR[@]}" 2>/dev/null || {
 			# tokei/scc might need cargo
 			for aur_tool in "${MISSING_AUR[@]}"; do
-        if command -v cargo &> /dev/null; then
+				if command -v cargo &>/dev/null; then
 					cargo install "$aur_tool"
 				fi
 			done
 		}
 
-  elif command -v brew &> /dev/null; then
+	elif command -v brew &>/dev/null; then
 		# macOS with Homebrew
 		echo "Installing tools via brew..."
 		ALL_TOOLS=("${MISSING_TOOLS[@]}" "${MISSING_AUR[@]}")
@@ -279,7 +279,7 @@ else
 		echo "Repository already exists at $REPO_DIR"
 		echo "Updating..."
 		cd "$REPO_DIR"
-    git pull --depth 1 2> /dev/null || echo "Update skipped (shallow clone)"
+		git pull --depth 1 2>/dev/null || echo "Update skipped (shallow clone)"
 	else
 		echo "Cloning $REPO_URL (shallow clone for speed)..."
 		git clone --depth 1 "$REPO_URL" "$REPO_DIR"
@@ -293,12 +293,12 @@ echo "Repository size: $(du -sh . | cut -f1)"
 if [ "$RESPECT_GITIGNORE" = true ] && is_git_repo; then
 	# Count files respecting .gitignore
 	FILE_COUNT=$({
-    git ls-files 2> /dev/null
-    git ls-files --others --exclude-standard 2> /dev/null
+		git ls-files 2>/dev/null
+		git ls-files --others --exclude-standard 2>/dev/null
 	} | sort -u | wc -l)
 	echo "Files: $FILE_COUNT (respecting .gitignore)"
 elif [ "$RESPECT_GITIGNORE" = true ]; then
-  echo "Files: $(find . -type f 2> /dev/null | grep -Ev "/($EXCLUDE_DIRS)/" | wc -l) (excluding common dirs)"
+	echo "Files: $(find . -type f 2>/dev/null | grep -Ev "/($EXCLUDE_DIRS)/" | wc -l) (excluding common dirs)"
 else
 	echo "Files: $(find . -type f | wc -l)"
 fi
@@ -320,7 +320,7 @@ echo "Running scc..."
 scc . | tee "$RESULTS_DIR/scc_stats.txt"
 
 print_subheader "Top 10 Most Complex Files"
-scc --by-file --sort complexity . 2> /dev/null | head -20 | tee "$RESULTS_DIR/scc_complexity.txt"
+scc --by-file --sort complexity . 2>/dev/null | head -20 | tee "$RESULTS_DIR/scc_complexity.txt"
 
 #==============================================================================
 # STEP 4: Fast Keyword Analysis (Code vs Comments) - Multi-Language
@@ -331,8 +331,8 @@ print_header "STEP 4: Fast Keyword Analysis (Code vs Comments)"
 # Uses 'counts' (Rust) if available, falls back to Python Counter
 fast_count() {
 	local top_n="${1:-50}"
-  if command -v counts &> /dev/null; then
-    counts 2> /dev/null | head -$((top_n + 1)) | tail -$top_n
+	if command -v counts &>/dev/null; then
+		counts 2>/dev/null | head -$((top_n + 1)) | tail -$top_n
 	else
 		python3 -c "
 import sys
@@ -436,11 +436,11 @@ declare -A LANG_CODE_FILES
 if $HAS_C_FAMILY; then
 	echo "Processing C/C++ files..."
 	LANG_CODE_FILES[c_cpp]=$(mktemp /tmp/code_c_cpp.XXXXXX.tmp)
-  find_files "*.c" "*.cpp" "*.cc" "*.cxx" "*.h" "*.hpp" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[c_cpp]}"
+	find_files "*.c" "*.cpp" "*.cc" "*.cxx" "*.h" "*.hpp" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[c_cpp]}"
 
 	# Extract and strip C-style comments
-  perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[c_cpp]}" >> "$COMMENTS_TEMP"
-  perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[c_cpp]}" > "${LANG_CODE_FILES[c_cpp]}.clean"
+	perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[c_cpp]}" >>"$COMMENTS_TEMP"
+	perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[c_cpp]}" >"${LANG_CODE_FILES[c_cpp]}.clean"
 	mv "${LANG_CODE_FILES[c_cpp]}.clean" "${LANG_CODE_FILES[c_cpp]}"
 fi
 
@@ -448,17 +448,17 @@ fi
 if $HAS_JS_FAMILY; then
 	echo "Processing JavaScript files..."
 	LANG_CODE_FILES[javascript]=$(mktemp /tmp/code_js.XXXXXX.tmp)
-  find_files "*.js" "*.jsx" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[javascript]}"
+	find_files "*.js" "*.jsx" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[javascript]}"
 
 	echo "Processing TypeScript files..."
 	LANG_CODE_FILES[typescript]=$(mktemp /tmp/code_ts.XXXXXX.tmp)
-  find_files "*.ts" "*.tsx" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[typescript]}"
+	find_files "*.ts" "*.tsx" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[typescript]}"
 
 	# Extract and strip comments from both
 	for lang_file in "${LANG_CODE_FILES[javascript]}" "${LANG_CODE_FILES[typescript]}"; do
 		[ ! -s "$lang_file" ] && continue
-    perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "$lang_file" >> "$COMMENTS_TEMP"
-    perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "$lang_file" > "${lang_file}.clean"
+		perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "$lang_file" >>"$COMMENTS_TEMP"
+		perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "$lang_file" >"${lang_file}.clean"
 		mv "${lang_file}.clean" "$lang_file"
 	done
 fi
@@ -467,11 +467,11 @@ fi
 if $HAS_PYTHON; then
 	echo "Processing Python files..."
 	LANG_CODE_FILES[python]=$(mktemp /tmp/code_python.XXXXXX.tmp)
-  find_files "*.py" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[python]}"
+	find_files "*.py" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[python]}"
 
-  perl -ne 'if (/^\s*#(.*)/) { print "$1\n"; } elsif (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[python]}" >> "$COMMENTS_TEMP"
-  perl -0777 -ne 'while (/"""(.+?)"""/gs) { print "$1\n"; } while (/'"'"''"'"''"'"'(.+?)'"'"''"'"''"'"'/gs) { print "$1\n"; }' "${LANG_CODE_FILES[python]}" >> "$COMMENTS_TEMP"
-  perl -pe 's/#.*$//' "${LANG_CODE_FILES[python]}" | perl -0777 -pe 's/""".*?"""//gs; s/'"'"''"'"''"'"'.*?'"'"''"'"''"'"'//gs' > "${LANG_CODE_FILES[python]}.clean"
+	perl -ne 'if (/^\s*#(.*)/) { print "$1\n"; } elsif (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[python]}" >>"$COMMENTS_TEMP"
+	perl -0777 -ne 'while (/"""(.+?)"""/gs) { print "$1\n"; } while (/'"'"''"'"''"'"'(.+?)'"'"''"'"''"'"'/gs) { print "$1\n"; }' "${LANG_CODE_FILES[python]}" >>"$COMMENTS_TEMP"
+	perl -pe 's/#.*$//' "${LANG_CODE_FILES[python]}" | perl -0777 -pe 's/""".*?"""//gs; s/'"'"''"'"''"'"'.*?'"'"''"'"''"'"'//gs' >"${LANG_CODE_FILES[python]}.clean"
 	mv "${LANG_CODE_FILES[python]}.clean" "${LANG_CODE_FILES[python]}"
 fi
 
@@ -479,10 +479,10 @@ fi
 if $HAS_GO; then
 	echo "Processing Go files..."
 	LANG_CODE_FILES[go]=$(mktemp /tmp/code_go.XXXXXX.tmp)
-  find_files "*.go" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[go]}"
+	find_files "*.go" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[go]}"
 
-  perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[go]}" >> "$COMMENTS_TEMP"
-  perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[go]}" > "${LANG_CODE_FILES[go]}.clean"
+	perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[go]}" >>"$COMMENTS_TEMP"
+	perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[go]}" >"${LANG_CODE_FILES[go]}.clean"
 	mv "${LANG_CODE_FILES[go]}.clean" "${LANG_CODE_FILES[go]}"
 fi
 
@@ -490,10 +490,10 @@ fi
 if $HAS_RUST; then
 	echo "Processing Rust files..."
 	LANG_CODE_FILES[rust]=$(mktemp /tmp/code_rust.XXXXXX.tmp)
-  find_files "*.rs" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[rust]}"
+	find_files "*.rs" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[rust]}"
 
-  perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[rust]}" >> "$COMMENTS_TEMP"
-  perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[rust]}" > "${LANG_CODE_FILES[rust]}.clean"
+	perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[rust]}" >>"$COMMENTS_TEMP"
+	perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[rust]}" >"${LANG_CODE_FILES[rust]}.clean"
 	mv "${LANG_CODE_FILES[rust]}.clean" "${LANG_CODE_FILES[rust]}"
 fi
 
@@ -501,11 +501,11 @@ fi
 if $HAS_RUBY; then
 	echo "Processing Ruby files..."
 	LANG_CODE_FILES[ruby]=$(mktemp /tmp/code_ruby.XXXXXX.tmp)
-  find_files "*.rb" | head -5000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[ruby]}"
+	find_files "*.rb" | head -5000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[ruby]}"
 
-  perl -ne 'if (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[ruby]}" >> "$COMMENTS_TEMP"
-  perl -0777 -ne 'while (/=begin(.+?)=end/gs) { print "$1\n"; }' "${LANG_CODE_FILES[ruby]}" >> "$COMMENTS_TEMP"
-  perl -pe 's/#.*$//' "${LANG_CODE_FILES[ruby]}" | perl -0777 -pe 's/=begin.*?=end//gs' > "${LANG_CODE_FILES[ruby]}.clean"
+	perl -ne 'if (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[ruby]}" >>"$COMMENTS_TEMP"
+	perl -0777 -ne 'while (/=begin(.+?)=end/gs) { print "$1\n"; }' "${LANG_CODE_FILES[ruby]}" >>"$COMMENTS_TEMP"
+	perl -pe 's/#.*$//' "${LANG_CODE_FILES[ruby]}" | perl -0777 -pe 's/=begin.*?=end//gs' >"${LANG_CODE_FILES[ruby]}.clean"
 	mv "${LANG_CODE_FILES[ruby]}.clean" "${LANG_CODE_FILES[ruby]}"
 fi
 
@@ -513,10 +513,10 @@ fi
 if $HAS_SHELL; then
 	echo "Processing Shell files..."
 	LANG_CODE_FILES[shell]=$(mktemp /tmp/code_shell.XXXXXX.tmp)
-  find_files "*.sh" "*.bash" | head -5000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[shell]}"
+	find_files "*.sh" "*.bash" | head -5000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[shell]}"
 
-  perl -ne 'if (/^\s*#(.*)/ && !/^#!/) { print "$1\n"; } elsif (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[shell]}" >> "$COMMENTS_TEMP"
-  perl -pe 's/#.*$//' "${LANG_CODE_FILES[shell]}" > "${LANG_CODE_FILES[shell]}.clean"
+	perl -ne 'if (/^\s*#(.*)/ && !/^#!/) { print "$1\n"; } elsif (/#(.*)$/) { print "$1\n"; }' "${LANG_CODE_FILES[shell]}" >>"$COMMENTS_TEMP"
+	perl -pe 's/#.*$//' "${LANG_CODE_FILES[shell]}" >"${LANG_CODE_FILES[shell]}.clean"
 	mv "${LANG_CODE_FILES[shell]}.clean" "${LANG_CODE_FILES[shell]}"
 fi
 
@@ -524,14 +524,14 @@ fi
 if $HAS_JAVA; then
 	echo "Processing Java files..."
 	LANG_CODE_FILES[java]=$(mktemp /tmp/code_java.XXXXXX.tmp)
-  find_files "*.java" | head -15000 | xargs cat 2> /dev/null > "${LANG_CODE_FILES[java]}"
+	find_files "*.java" | head -15000 | xargs cat 2>/dev/null >"${LANG_CODE_FILES[java]}"
 
-  perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[java]}" >> "$COMMENTS_TEMP"
-  perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[java]}" > "${LANG_CODE_FILES[java]}.clean"
+	perl -0777 -ne 'while (/\/\*(.+?)\*\//gs) { print "$1\n"; } while (/\/\/([^\n]*)/g) { print "$1\n"; }' "${LANG_CODE_FILES[java]}" >>"$COMMENTS_TEMP"
+	perl -0777 -pe 's|/\*.*?\*/||gs; s|//[^\n]*||g;' "${LANG_CODE_FILES[java]}" >"${LANG_CODE_FILES[java]}.clean"
 	mv "${LANG_CODE_FILES[java]}.clean" "${LANG_CODE_FILES[java]}"
 fi
 
-COMMENT_LINES=$(wc -l < "$COMMENTS_TEMP")
+COMMENT_LINES=$(wc -l <"$COMMENTS_TEMP")
 echo ""
 echo "Processed languages: ${!LANG_CODE_FILES[*]}"
 echo "Total comment lines: $COMMENT_LINES"
@@ -562,7 +562,7 @@ for lang in "${!LANG_CODE_FILES[@]}"; do
 	if [ -f "$code_file" ] && [ -s "$code_file" ] && [ -n "$keywords" ]; then
 		echo ""
 		echo -e "${YELLOW}=== $lang Keywords ===${NC}"
-    ugrep -o "\b($keywords)\b" "$code_file" 2> /dev/null |
+		ugrep -o "\b($keywords)\b" "$code_file" 2>/dev/null |
 			fast_count 50 |
 			tee "$output_file"
 	fi
@@ -580,7 +580,7 @@ for lang in "${!LANG_CODE_FILES[@]}"; do
 	if [ -f "$code_file" ] && [ -s "$code_file" ]; then
 		echo ""
 		echo -e "${YELLOW}=== $lang Functions ===${NC}"
-    ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\s*\(' "$code_file" 2> /dev/null |
+		ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\s*\(' "$code_file" 2>/dev/null |
 			sed 's/\s*(//' |
 			grep -vE '^(if|for|while|switch|catch|elif)$' |
 			fast_count 30 |
@@ -596,7 +596,7 @@ print_subheader "Per-Language Imports/Includes"
 # C/C++ includes
 if [ -n "${LANG_CODE_FILES[c_cpp]}" ] && [ -s "${LANG_CODE_FILES[c_cpp]}" ]; then
 	echo -e "${YELLOW}=== C/C++ Includes ===${NC}"
-  ugrep -o '#include\s*[<"][^>"]+[>"]' "${LANG_CODE_FILES[c_cpp]}" 2> /dev/null |
+	ugrep -o '#include\s*[<"][^>"]+[>"]' "${LANG_CODE_FILES[c_cpp]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_c_cpp.txt"
 fi
@@ -605,7 +605,7 @@ fi
 if [ -n "${LANG_CODE_FILES[python]}" ] && [ -s "${LANG_CODE_FILES[python]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Python Imports ===${NC}"
-  ugrep -o '^\s*(from\s+\S+\s+import\s+\S+|import\s+\S+)' "${LANG_CODE_FILES[python]}" 2> /dev/null |
+	ugrep -o '^\s*(from\s+\S+\s+import\s+\S+|import\s+\S+)' "${LANG_CODE_FILES[python]}" 2>/dev/null |
 		sed 's/^\s*//' |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_python.txt"
@@ -615,7 +615,7 @@ fi
 if [ -n "${LANG_CODE_FILES[javascript]}" ] && [ -s "${LANG_CODE_FILES[javascript]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== JavaScript Imports ===${NC}"
-  ugrep -o "(import\s+.*\s+from\s+['\"][^'\"]+['\"]|require\s*\(['\"][^'\"]+['\"]\))" "${LANG_CODE_FILES[javascript]}" 2> /dev/null |
+	ugrep -o "(import\s+.*\s+from\s+['\"][^'\"]+['\"]|require\s*\(['\"][^'\"]+['\"]\))" "${LANG_CODE_FILES[javascript]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_javascript.txt"
 fi
@@ -624,7 +624,7 @@ fi
 if [ -n "${LANG_CODE_FILES[typescript]}" ] && [ -s "${LANG_CODE_FILES[typescript]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== TypeScript Imports ===${NC}"
-  ugrep -o "(import\s+.*\s+from\s+['\"][^'\"]+['\"]|require\s*\(['\"][^'\"]+['\"]\))" "${LANG_CODE_FILES[typescript]}" 2> /dev/null |
+	ugrep -o "(import\s+.*\s+from\s+['\"][^'\"]+['\"]|require\s*\(['\"][^'\"]+['\"]\))" "${LANG_CODE_FILES[typescript]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_typescript.txt"
 fi
@@ -633,7 +633,7 @@ fi
 if [ -n "${LANG_CODE_FILES[go]}" ] && [ -s "${LANG_CODE_FILES[go]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Go Imports ===${NC}"
-  ugrep -o '"[^"]+/[^"]+"' "${LANG_CODE_FILES[go]}" 2> /dev/null |
+	ugrep -o '"[^"]+/[^"]+"' "${LANG_CODE_FILES[go]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_go.txt"
 fi
@@ -642,7 +642,7 @@ fi
 if [ -n "${LANG_CODE_FILES[rust]}" ] && [ -s "${LANG_CODE_FILES[rust]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Rust Use Statements ===${NC}"
-  ugrep -o '^\s*use\s+[^;]+' "${LANG_CODE_FILES[rust]}" 2> /dev/null |
+	ugrep -o '^\s*use\s+[^;]+' "${LANG_CODE_FILES[rust]}" 2>/dev/null |
 		sed 's/^\s*//' |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_rust.txt"
@@ -652,7 +652,7 @@ fi
 if [ -n "${LANG_CODE_FILES[java]}" ] && [ -s "${LANG_CODE_FILES[java]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Java Imports ===${NC}"
-  ugrep -o '^\s*import\s+[^;]+' "${LANG_CODE_FILES[java]}" 2> /dev/null |
+	ugrep -o '^\s*import\s+[^;]+' "${LANG_CODE_FILES[java]}" 2>/dev/null |
 		sed 's/^\s*//' |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_java.txt"
@@ -662,7 +662,7 @@ fi
 if [ -n "${LANG_CODE_FILES[ruby]}" ] && [ -s "${LANG_CODE_FILES[ruby]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Ruby Requires ===${NC}"
-  ugrep -o "(require\s+['\"][^'\"]+['\"]|require_relative\s+['\"][^'\"]+['\"])" "${LANG_CODE_FILES[ruby]}" 2> /dev/null |
+	ugrep -o "(require\s+['\"][^'\"]+['\"]|require_relative\s+['\"][^'\"]+['\"])" "${LANG_CODE_FILES[ruby]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_ruby.txt"
 fi
@@ -671,7 +671,7 @@ fi
 if [ -n "${LANG_CODE_FILES[shell]}" ] && [ -s "${LANG_CODE_FILES[shell]}" ]; then
 	echo ""
 	echo -e "${YELLOW}=== Shell Sources ===${NC}"
-  ugrep -o '(source\s+[^\s]+|\.\s+[^\s]+)' "${LANG_CODE_FILES[shell]}" 2> /dev/null |
+	ugrep -o '(source\s+[^\s]+|\.\s+[^\s]+)' "${LANG_CODE_FILES[shell]}" 2>/dev/null |
 		fast_count 30 |
 		tee "$RESULTS_DIR/per_language/imports_shell.txt"
 fi
@@ -684,15 +684,15 @@ print_subheader "Combined Code Identifiers (all languages)"
 # Create combined CODE_TEMP
 CODE_TEMP=$(mktemp)
 for lang_file in "${LANG_CODE_FILES[@]}"; do
-  [ -f "$lang_file" ] && cat "$lang_file" >> "$CODE_TEMP"
+	[ -f "$lang_file" ] && cat "$lang_file" >>"$CODE_TEMP"
 done
 
-ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\b' "$CODE_TEMP" 2> /dev/null |
+ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\b' "$CODE_TEMP" 2>/dev/null |
 	fast_count $TOP_N |
 	tee "$RESULTS_DIR/code_identifiers.txt"
 
 print_subheader "Most Used Words in COMMENTS"
-ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\b' "$COMMENTS_TEMP" 2> /dev/null |
+ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\b' "$COMMENTS_TEMP" 2>/dev/null |
 	fast_count $TOP_N |
 	tee "$RESULTS_DIR/comment_words.txt"
 
@@ -700,33 +700,33 @@ ugrep -o '\b[a-zA-Z_][a-zA-Z0-9_]*\b' "$COMMENTS_TEMP" 2> /dev/null |
 {
 	echo "# Combined keywords from all languages"
 	echo "# Format: count keyword (from per_language/keywords_*.txt)"
-  cat "$RESULTS_DIR/per_language"/keywords_*.txt 2> /dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
-} > "$RESULTS_DIR/grep_keywords.txt"
+	cat "$RESULTS_DIR/per_language"/keywords_*.txt 2>/dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
+} >"$RESULTS_DIR/grep_keywords.txt"
 
 {
 	echo "# Combined functions from all languages"
 	echo "# See per_language/functions_*.txt for language-specific breakdown"
-  cat "$RESULTS_DIR/per_language"/functions_*.txt 2> /dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
-} > "$RESULTS_DIR/grep_function_calls.txt"
+	cat "$RESULTS_DIR/per_language"/functions_*.txt 2>/dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
+} >"$RESULTS_DIR/grep_function_calls.txt"
 
 {
 	echo "# Combined imports from all languages"
 	echo "# See per_language/imports_*.txt for language-specific breakdown"
-  cat "$RESULTS_DIR/per_language"/imports_*.txt 2> /dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
-} > "$RESULTS_DIR/grep_imports.txt"
+	cat "$RESULTS_DIR/per_language"/imports_*.txt 2>/dev/null | grep -v '^$' | sort -t' ' -k1 -nr | head -100
+} >"$RESULTS_DIR/grep_imports.txt"
 
 # List what per-language files were created
 echo ""
 echo "Per-language analysis files created:"
-ls -la "$RESULTS_DIR/per_language/" 2> /dev/null | grep -v '^total' | awk '{print "  " $NF}'
+find "$RESULTS_DIR/per_language/" -maxdepth 1 -type f -printf '  %f\n' 2>/dev/null || true
 
 print_subheader "Generating tags (this may take a while)..."
 
 # Generate tags for different kinds
-ctags -R --languages=C,C++ --c-kinds=+fp --fields=+lK -f "$RESULTS_DIR/tags" . 2> /dev/null || true
+ctags -R --languages=C,C++ --c-kinds=+fp --fields=+lK -f "$RESULTS_DIR/tags" . 2>/dev/null || true
 
 if [ -f "$RESULTS_DIR/tags" ]; then
-  TOTAL_TAGS=$(grep -ac '^[^!]' "$RESULTS_DIR/tags" 2> /dev/null || echo "0")
+	TOTAL_TAGS=$(grep -ac '^[^!]' "$RESULTS_DIR/tags" 2>/dev/null || echo "0")
 	echo "Total symbols found: $TOTAL_TAGS"
 
 	print_subheader "Most Common Symbol Names"
@@ -737,7 +737,7 @@ if [ -f "$RESULTS_DIR/tags" ]; then
 
 	print_subheader "Symbol Types Distribution"
 	# Fast: extract single-letter kind code after ;" and count
-  grep -aoP ';"\t\K[a-z]' "$RESULTS_DIR/tags" 2> /dev/null | fast_count 20 | while read count kind; do
+	grep -aoP ';"\t\K[a-z]' "$RESULTS_DIR/tags" 2>/dev/null | fast_count 20 | while read count kind; do
 		case $kind in
 		f) echo "$count functions" ;;
 		v) echo "$count variables" ;;
@@ -766,30 +766,30 @@ print_subheader "Building cscope database..."
 # Find all C source files (respecting .gitignore if available)
 if [ "$RESPECT_GITIGNORE" = true ] && is_git_repo; then
 	{
-    git ls-files -- '*.c' '*.h' 2> /dev/null
-    git ls-files --others --exclude-standard -- '*.c' '*.h' 2> /dev/null
-  } | sort -u > "$RESULTS_DIR/cscope.files"
+		git ls-files -- '*.c' '*.h' 2>/dev/null
+		git ls-files --others --exclude-standard -- '*.c' '*.h' 2>/dev/null
+	} | sort -u >"$RESULTS_DIR/cscope.files"
 elif [ "$RESPECT_GITIGNORE" = true ]; then
-  find . \( -name "*.c" -o -name "*.h" \) -type f 2> /dev/null | grep -Ev "/($EXCLUDE_DIRS)/" > "$RESULTS_DIR/cscope.files"
+	find . \( -name "*.c" -o -name "*.h" \) -type f 2>/dev/null | grep -Ev "/($EXCLUDE_DIRS)/" >"$RESULTS_DIR/cscope.files"
 else
-  find . \( -name "*.c" -o -name "*.h" \) -type f > "$RESULTS_DIR/cscope.files" 2> /dev/null
+	find . \( -name "*.c" -o -name "*.h" \) -type f >"$RESULTS_DIR/cscope.files" 2>/dev/null
 fi
-FILE_COUNT=$(wc -l < "$RESULTS_DIR/cscope.files")
+FILE_COUNT=$(wc -l <"$RESULTS_DIR/cscope.files")
 echo "Found $FILE_COUNT source files"
 
 # Build cscope database (can take a while for large repos)
 echo "Building database (this may take several minutes for Linux kernel)..."
-cscope -b -q -i "$RESULTS_DIR/cscope.files" -f "$RESULTS_DIR/cscope.out" 2> /dev/null || true
+cscope -b -q -i "$RESULTS_DIR/cscope.files" -f "$RESULTS_DIR/cscope.out" 2>/dev/null || true
 
 if [ -f "$RESULTS_DIR/cscope.out" ]; then
 	echo "Database built successfully"
 	echo "Database size: $(du -sh "$RESULTS_DIR/cscope.out" | cut -f1)"
 
 	print_subheader "Example: Finding callers of 'printk' function"
-  cscope -d -f "$RESULTS_DIR/cscope.out" -L -3 printk 2> /dev/null | head -20 || echo "No results"
+	cscope -d -f "$RESULTS_DIR/cscope.out" -L -3 printk 2>/dev/null | head -20 || echo "No results"
 
 	print_subheader "Example: Finding definition of 'struct file'"
-  cscope -d -f "$RESULTS_DIR/cscope.out" -L -1 "struct file" 2> /dev/null | head -10 || echo "No results"
+	cscope -d -f "$RESULTS_DIR/cscope.out" -L -1 "struct file" 2>/dev/null | head -10 || echo "No results"
 fi
 
 #==============================================================================
@@ -801,20 +801,20 @@ print_subheader "Analyzing a sample file with clang AST dump"
 
 # Find a simple C file to analyze (respecting .gitignore)
 if [ "$RESPECT_GITIGNORE" = true ] && is_git_repo; then
-  SAMPLE_FILE=$(git ls-files -- '*.c' 2> /dev/null | head -20 | while read -r f; do
-    [ -f "$f" ] && [ "$(stat -c%s "$f" 2> /dev/null || echo 999999)" -lt 51200 ] && echo "$f"
+	SAMPLE_FILE=$(git ls-files -- '*.c' 2>/dev/null | head -20 | while read -r f; do
+		[ -f "$f" ] && [ "$(stat -c%s "$f" 2>/dev/null || echo 999999)" -lt 51200 ] && echo "$f"
 	done | head -1)
 elif [ "$RESPECT_GITIGNORE" = true ]; then
-  SAMPLE_FILE=$(find . -name "*.c" -size -50k -type f 2> /dev/null | grep -Ev "/($EXCLUDE_DIRS)/" | head -1)
+	SAMPLE_FILE=$(find . -name "*.c" -size -50k -type f 2>/dev/null | grep -Ev "/($EXCLUDE_DIRS)/" | head -1)
 else
-  SAMPLE_FILE=$(find . -name "*.c" -size -50k 2> /dev/null | head -1)
+	SAMPLE_FILE=$(find . -name "*.c" -size -50k 2>/dev/null | head -1)
 fi
 
 if [ -n "$SAMPLE_FILE" ]; then
 	echo "Sample file: $SAMPLE_FILE"
 	echo ""
 	echo "Function declarations in this file:"
-  clang -Xclang -ast-dump -fsyntax-only "$SAMPLE_FILE" 2> /dev/null |
+	clang -Xclang -ast-dump -fsyntax-only "$SAMPLE_FILE" 2>/dev/null |
 		grep -E "FunctionDecl.*<.*>" |
 		head -20 |
 		sed 's/.*FunctionDecl.*<[^>]*> /  /' |

linux_configuration/scripts/utils/android_guardian/post-fs-data.sh

@@ -9,10 +9,10 @@ WATCHDOG_SCRIPT="$GUARDIAN_DIR/watchdog.sh"
 mkdir -p "$GUARDIAN_DIR"
 
 # Log that we're starting
-echo "[$(date '+%Y-%m-%d %H:%M:%S')] post-fs-data: Guardian module loading" >> "$GUARDIAN_DIR/guardian.log"
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] post-fs-data: Guardian module loading" >>"$GUARDIAN_DIR/guardian.log"
 
 # Create persistent watchdog script that runs independently of module state
-cat > "$WATCHDOG_SCRIPT" << 'WATCHDOG'
+cat >"$WATCHDOG_SCRIPT" <<'WATCHDOG'
 #!/system/bin/sh
 # Secondary watchdog - runs independently of module state
 # Even if module is "disabled" in Magisk UI, this keeps running and undoes it
@@ -59,5 +59,5 @@ WATCHDOG
 chmod 755 "$WATCHDOG_SCRIPT"
 
 # Start watchdog as a separate background process
-nohup sh "$WATCHDOG_SCRIPT" > /dev/null 2>&1 &
-echo "[$(date '+%Y-%m-%d %H:%M:%S')] post-fs-data: Watchdog started" >> "$GUARDIAN_DIR/guardian.log"
+nohup sh "$WATCHDOG_SCRIPT" >/dev/null 2>&1 &
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] post-fs-data: Watchdog started" >>"$GUARDIAN_DIR/guardian.log"

linux_configuration/scripts/utils/convert_video.sh

@@ -23,7 +23,7 @@ TARGET_PATH=""
 ALL_VIDEO_EXTENSIONS=("mp4" "webm" "mkv" "avi" "mov" "wmv" "flv" "m4v" "mpg" "mpeg" "3gp" "ogv" "ts" "mts" "m2ts" "vob" "asf" "rm" "rmvb" "divx" "f4v")
 
 usage() {
-  cat << EOF
+	cat <<EOF
 Usage:
   $(basename "$0") [OPTIONS] PATH
 
@@ -47,7 +47,7 @@ EOF
 }
 
 ensure_ffmpeg() {
-  if ! command -v ffmpeg > /dev/null 2>&1; then
+	if ! command -v ffmpeg >/dev/null 2>&1; then
 		echo "Error: 'ffmpeg' is not installed or not in PATH." >&2
 		exit 1
 	fi
@@ -146,7 +146,7 @@ process_directory() {
 		if ! convert_video "$file"; then
 			((failed++)) || true
 		fi
-  done < <(find "$dir" "${find_args[@]}" 2> /dev/null)
+	done < <(find "$dir" "${find_args[@]}" 2>/dev/null)
 
 	log "Processed $count video file(s), $failed failed"
 

linux_configuration/scripts/utils/generate_study_materials.sh

@@ -71,9 +71,9 @@ lookup_offline() {
 	local result
 	if [ -n "$import_line" ]; then
 		# Use import-aware lookup - get the line with the file path
-    result=$("$LOOKUP_SCRIPT" --import "$import_line" "$lang" 2> /dev/null | grep "^/" | head -1)
+		result=$("$LOOKUP_SCRIPT" --import "$import_line" "$lang" 2>/dev/null | grep "^/" | head -1)
 	else
-    result=$("$LOOKUP_SCRIPT" "$term" "$lang" 2> /dev/null | grep "^File:" | head -1 | sed 's/^File: //')
+		result=$("$LOOKUP_SCRIPT" "$term" "$lang" 2>/dev/null | grep "^File:" | head -1 | sed 's/^File: //')
 	fi
 
 	if [ -n "$result" ]; then
@@ -96,7 +96,7 @@ lookup_offline() {
 # Python documentation
 python_doc_url() {
 	local term="$1"
-  local type="$2" # keyword, builtin, module
+	local _type="$2" # keyword, builtin, module (reserved for future use)
 
 	case "$term" in
 	# Keywords
@@ -333,14 +333,14 @@ shell_doc_url() {
 
 	case "$term" in
 	# Built-in commands
-    if | then | else | elif | fi | for | while | until | do | done | case | esac | in | function | select | time | coproc)
+	if | then | else | elif | fi | for | while | until | do | done | case | 'esac' | in | function | select | time | coproc)
 		echo "https://www.gnu.org/software/bash/manual/bash.html#Conditional-Constructs"
 		;;
 	echo | printf | read | declare | local | export | unset | set | shopt | alias | source | eval | exec | exit | return | break | continue | shift | trap | wait | kill | jobs | bg | fg | disown | suspend | logout | cd | pwd | pushd | popd | dirs | type | which | command | builtin | enable | help | hash | bind | complete | compgen | compopt)
 		echo "https://www.gnu.org/software/bash/manual/bash.html#Shell-Builtin-Commands"
 		;;
 	# Common external commands
-    grep | sed | awk | find | xargs | sort | uniq | cut | tr | head | tail | wc | cat | tee | diff | patch | tar | gzip | zip | curl | wget | ssh | scp | rsync | git | make | chmod | chown | chgrp | ln | cp | mv | rm | mkdir | rmdir | touch | ls | stat | file | df | du | free | top | ps | kill | pkill | pgrep | nohup | screen | tmux)
+	grep | sed | awk | find | xargs | sort | uniq | cut | tr | head | tail | wc | cat | tee | diff | patch | tar | gzip | zip | curl | wget | ssh | scp | rsync | git | make | chmod | chown | chgrp | ln | cp | mv | rm | mkdir | rmdir | touch | ls | stat | file | df | du | free | top | ps | pkill | pgrep | nohup | screen | tmux)
 		echo "https://man7.org/linux/man-pages/man1/$term.1.html"
 		;;
 	*)
@@ -427,7 +427,7 @@ get_doc_url() {
 detect_language() {
 	if [ -f "$RESULTS_DIR/tokei_stats.txt" ]; then
 		# Parse tokei output to find most used language
-    grep -E "^\s+(Python|JavaScript|TypeScript|C\+\+|C |Rust|Go|Ruby|Java|Shell)" "$RESULTS_DIR/tokei_stats.txt" 2> /dev/null |
+		grep -E "^\s+(Python|JavaScript|TypeScript|C\+\+|C |Rust|Go|Ruby|Java|Shell)" "$RESULTS_DIR/tokei_stats.txt" 2>/dev/null |
 			head -1 |
 			awk '{print tolower($1)}' |
 			sed 's/c++/cpp/'
@@ -468,7 +468,7 @@ echo ""
 #==============================================================================
 echo -e "${YELLOW}Generating documentation links...${NC}"
 
-cat > "$DOCS_FILE" << 'EOF'
+cat >"$DOCS_FILE" <<'EOF'
 # Documentation Links for Code Review
 
 This document contains links to official documentation for the most commonly used
@@ -498,8 +498,8 @@ if [ -d "$PER_LANG_DIR" ]; then
 	}
 
 	# Process keywords by language
-  echo "## Language Keywords" >> "$DOCS_FILE"
-  echo "" >> "$DOCS_FILE"
+	echo "## Language Keywords" >>"$DOCS_FILE"
+	echo "" >>"$DOCS_FILE"
 
 	for keyword_file in "$PER_LANG_DIR"/keywords_*.txt; do
 		[ ! -f "$keyword_file" ] && continue
@@ -523,23 +523,23 @@ if [ -d "$PER_LANG_DIR" ]; then
 		*) display_lang="$lang" ;;
 		esac
 
-    echo "### $display_lang Keywords" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Keyword | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|---------|-------|---------------|" >> "$DOCS_FILE"
+		echo "### $display_lang Keywords" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Keyword | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|---------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -$TOP_N "$keyword_file" | while read -r count term; do
 			[ -z "$term" ] && continue
 			[[ $term =~ ^[#] ]] && continue # Skip comment lines
 			url=$(get_doc_url "$term" "$doc_lang")
-      echo "| \`$term\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$term\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	done
 
 	# Process functions by language
-  echo "## Function/Method Calls" >> "$DOCS_FILE"
-  echo "" >> "$DOCS_FILE"
+	echo "## Function/Method Calls" >>"$DOCS_FILE"
+	echo "" >>"$DOCS_FILE"
 
 	for func_file in "$PER_LANG_DIR"/functions_*.txt; do
 		[ ! -f "$func_file" ] && continue
@@ -561,23 +561,23 @@ if [ -d "$PER_LANG_DIR" ]; then
 		*) display_lang="$lang" ;;
 		esac
 
-    echo "### $display_lang Functions" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Function | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|----------|-------|---------------|" >> "$DOCS_FILE"
+		echo "### $display_lang Functions" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Function | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|----------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -$TOP_N "$func_file" | while read -r count term; do
 			[ -z "$term" ] && continue
 			[[ $term =~ ^(if|for|while|switch|catch|elif)$ ]] && continue
 			url=$(get_doc_url "$term" "$doc_lang")
-      echo "| \`$term()\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$term()\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	done
 
 	# Process imports by language
-  echo "## Imports/Includes" >> "$DOCS_FILE"
-  echo "" >> "$DOCS_FILE"
+	echo "## Imports/Includes" >>"$DOCS_FILE"
+	echo "" >>"$DOCS_FILE"
 
 	for import_file in "$PER_LANG_DIR"/imports_*.txt; do
 		[ ! -f "$import_file" ] && continue
@@ -599,10 +599,10 @@ if [ -d "$PER_LANG_DIR" ]; then
 		*) display_lang="$lang" ;;
 		esac
 
-    echo "### $display_lang" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Import | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|--------|-------|---------------|" >> "$DOCS_FILE"
+		echo "### $display_lang" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Import | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|--------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -20 "$import_file" | while read -r count import; do
 			[ -z "$import" ] && continue
@@ -614,9 +614,9 @@ if [ -d "$PER_LANG_DIR" ]; then
 				url=$(get_doc_url "$module" "$doc_lang")
 			fi
 			import_escaped=$(echo "$import" | sed 's/|/\\|/g')
-      echo "| \`$import_escaped\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$import_escaped\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	done
 
 else
@@ -624,54 +624,54 @@ else
 	echo -e "${YELLOW}No per-language files found, using combined analysis${NC}"
 
 	if [ -f "$RESULTS_DIR/grep_keywords.txt" ]; then
-    echo "## Language Keywords" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Keyword | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|---------|-------|---------------|" >> "$DOCS_FILE"
+		echo "## Language Keywords" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Keyword | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|---------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -$TOP_N "$RESULTS_DIR/grep_keywords.txt" | while read -r count term; do
 			[ -z "$term" ] && continue
 			url=$(get_doc_url "$term" "$PRIMARY_LANG")
-      echo "| \`$term\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$term\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	fi
 
 	if [ -f "$RESULTS_DIR/grep_function_calls.txt" ]; then
-    echo "## Function/Method Calls" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Function | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|----------|-------|---------------|" >> "$DOCS_FILE"
+		echo "## Function/Method Calls" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Function | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|----------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -$TOP_N "$RESULTS_DIR/grep_function_calls.txt" | while read -r count term; do
 			[ -z "$term" ] && continue
 			[[ $term =~ ^(if|for|while|switch|catch)$ ]] && continue
 			url=$(get_doc_url "$term" "$PRIMARY_LANG")
-      echo "| \`$term()\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$term()\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	fi
 
 	if [ -f "$RESULTS_DIR/grep_imports.txt" ]; then
-    echo "## Imports/Includes" >> "$DOCS_FILE"
-    echo "" >> "$DOCS_FILE"
-    echo "| Import | Count | Documentation |" >> "$DOCS_FILE"
-    echo "|--------|-------|---------------|" >> "$DOCS_FILE"
+		echo "## Imports/Includes" >>"$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
+		echo "| Import | Count | Documentation |" >>"$DOCS_FILE"
+		echo "|--------|-------|---------------|" >>"$DOCS_FILE"
 
 		head -20 "$RESULTS_DIR/grep_imports.txt" | while read -r count import; do
 			[ -z "$import" ] && continue
 			module=$(echo "$import" | sed -E 's/.*[<"]([^">]+)[">].*/\1/' | sed 's|.*/||' | sed 's/\..*$//')
 			url=$(get_doc_url "$module" "$PRIMARY_LANG")
 			import_escaped=$(echo "$import" | sed 's/|/\\|/g')
-      echo "| \`$import_escaped\` | $count | [docs]($url) |" >> "$DOCS_FILE"
+			echo "| \`$import_escaped\` | $count | [docs]($url) |" >>"$DOCS_FILE"
 		done
-    echo "" >> "$DOCS_FILE"
+		echo "" >>"$DOCS_FILE"
 	fi
 fi
 
-echo "" >> "$DOCS_FILE"
-echo "---" >> "$DOCS_FILE"
-echo "*Generated by analyze_repo.sh + generate_study_materials.sh*" >> "$DOCS_FILE"
+echo "" >>"$DOCS_FILE"
+echo "---" >>"$DOCS_FILE"
+echo "*Generated by analyze_repo.sh + generate_study_materials.sh*" >>"$DOCS_FILE"
 
 echo -e "${GREEN}Created: $DOCS_FILE${NC}"
 #==============================================================================
@@ -679,7 +679,7 @@ echo -e "${GREEN}Created: $DOCS_FILE${NC}"
 #==============================================================================
 echo -e "${YELLOW}Generating Anki cards...${NC}"
 
-cat > "$ANKI_FILE" << 'EOF'
+cat >"$ANKI_FILE" <<'EOF'
 # Anki Import File
 # Format: Front<TAB>Back<TAB>Tags
 # Import with: File -> Import, select "Fields separated by: Tab"
@@ -693,7 +693,7 @@ EOF
 
 # Generate cards for top keywords
 if [ -f "$RESULTS_DIR/grep_keywords.txt" ]; then
-  echo "# Keywords" >> "$ANKI_FILE"
+	echo "# Keywords" >>"$ANKI_FILE"
 	head -$TOP_N "$RESULTS_DIR/grep_keywords.txt" | while read -r count term; do
 		[ -z "$term" ] && continue
 		url=$(get_doc_url "$term" "$PRIMARY_LANG")
@@ -701,28 +701,28 @@ if [ -f "$RESULTS_DIR/grep_keywords.txt" ]; then
 		# Create different card types based on term type
 		case "$term" in
 		if | else | elif | elseif | switch | case | match)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tConditional control flow - executes code based on boolean conditions. See: $url\t${PRIMARY_LANG}::keywords::control-flow" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tConditional control flow - executes code based on boolean conditions. See: $url\t${PRIMARY_LANG}::keywords::control-flow" >>"$ANKI_FILE"
 			;;
 		for | while | loop | do | until)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tLoop construct - repeats code execution. See: $url\t${PRIMARY_LANG}::keywords::loops" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tLoop construct - repeats code execution. See: $url\t${PRIMARY_LANG}::keywords::loops" >>"$ANKI_FILE"
 			;;
 		try | except | catch | finally | raise | throw)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tException handling - manages errors and exceptional conditions. See: $url\t${PRIMARY_LANG}::keywords::exceptions" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tException handling - manages errors and exceptional conditions. See: $url\t${PRIMARY_LANG}::keywords::exceptions" >>"$ANKI_FILE"
 			;;
 		class | struct | interface | trait | impl)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tType definition - defines custom data structures. See: $url\t${PRIMARY_LANG}::keywords::types" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tType definition - defines custom data structures. See: $url\t${PRIMARY_LANG}::keywords::types" >>"$ANKI_FILE"
 			;;
 		def | fn | func | function)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tFunction definition - declares a reusable block of code. See: $url\t${PRIMARY_LANG}::keywords::functions" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tFunction definition - declares a reusable block of code. See: $url\t${PRIMARY_LANG}::keywords::functions" >>"$ANKI_FILE"
 			;;
 		import | from | use | require | include)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tModule import - brings external code into current scope. See: $url\t${PRIMARY_LANG}::keywords::modules" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tModule import - brings external code into current scope. See: $url\t${PRIMARY_LANG}::keywords::modules" >>"$ANKI_FILE"
 			;;
 		async | await | yield)
-        echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tAsynchronous programming - handles concurrent operations. See: $url\t${PRIMARY_LANG}::keywords::async" >> "$ANKI_FILE"
+			echo -e "What is the purpose of \`$term\` in $PRIMARY_LANG?\tAsynchronous programming - handles concurrent operations. See: $url\t${PRIMARY_LANG}::keywords::async" >>"$ANKI_FILE"
 			;;
 		*)
-        echo -e "What does the keyword \`$term\` do in $PRIMARY_LANG?\t[FILL: Look up at $url]\t${PRIMARY_LANG}::keywords" >> "$ANKI_FILE"
+			echo -e "What does the keyword \`$term\` do in $PRIMARY_LANG?\t[FILL: Look up at $url]\t${PRIMARY_LANG}::keywords" >>"$ANKI_FILE"
 			;;
 		esac
 	done
@@ -730,14 +730,14 @@ fi
 
 # Generate cards for top functions
 if [ -f "$RESULTS_DIR/grep_function_calls.txt" ]; then
-  echo "" >> "$ANKI_FILE"
-  echo "# Functions" >> "$ANKI_FILE"
+	echo "" >>"$ANKI_FILE"
+	echo "# Functions" >>"$ANKI_FILE"
 	head -$TOP_N "$RESULTS_DIR/grep_function_calls.txt" | while read -r count term; do
 		[ -z "$term" ] && continue
 		[[ $term =~ ^(if|for|while|switch|catch)$ ]] && continue
 		url=$(get_doc_url "$term" "$PRIMARY_LANG")
 
-    echo -e "What does \`$term()\` do in $PRIMARY_LANG? (Used $count times)\t[FILL: Look up at $url]\t${PRIMARY_LANG}::functions" >> "$ANKI_FILE"
+		echo -e "What does \`$term()\` do in $PRIMARY_LANG? (Used $count times)\t[FILL: Look up at $url]\t${PRIMARY_LANG}::functions" >>"$ANKI_FILE"
 	done
 fi
 
@@ -763,9 +763,9 @@ get_llm_doc_link() {
 	# Try offline lookup
 	local offline_result
 	if [ "$is_import" = "true" ]; then
-    offline_result=$("$LOOKUP_SCRIPT" --import "$term" "$lang" 2> /dev/null | grep "^/" | head -1)
+		offline_result=$("$LOOKUP_SCRIPT" --import "$term" "$lang" 2>/dev/null | grep "^/" | head -1)
 	else
-    offline_result=$("$LOOKUP_SCRIPT" "$term" "$lang" 2> /dev/null | grep "^File:" | head -1 | sed 's/^File: //')
+		offline_result=$("$LOOKUP_SCRIPT" "$term" "$lang" 2>/dev/null | grep "^File:" | head -1 | sed 's/^File: //')
 	fi
 
 	if [ -n "$offline_result" ]; then
@@ -781,10 +781,13 @@ generate_keywords_with_docs() {
 	[ ! -f "$keywords_file" ] && echo "No keywords found" && return
 
 	head -$TOP_N "$keywords_file" | grep -v '^#' | while read -r line; do
-    local count=$(echo "$line" | awk '{print $1}')
-    local keyword=$(echo "$line" | awk '{print $2}')
+		local count
+		count=$(echo "$line" | awk '{print $1}')
+		local keyword
+		keyword=$(echo "$line" | awk '{print $2}')
 		[ -z "$keyword" ] && continue
-    local doc_link=$(get_llm_doc_link "$keyword" "$PRIMARY_LANG" "false")
+		local doc_link
+		doc_link=$(get_llm_doc_link "$keyword" "$PRIMARY_LANG" "false")
 		echo "$count $keyword → $doc_link"
 	done
 }
@@ -795,15 +798,18 @@ generate_functions_with_docs() {
 	[ ! -f "$functions_file" ] && echo "No functions found" && return
 
 	head -$TOP_N "$functions_file" | grep -v '^#' | while read -r line; do
-    local count=$(echo "$line" | awk '{print $1}')
-    local func=$(echo "$line" | awk '{print $2}')
+		local count
+		count=$(echo "$line" | awk '{print $1}')
+		local func
+		func=$(echo "$line" | awk '{print $2}')
 
 		# Skip single-letter functions (minified code) or empty
 		if [ -z "$func" ] || [ ${#func} -le 1 ]; then
 			continue
 		fi
 
-    local doc_link=$(get_llm_doc_link "$func" "$PRIMARY_LANG" "false")
+		local doc_link
+		doc_link=$(get_llm_doc_link "$func" "$PRIMARY_LANG" "false")
 		echo "$count $func() → $doc_link"
 	done
 }
@@ -814,21 +820,24 @@ generate_imports_with_docs() {
 	[ ! -f "$imports_file" ] && echo "No imports found" && return
 
 	head -20 "$imports_file" | grep -v '^#' | while read -r line; do
-    local count=$(echo "$line" | awk '{print $1}')
-    local import_stmt=$(echo "$line" | cut -d' ' -f2-)
+		local count
+		count=$(echo "$line" | awk '{print $1}')
+		local import_stmt
+		import_stmt=$(echo "$line" | cut -d' ' -f2-)
 		[ -z "$import_stmt" ] && continue
 
 		# Check if internal import
-    if [[ $import_stmt =~ @/ ]] || [[ $import_stmt =~ \'\./ ]] || [[ $import_stmt =~ from\ app\. ]] || [[ $import_stmt =~ from\ src\. ]]; then
+		if [[ $import_stmt =~ @/ ]] || [[ $import_stmt =~ \./ ]] || [[ $import_stmt =~ from\ app\. ]] || [[ $import_stmt =~ from\ src\. ]]; then
 			echo "$count $import_stmt → [INTERNAL - SKIP]"
 		else
-      local doc_link=$(get_llm_doc_link "$import_stmt" "$PRIMARY_LANG" "true")
+			local doc_link
+			doc_link=$(get_llm_doc_link "$import_stmt" "$PRIMARY_LANG" "true")
 			echo "$count $import_stmt → $doc_link"
 		fi
 	done
 }
 
-cat > "$LLM_PROMPT_FILE" << 'PROMPT_HEADER'
+cat >"$LLM_PROMPT_FILE" <<'PROMPT_HEADER'
 # LLM Prompt: Generate Anki Flashcards
 
 You are creating Anki flashcards from code analysis.
@@ -846,7 +855,7 @@ You are creating Anki flashcards from code analysis.
 
 PROMPT_HEADER
 
-cat >> "$LLM_PROMPT_FILE" << EOF
+cat >>"$LLM_PROMPT_FILE" <<EOF
 ## Context
 - Primary Language: **$PRIMARY_LANG**
 
@@ -870,7 +879,7 @@ $(generate_imports_with_docs)
 \`\`\`
 EOF
 
-cat >> "$LLM_PROMPT_FILE" << 'PROMPT_FOOTER'
+cat >>"$LLM_PROMPT_FILE" <<'PROMPT_FOOTER'
 
 ## Guidelines
 

linux_configuration/scripts/utils/install_offline_docs.sh

@@ -27,27 +27,27 @@ echo ""
 
 # Detect package manager and install Zeal
 install_zeal() {
-  if command -v zeal &> /dev/null; then
+	if command -v zeal &>/dev/null; then
 		success "Zeal is already installed"
 		return 0
 	fi
 
 	echo "Installing Zeal offline documentation browser..."
 
-  if command -v pacman &> /dev/null; then
+	if command -v pacman &>/dev/null; then
 		# Arch Linux
 		sudo pacman -S --noconfirm zeal
-  elif command -v apt &> /dev/null; then
+	elif command -v apt &>/dev/null; then
 		# Debian/Ubuntu
 		sudo apt update
 		sudo apt install -y zeal
-  elif command -v dnf &> /dev/null; then
+	elif command -v dnf &>/dev/null; then
 		# Fedora
 		sudo dnf install -y zeal
-  elif command -v zypper &> /dev/null; then
+	elif command -v zypper &>/dev/null; then
 		# openSUSE
 		sudo zypper install -y zeal
-  elif command -v flatpak &> /dev/null; then
+	elif command -v flatpak &>/dev/null; then
 		# Flatpak fallback
 		flatpak install -y flathub org.zealdocs.Zeal
 	else
@@ -64,7 +64,7 @@ get_docsets_dir() {
 	local docsets_dir
 
 	# Check if using Flatpak
-  if command -v flatpak &> /dev/null && flatpak list | grep -q "org.zealdocs.Zeal"; then
+	if command -v flatpak &>/dev/null && flatpak list | grep -q "org.zealdocs.Zeal"; then
 		docsets_dir="$HOME/.var/app/org.zealdocs.Zeal/data/Zeal/Zeal/docsets"
 	else
 		# Standard installation
@@ -220,7 +220,7 @@ main() {
 	# Offer to launch Zeal
 	read -r -p "Launch Zeal now? [y/N] " response
 	if [[ $response =~ ^[Yy]$ ]]; then
-    nohup zeal &> /dev/null &
+		nohup zeal &>/dev/null &
 		success "Zeal launched"
 	fi
 }

linux_configuration/scripts/utils/repo_to_study.sh

@@ -30,6 +30,7 @@ STUDY_MATERIALS_BASE="$HOME/.local/share/study-materials"
 
 # Work directories
 WORK_DIR="/tmp/repo_study_$$"
+# shellcheck disable=SC2034  # OUTPUT_DIR set dynamically by parse_args
 OUTPUT_DIR=""
 
 # Colors
@@ -75,7 +76,7 @@ cleanup() {
 trap cleanup EXIT
 
 usage() {
-  cat << EOF
+	cat <<EOF
 repo_to_study.sh - Generate study materials from any repository
 
 USAGE:
@@ -119,7 +120,7 @@ check_dependencies() {
 
 	# Check for basic tools
 	for cmd in git curl grep sed awk; do
-    if ! command -v "$cmd" &> /dev/null; then
+		if ! command -v "$cmd" &>/dev/null; then
 			missing+=("$cmd")
 		fi
 	done
@@ -229,7 +230,7 @@ generate_materials() {
 
 	# Run study materials generator
 	cd "$analysis_dir"
-  if "$STUDY_SCRIPT" . 2> /dev/null | grep -E "^(Created|✓|Files created)" | head -5; then
+	if "$STUDY_SCRIPT" . 2>/dev/null | grep -E "^(Created|✓|Files created)" | head -5; then
 		print_success "Study materials generated"
 	else
 		# Try anyway, might have succeeded
@@ -268,14 +269,14 @@ show_summary() {
 
 	if [ -f "$output_dir/documentation_links.md" ]; then
 		local doc_lines
-    doc_lines=$(wc -l < "$output_dir/documentation_links.md")
+		doc_lines=$(wc -l <"$output_dir/documentation_links.md")
 		echo -e "  📚 ${GREEN}documentation_links.md${NC} ($doc_lines lines)"
 		echo "     Contains links to OFFLINE documentation"
 	fi
 
 	if [ -f "$output_dir/anki_cards.txt" ]; then
 		local card_count
-    card_count=$(grep -c $'^\w' "$output_dir/anki_cards.txt" 2> /dev/null || echo "0")
+		card_count=$(grep -c $'^\w' "$output_dir/anki_cards.txt" 2>/dev/null || echo "0")
 		echo -e "  🎴 ${GREEN}anki_cards.txt${NC} (~$card_count cards)"
 		echo "     Import to Anki: File → Import → Tab separated"
 	fi
@@ -293,7 +294,7 @@ show_summary() {
 	echo ""
 	echo -e "${BOLD}Quick preview of imports with offline docs:${NC}"
 	if [ -f "$output_dir/documentation_links.md" ]; then
-    grep -A20 "import/from" "$output_dir/documentation_links.md" 2> /dev/null |
+		grep -A20 "import/from" "$output_dir/documentation_links.md" 2>/dev/null |
 			grep "^\| \`" | head -5 |
 			sed 's/|/│/g'
 	fi

pomodoro_app/linux/runner/main.cc

@@ -1,6 +1,6 @@
 #include "my_application.h"
 
-int main(int argc, char** argv) {
+int main(int argc, char **argv) {
   g_autoptr(MyApplication) app = my_application_new();
   return g_application_run(G_APPLICATION(app), argc, argv);
 }

pomodoro_app/linux/runner/my_application.cc

@@ -9,20 +9,20 @@
 
 struct _MyApplication {
   GtkApplication parent_instance;
-  char** dart_entrypoint_arguments;
+  char **dart_entrypoint_arguments;
 };
 
 G_DEFINE_TYPE(MyApplication, my_application, GTK_TYPE_APPLICATION)
 
 // Called when first Flutter frame received.
-static void first_frame_cb(MyApplication* self, FlView* view) {
+static void first_frame_cb(MyApplication *self, FlView *view) {
   gtk_widget_show(gtk_widget_get_toplevel(GTK_WIDGET(view)));
 }
 
 // Implements GApplication::activate.
-static void my_application_activate(GApplication* application) {
-  MyApplication* self = MY_APPLICATION(application);
-  GtkWindow* window =
+static void my_application_activate(GApplication *application) {
+  MyApplication *self = MY_APPLICATION(application);
+  GtkWindow *window =
       GTK_WINDOW(gtk_application_window_new(GTK_APPLICATION(application)));
 
   // Use a header bar when running in GNOME as this is the common style used
@@ -34,16 +34,16 @@ static void my_application_activate(GApplication* application) {
   // if future cases occur).
   gboolean use_header_bar = TRUE;
 #ifdef GDK_WINDOWING_X11
-  GdkScreen* screen = gtk_window_get_screen(window);
+  GdkScreen *screen = gtk_window_get_screen(window);
   if (GDK_IS_X11_SCREEN(screen)) {
-    const gchar* wm_name = gdk_x11_screen_get_window_manager_name(screen);
+    const gchar *wm_name = gdk_x11_screen_get_window_manager_name(screen);
     if (g_strcmp0(wm_name, "GNOME Shell") != 0) {
       use_header_bar = FALSE;
     }
   }
 #endif
   if (use_header_bar) {
-    GtkHeaderBar* header_bar = GTK_HEADER_BAR(gtk_header_bar_new());
+    GtkHeaderBar *header_bar = GTK_HEADER_BAR(gtk_header_bar_new());
     gtk_widget_show(GTK_WIDGET(header_bar));
     gtk_header_bar_set_title(header_bar, "pomodoro_app");
     gtk_header_bar_set_show_close_button(header_bar, TRUE);
@@ -58,7 +58,7 @@ static void my_application_activate(GApplication* application) {
   fl_dart_project_set_dart_entrypoint_arguments(
       project, self->dart_entrypoint_arguments);
 
-  FlView* view = fl_view_new(project);
+  FlView *view = fl_view_new(project);
   GdkRGBA background_color;
   // Background defaults to black, override it here if necessary, e.g. #00000000
   // for transparent.
@@ -79,10 +79,10 @@ static void my_application_activate(GApplication* application) {
 }
 
 // Implements GApplication::local_command_line.
-static gboolean my_application_local_command_line(GApplication* application,
-                                                  gchar*** arguments,
-                                                  int* exit_status) {
-  MyApplication* self = MY_APPLICATION(application);
+static gboolean my_application_local_command_line(GApplication *application,
+                                                  gchar ***arguments,
+                                                  int *exit_status) {
+  MyApplication *self = MY_APPLICATION(application);
   // Strip out the first argument as it is the binary name.
   self->dart_entrypoint_arguments = g_strdupv(*arguments + 1);
 
@@ -100,7 +100,7 @@ static gboolean my_application_local_command_line(GApplication* application,
 }
 
 // Implements GApplication::startup.
-static void my_application_startup(GApplication* application) {
+static void my_application_startup(GApplication *application) {
   // MyApplication* self = MY_APPLICATION(object);
 
   // Perform any actions required at application startup.
@@ -109,7 +109,7 @@ static void my_application_startup(GApplication* application) {
 }
 
 // Implements GApplication::shutdown.
-static void my_application_shutdown(GApplication* application) {
+static void my_application_shutdown(GApplication *application) {
   // MyApplication* self = MY_APPLICATION(object);
 
   // Perform any actions required at application shutdown.
@@ -118,13 +118,13 @@ static void my_application_shutdown(GApplication* application) {
 }
 
 // Implements GObject::dispose.
-static void my_application_dispose(GObject* object) {
-  MyApplication* self = MY_APPLICATION(object);
+static void my_application_dispose(GObject *object) {
+  MyApplication *self = MY_APPLICATION(object);
   g_clear_pointer(&self->dart_entrypoint_arguments, g_strfreev);
   G_OBJECT_CLASS(my_application_parent_class)->dispose(object);
 }
 
-static void my_application_class_init(MyApplicationClass* klass) {
+static void my_application_class_init(MyApplicationClass *klass) {
   G_APPLICATION_CLASS(klass)->activate = my_application_activate;
   G_APPLICATION_CLASS(klass)->local_command_line =
       my_application_local_command_line;
@@ -133,9 +133,9 @@ static void my_application_class_init(MyApplicationClass* klass) {
   G_OBJECT_CLASS(klass)->dispose = my_application_dispose;
 }
 
-static void my_application_init(MyApplication* self) {}
+static void my_application_init(MyApplication *self) {}
 
-MyApplication* my_application_new() {
+MyApplication *my_application_new() {
   // Set the program name to the application ID, which helps various systems
   // like GTK and desktop environments map this running application to its
   // corresponding .desktop file. This ensures better integration by allowing

pomodoro_app/linux/runner/my_application.h

@@ -3,10 +3,7 @@
 
 #include <gtk/gtk.h>
 
-G_DECLARE_FINAL_TYPE(MyApplication,
-                     my_application,
-                     MY,
-                     APPLICATION,
+G_DECLARE_FINAL_TYPE(MyApplication, my_application, MY, APPLICATION,
                      GtkApplication)
 
 /**
@@ -16,6 +13,6 @@ G_DECLARE_FINAL_TYPE(MyApplication,
  *
  * Returns: a new #MyApplication.
  */
-MyApplication* my_application_new();
+MyApplication *my_application_new();
 
 #endif // FLUTTER_MY_APPLICATION_H_

pyproject.toml

@@ -77,6 +77,73 @@ unfixable = []
     "C901",    # Complex interactive mode is acceptable
     "PLR0912", # Too many branches in interactive mode
 ]
+# Cinema planner - CLI tool with print output
+"python_pkg/cinema_planner/*.py" = [
+    "ARG001",  # Unused function argument (callbacks)
+    "T201",    # print() is intentional for CLI output
+    "D101",    # Missing docstring in public class
+    "D102",    # Missing docstring in public method
+    "D103",    # Missing docstring in public function
+    "D104",    # Missing docstring in public package
+    "ANN201",  # Missing return type annotation
+    "ANN202",  # Missing return type annotation (private)
+    "C901",    # Complex functions acceptable for CLI
+    "E501",    # Line too long
+    "EM102",   # Exception f-string literal
+    "PERF203", # try-except in loop
+    "PERF401", # List comprehension
+    "PLR0912", # Too many branches
+    "PLR0915", # Too many statements
+    "PLR2004", # Magic values
+    "PLR1714", # Multiple comparisons
+    "PTH123",  # open() instead of Path.open()
+    "S607",    # Partial executable path
+    "SIM105",  # Use contextlib.suppress
+    "TRY003",  # Long exception messages
+]
+# Linux configuration scripts - standalone scripts
+"linux_configuration/**/*.py" = [
+    "ARG001",  # Unused function argument (signal handlers)
+    "BLE001",  # Blind exception catching in scripts
+    "T201",    # print() is intentional for scripts
+    "ANN001",  # Missing function argument type annotation
+    "ANN201",  # Missing return type annotation
+    "ANN202",  # Missing return type annotation (private)
+    "ANN204",  # Missing return type for __init__
+    "C901",    # Complex functions in scripts
+    "D100",    # Missing module docstring
+    "D103",    # Missing docstring in public function
+    "D107",    # Missing docstring in __init__
+    "D205",    # 1 blank line required between summary and description
+    "D415",    # First line should end with period
+    "DTZ005",  # datetime without timezone
+    "E501",    # Line too long
+    "EXE001",  # Shebang without executable permission
+    "N806",    # Non-lowercase variable name
+    "PERF203", # try-except in loop
+    "PGH003",  # Use specific rule codes
+    "PLR0912", # Too many branches
+    "PLR0915", # Too many statements
+    "PLR2004", # Magic values
+    "PTH100",  # Path manipulation
+    "PTH103",  # Path manipulation
+    "PTH108",  # Path manipulation
+    "PTH110",  # Path manipulation
+    "PTH111",  # Path manipulation
+    "PTH112",  # Path manipulation
+    "PTH118",  # Path manipulation
+    "PTH119",  # Path manipulation
+    "PTH120",  # Path manipulation
+    "PTH122",  # Path manipulation
+    "PTH123",  # open() instead of Path.open()
+    "PTH202",  # Path manipulation
+    "S110",    # try-except-pass
+    "S607",    # Partial executable path
+    "SIM102",  # Collapsible if
+    "SIM105",  # Use contextlib.suppress
+    "SIM115",  # Use context manager
+    "TRY300",  # Consider else block
+]
 # Word frequency package - legacy code with pre-existing complexity
 "python_pkg/word_frequency/*.py" = [
     "C901",    # Function complexity - legacy code