local function script(name)

    return oxwm.spawn({ scripts .. "/" .. name })

oxwm.key.bind({ modkey }, "C", oxwm.layout.set("tiling"))

oxwm.key.bind({ modkey }, "I", oxwm.inc_num_master(1))

oxwm.key.bind({ modkey }, "P", oxwm.inc_num_master(-1))

# backend = "glx";

# glx-copy-from-front = false;

#

# active-opacity = 1;

# inactive-opacity = 1;

# frame-opacity = 1;

# inactive-opacity-override = false;

# blur-background = true;

# blur-background-exclude = [

#   "window_type = 'dock'",

# ];

#

# blur-method = "dual_kawase";

# blur-strength = 8;

fading = true;

fade-delta = 2;

no-fading-openclose = false;

fade-exclude = [ ];

wintypes:

{

  dock = {

    shadow = false;

  };

};

# opacity-rule = [

#   "90:class_g = 'URxvt'",

#   "90:class_g = 'Alacritty' && focused",

#   "70:class_g = 'Alacritty' && !focused"

# ];

#!/bin/sh

# Requires: wireplumber (wpctl), gum

# One menu over the vol-* / audio-output scripts.

set -u

DIR=$(dirname "$0")

CHOICE=$(gum choose \

    "Volume up" \

    "Volume down" \

    "Set volume" \

    "Toggle mute" \

    "Toggle mic mute" \

    "Select output" \

    "Show status" \

    "Quit") || exit 0

case "$CHOICE" in

    "Volume up")       "$DIR/vol-up" ;;

    "Volume down")     "$DIR/vol-down" ;;

    "Set volume")

        PCT=$(gum input --placeholder "0-100" --prompt "Volume % ") || exit 0

        case "$PCT" in

            ""|*[!0-9]*) gum style --foreground 214 "Not a number: $PCT"; exit 1 ;;

        esac

        [ "$PCT" -gt 100 ] && PCT=100

        wpctl set-volume @DEFAULT_AUDIO_SINK@ "${PCT}%" && "$DIR/vol-status" -n

        ;;

    "Toggle mute")     "$DIR/vol-mute" ;;

    "Toggle mic mute") "$DIR/vol-mute" -s ;;

    "Select output")   "$DIR/audio-output" ;;

    "Show status")

        gum style --border normal --padding "1 2" --border-foreground 212 \

            "Volume: $("$DIR/vol-status")" \

            "$("$DIR/audio-output" --list)"

        ;;

    *) exit 0 ;;

esac

#!/bin/sh

# Requires: wireplumber (wpctl), gum

# Pick which sink audio plays out of.

#   audio-output           interactive picker

#   audio-output --list    print sinks (* marks the current default)

#   audio-output --auto    clear the pin, let wireplumber pick by priority

#   audio-output ID|NAME   select by wpctl id, or by a substring of the name

set -u

# wpctl has no machine-readable listing, so carve the Sinks block out of `status`.

# Output: "<*|space>\t<id>\t<name>"

sinks() {

    wpctl status 2>/dev/null | awk '

        /^Audio/                                { audio = 1; next }

        /^[A-Z]/                                { audio = 0 }

        audio && /Sinks:/ && !/endpoints:/      { insec = 1; next }

        audio && /Devices:|Sources:|Streams:|endpoints:|Filters:/ { insec = 0; next }

        insec {

            line = $0

            prefix = line; sub(/[0-9].*$/, "", prefix)

            def = (prefix ~ /\*/) ? "*" : " "

            sub(/^[^0-9]*/, "", line)

            if (line !~ /^[0-9]+\./) next

            id = line;   sub(/\..*$/, "", id)

            name = line; sub(/^[0-9]+\.[[:space:]]*/, "", name)

            sub(/[[:space:]]*\[vol:.*$/, "", name)

            sub(/[[:space:]]+$/, "", name)

            print def "\t" id "\t" name

        }

    '

}

name_of() {

    printf '%s\n' "$SINKS" | awk -F'\t' -v id="$1" '$2 == id { print $3; exit }'

}

SINKS=$(sinks)

if [ -z "$SINKS" ]; then

    echo "audio-output: no sinks found (is pipewire/wireplumber running?)" >&2

    exit 1

fi

use_auto() {

    wpctl clear-default || exit 1

    gum style --foreground 212 "Output: automatic (wireplumber picks)"

    exit 0

}

use_sink() {

    wpctl set-default "$1" || exit 1

    gum style --foreground 212 "Output: $(name_of "$1")"

    exit 0

}

case "${1:-}" in

    --list|-l)

        printf '%s\n' "$SINKS" | awk -F'\t' '{ printf "%s %-6s %s\n", $1, $2, $3 }'

        exit 0

        ;;

    --auto|-a) use_auto ;;

    "") ;;

    *)

        ID=$(printf '%s\n' "$SINKS" | awk -F'\t' -v q="$1" '

            $2 == q                         { print $2; found = 1; exit }

            index(tolower($3), tolower(q))  { print $2; found = 1; exit }')

        if [ -z "$ID" ]; then

            echo "audio-output: no sink matching '$1'" >&2

            exit 1

        fi

        use_sink "$ID"

        ;;

esac

CHOICE=$(printf '%s\n' "$SINKS" \

    | awk -F'\t' '{ printf "%s %-6s %s\n", $1, $2, $3 }' \

    | { cat; echo "  auto   (let wireplumber choose)"; } \

    | gum choose --header "Select audio output") || exit 0

[ -n "$CHOICE" ] || exit 0

ID=$(printf '%s\n' "$CHOICE" | awk '{ print $2 }')

[ "$ID" = "auto" ] && use_auto

use_sink "$ID"

#!/bin/sh

# Requires: dmenu, libnotify, ifupdown-ng, openrc, doas

# dmenu counterpart of eth0-connect. The confirm prompt runs as the calling

# user; only the switch itself is handed to doas.

set -u

IFACE="${1:-eth0}"

WIFI="${2:-wlan0}"

NOTIFY_ID=7303

notify() {

    if command -v dunstify >/dev/null 2>&1; then

        dunstify -r "$NOTIFY_ID" ${2:+-u "$2"} "Network" "$1"

    else

        notify-send ${2:+-u "$2"} "Network" "$1"

    fi

}

fail() { notify "$1" critical; exit 1; }

doas -n true 2>/dev/null || fail "doas needs a password; add a nopass rule for this user."

[ "$(printf 'No\nYes\n' | dmenu -c -i -l 2 -p "Switch to $IFACE and disable $WIFI?")" = "Yes" ] || exit 0

notify "󰈀  Switching to wired..."

doas sh -c '

    ifdown "$2" 2>/dev/null

    ip link set "$2" down 2>/dev/null

    # Same reason as dm-wifi-disable: the supervisor respawns the daemon

    # after a bare kill, so stop the service instead of pkill-ing it.

    rc-service -s -q wpa_supplicant stop 2>/dev/null

    ifup "$1"

' _ "$IFACE" "$WIFI"

if ip addr show "$IFACE" | grep -q "inet "; then

    IP=$(ip -4 addr show "$IFACE" | awk '/inet /{print $2; exit}')

    notify "󰈀  $IFACE up — $IP"

else

    fail "󰲛  $IFACE failed to come up"

fi

#!/bin/sh

# Requires: dmenu, libnotify, ifupdown-ng, doas

# dmenu counterpart of eth0-disable.

set -u

IFACE="${1:-eth0}"

NOTIFY_ID=7304

notify() {

    if command -v dunstify >/dev/null 2>&1; then

        dunstify -r "$NOTIFY_ID" ${2:+-u "$2"} "Network" "$1"

    else

        notify-send ${2:+-u "$2"} "Network" "$1"

    fi

}

fail() { notify "$1" critical; exit 1; }

doas -n true 2>/dev/null || fail "doas needs a password; add a nopass rule for this user."

[ "$(printf 'No\nYes\n' | dmenu -c -i -l 2 -p "Disable $IFACE?")" = "Yes" ] || exit 0

notify "󰲛  Disabling $IFACE..."

doas sh -c '

    ifdown "$1" 2>/dev/null

    ip link set "$1" down

' _ "$IFACE"

notify "󰲛  $IFACE disabled"

#!/bin/sh

# Requires: dmenu, libnotify

# dmenu counterpart of net-menu. Everything here runs as the calling user;

# the individual scripts escalate with doas only for the parts that need it.

set -u

# Launched from a keybinding, PATH may not include this directory — resolve

# the sibling scripts relative to this one instead.

DIR=$(dirname "$0")

menu() { dmenu -c -i "$@"; }

# BusyBox's `ip` has no `-br`, so build the brief view by hand. Each line is

# prefixed with a Nerd Font icon for what that interface is and how it is

# doing: 󰤨/󰤫/󰤭 wireless connected/no lease/down, 󰈀/󰲛 wired up/down.

net_status() {

    for path in /sys/class/net/*; do

        iface=${path##*/}

        [ "$iface" = "lo" ] && continue

        state=$(cat "$path/operstate" 2>/dev/null || echo unknown)

        addrs=$(ip -4 addr show "$iface" 2>/dev/null |

            awk '/inet /{ printf "%s%s", (n++ ? " " : ""), $2 }')

        # Container veths and other virtual links with no address are noise;

        # a virtual interface that does carry one (tailscale0, docker0) is not.

        [ -z "$addrs" ] && [ ! -e "$path/device" ] && continue

        # Tunnels sit at operstate "unknown" for their whole life, so an

        # address is what actually says the link is carrying traffic.

        up=0

        case "$state" in

            up) up=1 ;;

            unknown) [ -n "$addrs" ] && up=1 ;;

        esac

        if [ -d "$path/wireless" ] || [ -e "$path/phy80211" ]; then

            if   [ "$up" -eq 0 ];  then icon="󰤭"

            elif [ -z "$addrs" ];  then icon="󰤫"

            else                        icon="󰤨"

            fi

        else

            if [ "$up" -eq 1 ]; then icon="󰈀"; else icon="󰲛"; fi

        fi

        printf '%s  %-12s %-8s %s\n' "$icon" "$iface" "$state" "$addrs"

    done

}

CHOICE=$(printf '%s\n' \

    "Connect to WiFi" \

    "Disable WiFi" \

    "Connect eth0" \

    "Disable eth0" \

    "Show status" \

    "Quit" | menu -l 6 -p "Network:")

case "$CHOICE" in

    "Connect to WiFi") "$DIR/dm-wifi-connect" ;;

    "Disable WiFi")    "$DIR/dm-wifi-disable" ;;

    "Connect eth0")    "$DIR/dm-eth0-connect" ;;

    "Disable eth0")    "$DIR/dm-eth0-disable" ;;

    "Show status")

        # dmenu is the only display surface we have; the selection is ignored.

        STATUS=$(net_status)

        LINES=$(printf '%s\n' "$STATUS" | grep -c .)

        printf '%s\n' "$STATUS" | menu -l "$LINES" -p "Status:" >/dev/null

        ;;

    *) exit 0 ;;

esac

#!/bin/sh

# Requires: dmenu, libnotify, iw, wpa_supplicant, udhcpc, openrc, doas

# dmenu counterpart of wifi-connect. All prompting happens as the calling

# user so dmenu keeps the X session and notifications keep the user's bus;

# only scanning, the config write and the bring-up are handed to doas.

set -u

CONF=/etc/wpa_supplicant/wpa_supplicant.conf

NOTIFY_ID=7301

menu() { dmenu -c -i "$@"; }

# Typed text with no dmenu-visible input still has to be hidden, and this

# build has no password patch — paint the prompt's foreground onto its

# background so the passphrase never renders.

menu_secret() {

    dmenu -c -p "$1" -nb '#000000' -nf '#000000' -sb '#000000' -sf '#000000' </dev/null

}

notify() {

    # dunstify can replace an earlier notification in place, so the progress

    # line becomes the result line instead of stacking up.

    if command -v dunstify >/dev/null 2>&1; then

        dunstify -r "$NOTIFY_ID" ${2:+-u "$2"} "WiFi" "$1"

    else

        notify-send ${2:+-u "$2"} "WiFi" "$1"

    fi

}

fail() { notify "$1" critical; exit 1; }

# doas asks for a passphrase on a tty, and launched from a keybinding there

# is none — fail with something readable instead of hanging invisibly.

doas -n true 2>/dev/null || fail "doas needs a password; add a nopass rule for this user."

# Ask the kernel which interfaces are wireless rather than assuming wlan0.

IFACES=$(iw dev | awk '$1 == "Interface" { print $2 }')

case $(printf '%s' "$IFACES" | grep -c .) in

    0) fail "No wireless interfaces found." ;;

    1) IFACE=$IFACES ;;

    *) IFACE=$(printf '%s\n' "$IFACES" | menu -l 5 -p "Interface:") ;;

esac

[ -n "$IFACE" ] || exit 1

doas ip link set "$IFACE" up 2>/dev/null

notify "󰤬  Scanning for networks on $IFACE..."

# `scan dump` reuses cached results if the card is busy (already associated),

# which is when a live scan tends to fail.

SCAN=$(doas iw dev "$IFACE" scan 2>/dev/null || doas iw dev "$IFACE" scan dump 2>/dev/null)

# Only real SSID lines: bare "SSID: " is a hidden network, and "SSID List"

# under extended capabilities is not a network at all.

SSIDS=$(printf '%s\n' "$SCAN" | sed -n 's/^[[:space:]]*SSID: \(..*\)$/\1/p' | sort -u)

if [ -n "$SSIDS" ]; then

    # dmenu returns whatever was typed when nothing matches, so a hidden or

    # out-of-range network can just be typed into the same prompt.

    SSID=$(printf '%s\n' "$SSIDS" | menu -l 10 -p "Network:")

else

    notify "No networks found on $IFACE — type one in."

    SSID=$(menu -p "Network:" </dev/null)

fi

[ -n "$SSID" ] || exit 1

PASS=$(menu_secret "Password (empty = open):")

# Build the new config before touching anything: a rejected passphrase must

# not blank out the config that is currently working. The PSK never lands on

# disk unprivileged — it goes to the root shell over a pipe.

if [ -z "$PASS" ]; then

    NEW=$(printf 'network={\n\tssid="%s"\n\tkey_mgmt=NONE\n}\n' "$SSID")

else

    NEW=$(wpa_passphrase "$SSID" "$PASS" 2>/dev/null | grep -v '^[[:space:]]*#psk=') ||

        fail "Rejected by wpa_passphrase — password must be 8-63 characters."

fi

[ -n "$NEW" ] || fail "Could not generate a config for $SSID."

printf '%s\n' "$NEW" | doas sh -c '

    [ -f "$1" ] && cp "$1" "$1.bak"

    cat > "$1"

    chmod 600 "$1"

' _ "$CONF" || fail "Could not write $CONF."

notify "󰤨  Connecting to $SSID..."

doas sh -c '

    # wpa_supplicant is a supervised OpenRC service on this host and will not

    # reread its config on its own, so restart it rather than signalling it.

    # This also covers the case where dm-wifi-disable stopped it outright.

    # ifup is no help here: wlan0 has no stanza in /etc/network/interfaces.

    rc-service wpa_supplicant restart >/dev/null 2>&1

    # Give the supplicant time to associate before asking for a lease — a

    # DHCP request sent before association just burns its whole timeout.

    i=0

    while [ "$i" -lt 20 ]; do

        iw dev "$1" link 2>/dev/null | grep -q "^Connected to" && break

        sleep 1

        i=$((i + 1))

    done

    # Replace any DHCP client left over from a previous connect; without this

    # they stack up, one per run, all renewing the same lease.

    PIDFILE=/var/run/udhcpc.$1.pid

    if [ -f "$PIDFILE" ]; then

        kill "$(cat "$PIDFILE")" 2>/dev/null

        rm -f "$PIDFILE"

    fi

    ip addr flush dev "$1" 2>/dev/null

    # Same invocation ifupdown-ng uses for a dhcp stanza. udhcpc daemonises

    # once it has the lease, so this returns with the address already set.

    udhcpc -b -R -p "$PIDFILE" -i "$1" -x "hostname:$(hostname)" >/dev/null 2>&1

' _ "$IFACE"

if ip addr show "$IFACE" | grep -q "inet "; then

    IP=$(ip -4 addr show "$IFACE" | awk '/inet /{print $2; exit}')

    notify "$("$(dirname "$0")/wifi-status" "$IFACE")  on $IFACE — $IP"

else

    fail "󰤮  Failed to connect to $SSID"

fi

#!/bin/sh

# Requires: dmenu, libnotify, openrc, ifupdown-ng, doas

# dmenu counterpart of wifi-disable. The confirm prompt runs as the calling

# user; only the teardown is handed to doas.

set -u

IFACE="${1:-wlan0}"

NOTIFY_ID=7302

notify() {

    if command -v dunstify >/dev/null 2>&1; then

        dunstify -r "$NOTIFY_ID" ${2:+-u "$2"} "WiFi" "$1"

    else

        notify-send ${2:+-u "$2"} "WiFi" "$1"

    fi

}

fail() { notify "$1" critical; exit 1; }

# doas asks for a passphrase on a tty, and launched from a keybinding there

# is none — fail with something readable instead of hanging invisibly.

doas -n true 2>/dev/null || fail "doas needs a password; add a nopass rule for this user."

# Default to No so a stray Enter never takes the link down.

[ "$(printf 'No\nYes\n' | dmenu -c -i -l 2 -p "Disable WiFi on $IFACE?")" = "Yes" ] || exit 0

notify "󰤭  Disabling $IFACE..."

doas sh -c '

    # wpa_supplicant runs under supervise-daemon (supervisor= in

    # /etc/init.d/wpa_supplicant), which respawns the daemon a couple of

    # seconds after any kill. Stopping the service is what takes the

    # supervisor down with it; pkill only ever kills the child.

    rc-service -s -q wpa_supplicant stop

    # wlan0 has no stanza in /etc/network/interfaces, so ifdown is a no-op on

    # this host and leaves the DHCP client behind. Try it anyway for hosts

    # where the interface *is* configured, then clean up by pidfile.

    ifdown "$1" 2>/dev/null

    PIDFILE=/var/run/udhcpc.$1.pid

    if [ -f "$PIDFILE" ]; then

        kill "$(cat "$PIDFILE")" 2>/dev/null

        rm -f "$PIDFILE"

    fi

    ip addr flush dev "$1" 2>/dev/null

    ip link set "$1" down

' _ "$IFACE"

notify "󰤭  $IFACE disabled"

#!/bin/sh

# Requires: gum, ifupdown-ng

# Bringing interfaces up/down needs root.

set -u

IFACE="${1:-eth0}"

WIFI="${2:-wlan0}"

if [ "$(id -u)" -ne 0 ]; then

    exec doas "$0" "$@"

fi

gum confirm "Switch to $IFACE and disable $WIFI?" || exit 0

gum spin --spinner dot --title "Switching to wired..." -- sh -c '

    ifdown "$2" 2>/dev/null

    ip link set "$2" down 2>/dev/null

    pkill wpa_supplicant 2>/dev/null

    ifup "$1"

' _ "$IFACE" "$WIFI"

if ip addr show "$IFACE" | grep -q "inet "; then

    IP=$(ip -4 addr show "$IFACE" | grep inet | awk '{print $2}')

    gum style --foreground 46 --bold "󰈀  $IFACE up — $IP"

else

    gum style --foreground 196 --bold "󰲛  $IFACE failed to come up"

fi

#!/bin/sh

# Requires: gum, ifupdown-ng

# Bringing interfaces down needs root.

set -u

IFACE="${1:-eth0}"

if [ "$(id -u)" -ne 0 ]; then

    exec doas "$0" "$@"

fi

gum confirm "Disable $IFACE?" || exit 0

gum spin --spinner dot --title "Disabling $IFACE..." -- sh -c '

    ifdown "$1" 2>/dev/null

    ip link set "$1" down

' _ "$IFACE"

gum style --foreground 214 "󰲛  $IFACE disabled"

#!/usr/bin/env bash

LOCATION=$1

# data=$(curl -sSL https://api.weather.gov/points/$LOCATION)

# echo $data

curl -sSL https://api.weather.gov/points/$LOCATION | jq -r '.properties.forecast'

#!/bin/sh

# Resolve the sibling scripts relative to this one rather than through PATH.

DIR=$(dirname "$0")

# BusyBox's `ip` has no `-br`, so build the brief view by hand. Each line is

# prefixed with a Nerd Font icon for what that interface is and how it is

# doing: 󰤨/󰤫/󰤭 wireless connected/no lease/down, 󰈀/󰲛 wired up/down.

net_status() {

    for path in /sys/class/net/*; do

        iface=${path##*/}

        [ "$iface" = "lo" ] && continue

        state=$(cat "$path/operstate" 2>/dev/null || echo unknown)

        addrs=$(ip -4 addr show "$iface" 2>/dev/null |

            awk '/inet /{ printf "%s%s", (n++ ? " " : ""), $2 }')

        # Container veths and other virtual links with no address are noise;

        # a virtual interface that does carry one (tailscale0, docker0) is not.

        [ -z "$addrs" ] && [ ! -e "$path/device" ] && continue

        # Tunnels sit at operstate "unknown" for their whole life, so an

        # address is what actually says the link is carrying traffic.

        up=0

        case "$state" in

            up) up=1 ;;

            unknown) [ -n "$addrs" ] && up=1 ;;

        esac

        if [ -d "$path/wireless" ] || [ -e "$path/phy80211" ]; then

            if   [ "$up" -eq 0 ];  then icon="󰤭"

            elif [ -z "$addrs" ];  then icon="󰤫"

            else                        icon="󰤨"

            fi

        else

            if [ "$up" -eq 1 ]; then icon="󰈀"; else icon="󰲛"; fi

        fi

        printf '%s  %-12s %-8s %s\n' "$icon" "$iface" "$state" "$addrs"

    done

}

CHOICE=$(gum choose "Connect to WiFi" "Disable WiFi" "Connect eth0" "Disable eth0" "Show status" "Quit")

case "$CHOICE" in

    "Connect to WiFi") "$DIR/wifi-connect" ;;

    "Disable WiFi")    "$DIR/wifi-disable" ;;

    "Connect eth0")    "$DIR/eth0-connect" ;;

    "Disable eth0")    "$DIR/eth0-disable" ;;

    "Show status")

        gum style --border normal --padding "1 2" --border-foreground 212 \

            "$(net_status)"

        ;;

    *) exit 0 ;;

esac

#!/usr/bin/env bash

folder="$HOME/notes"

mkdir -p "$folder"

# BusyBox setsid has no -f; background with & instead.

launch () {

  setsid "$term" -e nvim "$1" >/dev/null 2>&1 &

}

: "${TERMINAL:=st}"

term="$(command -v "$TERMINAL")" || {

  echo "notes: terminal '$TERMINAL' not found" >&2

  exit 1

}

newnote () { \

  dir="$(find "$folder" -type d | sort | dmenu -c -l 5 -i -p 'Choose directory: ')" || exit 0

  : "${dir:=$folder}"

  name="$(echo "" | dmenu -c -sb "#a3be8c" -nf "#d8dee9" -p "Enter a name: " <&-)" || exit 0

  : "${name:=$(date +%F_%H-%M-%S)}"

  launch "${dir%/}/${name}.md"

}

selected () { \

  choice=$(

    { echo "New"

      find "$folder" -type f -name '*.md' -exec stat -c '%Y %n' {} + 2>/dev/null \

        | sort -nr | cut -d' ' -f2- | sed "s|^$folder/||"

    } | dmenu -c -l 5 -i -p "Choose note or create new: "

  )

  case $choice in

    New) newnote ;;

    *.md) launch "$folder/$choice" ;;

    *) exit ;;

  esac

}

selected

#!/usr/bin/env bash

# basic stats checker script mostly adapted from statusbar, may need changes to work on your system

CPU_TEMP=$(sensors | awk '

    /^Tdie|^Tctl|^Package id|^Core 0|^CPU|^temp1/ {

        gsub(/[+°C]/, "");

        for (i=1; i<=NF; i++) {

            if ($i ~ /^[0-9]+(\.[0-9]+)?$/) {

                gsub(/\..*/, "", $i);

                print $i;

                exit;

            }

        }

    }')

MEM_USE=$(free -m | awk '/^Mem/ {print ($3)/1024}'| cut -c-4)

CPU_USE=$(iostat -c | awk 'NR>=4 && NR <=4' | awk '{print "User CPU: "$1"%\nSystem CPU: ",$3"%"}')

GPU_TEMP=$(sensors | awk '/^edge/ {print substr($2,2)}')

DISK1=$(df -h ~/ | awk 'NR==2 {print $4}')

DISK2=$(df -h / | awk 'NR==2 {print $4}')

# [[ -n $(amixer get Capture | awk '/\[on\]/') ]] && MIC="on" || MIC="off"

UPDATE=$(stat -c %y /lib/apk/db/installed | awk '{print $1}')

KERNEL=$(uname -r)

echo -e "Stats $CPU_USE

GPU temp: $GPU_TEMP

CPU temp: $CPU_TEMP°C

Memory use: ${MEM_USE}g

Home remaining: $DISK1

Root remaining: $DISK2

Last update: $UPDATE       $KERNEL" \

| bat -l cpuinfo --style=grid

#!/usr/bin/env bash

case "$(printf "kill\nzzz\nreboot\nshutdown" | dmenu -i -c -l 4)" in

	kill) ps -u "$USER" -o pid,comm,%cpu,%mem | dmenu -i -c -l 10 -p Kill: | awk '{print $1}' | xargs -r kill ;;

	zzz) slock systemctl suspend -i ;;

	reboot) systemctl reboot -i ;;

	shutdown) shutdown now ;;

	*) exit 1 ;;

esac

#!/usr/bin/env bash

histfile="$HOME/.cache/cliphist"

placeholder="<NEWLINE>"

highlight() {

  clip=$(xclip -o -selection primary | xclip -i -f -selection clipboard 2>/dev/null) ;}

output() {

  clip=$(xclip -i -f -selection clipboard 2>/dev/null) ;}

write() {

  [ -f "$histfile" ] || notify-send "Creating $histfile"; touch $histfile

  [ -z "$clip" ] && exit 0

  multiline=$(echo "$clip" | sed ':a;N;$!ba;s/\n/'"$placeholder"'/g')

  grep -Fxq "$multiline" "$histfile" || echo "$multiline" >> "$histfile"

  notification=$(echo \"$multiline\") ;}

sel() {

  selection=$(tac "$histfile" | dmenu -b -l 5 -i -p "Clipboard history:")

  [ -n "$selection" ] && echo "$selection" | sed "s/$placeholder/\n/g" | xclip -i -selection clipboard && notification="Copied to clipboard!" ;}

case "$1" in

  add) highlight && write ;;

  out) output && write ;;

  sel) sel ;;

  *) printf "$0 | File: $histfile\n\nadd - copies primary selection to clipboard, and adds to history file\nout - pipe commands to copy output to clipboard, and add to history file\nsel - select from history file with dmenu and recopy!\n" ; exit 0 ;;

esac

[ -z "$notification" ] || notify-send "$notification"

#!/bin/sh

# Requires: wireplumber (wpctl)

# Lower the default sink. Usage: vol-down [STEP_PERCENT]   (default 5)

set -u

STEP="${1:-5}"

wpctl set-volume @DEFAULT_AUDIO_SINK@ "${STEP}%-" || exit 1

exec "$(dirname "$0")/vol-status" -n

#!/bin/sh

# Requires: wireplumber (wpctl)

# Mute the default sink. Usage: vol-mute [toggle|on|off]   (default toggle)

# Pass -s / --source to act on the default microphone instead.

set -u

TARGET="@DEFAULT_AUDIO_SINK@"

case "${1:-}" in

    -s|--source) TARGET="@DEFAULT_AUDIO_SOURCE@"; shift ;;

esac

case "${1:-toggle}" in

    toggle|"") ARG=toggle ;;

    on|1|mute)     ARG=1 ;;

    off|0|unmute)  ARG=0 ;;

    *) echo "usage: vol-mute [-s] [toggle|on|off]" >&2; exit 2 ;;

esac

wpctl set-mute "$TARGET" "$ARG" || exit 1

# vol-status carries the icon logic for both devices, so hand the reporting

# (and the notification) off to it either way.

if [ "$TARGET" = "@DEFAULT_AUDIO_SOURCE@" ]; then

    exec "$(dirname "$0")/vol-status" -s -n

fi

exec "$(dirname "$0")/vol-status" -n

#!/bin/sh

# Requires: wireplumber (wpctl), optionally libnotify

# Prints the default sink's volume with a Nerd Font icon for its level.

# Shared by vol-up / vol-down / vol-mute and the status bar.

# Usage: vol-status [-n] [-p] [-s]

#   -n  also fire a desktop notification

#   -p  plain output, no Nerd Font icon (for terminals without one)

#   -s  report the default source (microphone) instead of the sink

set -u

NOTIFY=0

PLAIN=0

TARGET="@DEFAULT_AUDIO_SINK@"

LABEL="Volume"

while [ $# -gt 0 ]; do

    case "$1" in

        -n|--notify) NOTIFY=1 ;;

        -p|--plain)  PLAIN=1 ;;

        -s|--source) TARGET="@DEFAULT_AUDIO_SOURCE@"; LABEL="Microphone" ;;

        *) echo "usage: vol-status [-n] [-p] [-s]" >&2; exit 2 ;;

    esac

    shift

done

RAW=$(wpctl get-volume "$TARGET" 2>/dev/null)

if [ -z "$RAW" ]; then

    echo "vol-status: no default device (is pipewire/wireplumber running?)" >&2

    exit 1

fi

# "Volume: 0.45" or "Volume: 0.45 [MUTED]"

PCT=$(printf '%s\n' "$RAW" | awk '{ printf "%d", $2 * 100 + 0.5 }')

case "$RAW" in

    *MUTED*) MUTED=1 ;;

    *)       MUTED=0 ;;

esac

# Two icon sets: speaker glyphs for the sink, mic glyphs for the source.

# ICON is the Nerd Font glyph in the bar; FDO is the freedesktop icon name

# the notification daemon looks up in the icon theme.

if [ "$TARGET" = "@DEFAULT_AUDIO_SOURCE@" ]; then

    if [ "$MUTED" -eq 1 ]; then

        ICON="󰍭"; FDO="microphone-sensitivity-muted"; TEXT="muted"

    else

        ICON="󰍬"; FDO="microphone-sensitivity-high";  TEXT="$PCT%"

    fi

elif [ "$MUTED" -eq 1 ]; then

    ICON="󰝟"; FDO="audio-volume-muted"; TEXT="muted ($PCT%)"

else

    TEXT="$PCT%"

    if   [ "$PCT" -ge 66 ]; then ICON="󰕾"; FDO="audio-volume-high"

    elif [ "$PCT" -ge 33 ]; then ICON="󰖀"; FDO="audio-volume-medium"

    elif [ "$PCT" -gt 0 ];  then ICON="󰕿"; FDO="audio-volume-low"

    else                         ICON="󰝟"; FDO="audio-volume-muted"

    fi

fi

if [ "$PLAIN" -eq 1 ]; then

    echo "$TEXT"

else

    echo "$ICON  $TEXT"

fi

# Only bother with notifications when there is a session to show them in.

[ "$NOTIFY" -eq 1 ] || exit 0

[ -n "${WAYLAND_DISPLAY:-}${DISPLAY:-}" ] || exit 0

command -v notify-send >/dev/null 2>&1 || exit 0

notify-send \

    -a volume \

    -i "$FDO" \

    -h string:x-canonical-private-synchronous:volume \

    -h "int:value:$PCT" \

    "$ICON  $LABEL" "$TEXT"

#!/bin/sh

# Requires: wireplumber (wpctl)

# Raise the default sink. Usage: vol-up [STEP_PERCENT]   (default 5)

# VOL_MAX caps the ceiling (1.0 = 100%); raise it if you want overamplification.

set -u

STEP="${1:-5}"

MAX="${VOL_MAX:-1.0}"

wpctl set-volume -l "$MAX" @DEFAULT_AUDIO_SINK@ "${STEP}%+" || exit 1

exec "$(dirname "$0")/vol-status" -n

#!/usr/bin/env bash

set -euo pipefail

gridpoint=${WEATHER_GRIDPOINT:-MRX/23,5}

base_url="https://api.weather.gov/gridpoints/${gridpoint}/forecast"

cloudy=󰖐

fog=󰖑

hail=󰖒

hazy=󰼰

storm=󰖓

clear_night=󰖔

rain=󰖖

snow=󰖘

clear_day=󰖙

usage() {

	cat <<'USAGE'

usage: weather.sh [-h|--hourly] [-j|--json]

  -h, --hourly   use the hourly forecast instead of the daily one

  -j, --json     print { "text": ..., "tooltip": ... } (waybar friendly)

env:

  WEATHER_GRIDPOINT   NWS gridpoint, default MRX/23,5

USAGE

}

hourly=false

json=false

while (($#)); do

	case $1 in

	-h | --hourly) hourly=true ;;

	-j | --json) json=true ;;

	--help) usage && exit 0 ;;

	*) usage >&2 && exit 1 ;;

	esac

	shift

done

$hourly && weather_url="$base_url/hourly" || weather_url="$base_url"

data=$(curl -sSL --fail --max-time 10 -H 'Accept: application/geo+json' "$weather_url" |

	jq -r '.properties.periods[0] | [.icon, .temperature, .temperatureUnit, .shortForecast, .isDaytime] | @tsv') || {

	echo "weather: request failed" >&2

	exit 1

}

IFS=$'\t' read -r icon_url temp unit short is_day <<<"$data"

# https://api.weather.gov/icons/land/night/tsra_hi,20/bkn?size=small

#                             ^period      ^condition

icon_path=${icon_url%%\?*}      # drop the query string

icon_path=${icon_path#*/icons/} # land/night/tsra_hi,20/bkn

icon_path=${icon_path#*/}       # night/tsra_hi,20/bkn

period=${icon_path%%/*}         # day|night

condition=${icon_path#*/}

condition=${condition%%/*}      # first of the (up to two) conditions

condition=${condition%%,*}      # drop the ",20" precip chance

night=false

[[ $period == night || $is_day == false ]] && night=true

# NWS icon vocabulary -> glyph.

case $condition in

skc | few | hot | cold) $night && glyph=$clear_night || glyph=$clear_day ;;

sct | bkn | ovc | wind_skc | wind_few | wind_sct | wind_bkn | wind_ovc) glyph=$cloudy ;;

tsra | tsra_sct | tsra_hi | tornado | hurricane | tropical_storm) glyph=$storm ;;

rain | rain_showers | rain_showers_hi) glyph=$rain ;;

snow | blizzard | rain_snow | snow_sleet) glyph=$snow ;;

sleet | fzra | rain_fzra | snow_fzra | rain_sleet) glyph=$hail ;;

fog) glyph=$fog ;;

haze | smoke | dust) glyph=$hazy ;;

*) glyph="" ;;

esac

# Fall back to a keyword match on the forecast text, most specific first.

if [[ -z $glyph ]]; then

	case ${short,,} in

	*thunder* | *tstm* | *tornado* | *hurricane* | *tropical*) glyph=$storm ;;

	*hail* | *sleet* | *freezing* | *ice*) glyph=$hail ;;

	*snow* | *flurr* | *blizzard* | *wintry*) glyph=$snow ;;

	*rain* | *shower* | *drizzle*) glyph=$rain ;;

	*fog* | *mist*) glyph=$fog ;;

	*haze* | *hazy* | *smoke* | *dust*) glyph=$hazy ;;

	*cloud* | *overcast*) glyph=$cloudy ;;

	*clear* | *sunny* | *fair* | *hot*) $night && glyph=$clear_night || glyph=$clear_day ;;

	*) $night && glyph=$clear_night || glyph=$clear_day ;;

	esac

fi

if $json; then

	jq -cn --arg text "$glyph $temp°$unit" --arg tooltip "$short" \

		'{text: $text, tooltip: $tooltip}'

else

	printf '%s %s°%s\n' "$glyph" "$temp" "$unit"

fi

#!/bin/sh

# Requires: gum, iw, wpa_supplicant, udhcpc, openrc

# Scanning and writing wpa_supplicant.conf both need root.

set -u

CONF=/etc/wpa_supplicant/wpa_supplicant.conf

if [ "$(id -u)" -ne 0 ]; then

    exec doas "$0" "$@"

fi

# Ask the kernel which interfaces are wireless rather than assuming wlan0.

IFACES=$(iw dev | awk '$1 == "Interface" { print $2 }')

case $(printf '%s' "$IFACES" | grep -c .) in

    0) gum style --foreground 196 "No wireless interfaces found."; exit 1 ;;

    1) IFACE=$IFACES ;;

    *) IFACE=$(printf '%s\n' "$IFACES" | gum choose --header "Interface:") ;;

esac

if [ -z "$IFACE" ]; then

    exit 1

fi

ip link set "$IFACE" up 2>/dev/null

SCAN=$(mktemp)

trap 'rm -f "$SCAN"' EXIT INT TERM

# The scan has to run inside the spinner, and into a file — gum spin owns

# stdout while it renders. `scan dump` reuses cached results if the card is

# busy (already associated), which is when a live scan tends to fail.

gum spin --spinner dot --title "Scanning for networks..." -- sh -c '

    iw dev "$1" scan > "$2" 2>/dev/null || iw dev "$1" scan dump > "$2" 2>/dev/null

' _ "$IFACE" "$SCAN"

# Only real SSID lines: bare "SSID: " is a hidden network, and "SSID List"

# under extended capabilities is not a network at all.

SSIDS=$(sed -n 's/^[[:space:]]*SSID: \(..*\)$/\1/p' "$SCAN" | sort -u)

SSID=""

if [ -n "$SSIDS" ]; then

    # Never pipe an empty list into gum filter: with no input it falls back to

    # listing the current directory, which looks like a network list but isn't.

    SSID=$(printf '%s\n' "$SSIDS" | gum filter --placeholder "Select a network...")

else

    gum style --foreground 214 "No networks found on $IFACE — enter one manually."

fi

if [ -z "$SSID" ]; then

    SSID=$(gum input --placeholder "SSID" --prompt "Network name: ")

fi

if [ -z "$SSID" ]; then

    gum style --foreground 196 "No SSID entered, aborting."

    exit 1

fi

PASS=$(gum input --password --placeholder "leave empty for an open network" --prompt "Password: ")

# Build the new config off to the side: a rejected passphrase must not blank

# out the config that is currently working.

NEW=$(mktemp)

trap 'rm -f "$SCAN" "$NEW"' EXIT INT TERM

if [ -z "$PASS" ]; then

    printf 'network={\n\tssid="%s"\n\tkey_mgmt=NONE\n}\n' "$SSID" > "$NEW"

elif ! wpa_passphrase "$SSID" "$PASS" 2>/dev/null | grep -v '^[[:space:]]*#psk=' > "$NEW"; then

    gum style --foreground 196 "Rejected by wpa_passphrase — password must be 8-63 characters."

    exit 1

fi

if [ ! -s "$NEW" ]; then

    gum style --foreground 196 "Could not generate a config for $SSID, aborting."

    exit 1

fi

[ -f "$CONF" ] && cp "$CONF" "$CONF.bak"

cat "$NEW" > "$CONF"

chmod 600 "$CONF"

gum spin --spinner dot --title "Connecting to $SSID..." -- sh -c '

    # wpa_supplicant is a supervised OpenRC service on this host and will not

    # reread its config on its own, so restart it rather than signalling it.

    # This also covers the case where wifi-disable stopped it outright.

    # ifup is no help here: wlan0 has no stanza in /etc/network/interfaces.

    rc-service wpa_supplicant restart >/dev/null 2>&1

    # Give the supplicant time to associate before asking for a lease — a

    # DHCP request sent before association just burns its whole timeout.

    i=0

    while [ "$i" -lt 20 ]; do

        iw dev "$1" link 2>/dev/null | grep -q "^Connected to" && break

        sleep 1

        i=$((i + 1))

    done

    # Replace any DHCP client left over from a previous connect; without this

    # they stack up, one per run, all renewing the same lease.

    PIDFILE=/var/run/udhcpc.$1.pid

    if [ -f "$PIDFILE" ]; then

        kill "$(cat "$PIDFILE")" 2>/dev/null

        rm -f "$PIDFILE"

    fi

    ip addr flush dev "$1" 2>/dev/null

    # Same invocation ifupdown-ng uses for a dhcp stanza. udhcpc daemonises

    # once it has the lease, so this returns with the address already set.

    udhcpc -b -R -p "$PIDFILE" -i "$1" -x "hostname:$(hostname)" >/dev/null 2>&1

' _ "$IFACE"

if ip addr show "$IFACE" | grep -q "inet "; then

    gum style --foreground 46 --bold "$("$(dirname "$0")/wifi-status" "$IFACE")  connected on $IFACE"

else

    gum style --foreground 196 --bold "󰤮  Failed to connect to $SSID"

fi

#!/bin/sh

# Requires: gum, openrc, ifupdown-ng

# Stopping the wpa_supplicant service and downing the link both need root.

set -u

IFACE="${1:-wlan0}"

if [ "$(id -u)" -ne 0 ]; then

    exec doas "$0" "$@"

fi

gum confirm "Disable WiFi on $IFACE?" || exit 0

gum spin --spinner dot --title "Disabling $IFACE..." -- sh -c '

    # wpa_supplicant runs under supervise-daemon (supervisor= in

    # /etc/init.d/wpa_supplicant), which respawns the daemon a couple of

    # seconds after any kill. Stopping the service is what takes the

    # supervisor down with it; pkill only ever kills the child.

    rc-service -s -q wpa_supplicant stop

    # wlan0 has no stanza in /etc/network/interfaces, so ifdown is a no-op on

    # this host and leaves the DHCP client behind. Try it anyway for hosts

    # where the interface *is* configured, then clean up by pidfile.

    ifdown "$1" 2>/dev/null

    PIDFILE=/var/run/udhcpc.$1.pid

    if [ -f "$PIDFILE" ]; then

        kill "$(cat "$PIDFILE")" 2>/dev/null

        rm -f "$PIDFILE"

    fi

    ip addr flush dev "$1" 2>/dev/null

    ip link set "$1" down

' _ "$IFACE"

gum style --foreground 214 "󰤭  $IFACE disabled"

#!/bin/sh

# Requires: iw

# Prints the link state with a Nerd Font icon, for the status bar and menus.

# Wireless is the subject: the icon tracks signal strength while connected,

# so it moves as the link does. When wifi is not carrying traffic it falls

# back to reporting a live wired link rather than saying "off" while the

# machine is plainly online.

# Usage: wifi-status [-p|--plain] [-w|--wifi-only] [IFACE]

#   -p  plain output, no Nerd Font icon (for terminals without one)

#   -w  never fall back to wired, even with no wifi

#   IFACE  wireless interface to report (default: the first one the kernel

#          lists); naming one implies -w, since the question was about it

set -u

PLAIN=0

WIFI_ONLY=0

while [ $# -gt 0 ]; do

    case "$1" in

        -p|--plain)     PLAIN=1 ;;

        -w|--wifi-only) WIFI_ONLY=1 ;;

        -*) echo "usage: wifi-status [-p] [-w] [IFACE]" >&2; exit 2 ;;

        *) break ;;

    esac

    shift

done

# Every exit path prints through this, so -p only has to be handled once.

say() {

    if [ "$PLAIN" -eq 1 ]; then

        echo "$2"

    else

        echo "$1  $2"

    fi

}

# A wired interface counts only if it is a real NIC (a `device` symlink rules

# out docker0, tailscale0 and the veths), is up, and holds a v4 address —

# that last part is what says it can actually carry traffic.

wired_iface() {

    for path in /sys/class/net/*; do

        iface=${path##*/}

        [ "$iface" = "lo" ] && continue

        [ -d "$path/wireless" ] || [ -e "$path/phy80211" ] && continue

        [ -e "$path/device" ] || continue

        [ "$(cat "$path/operstate" 2>/dev/null)" = "up" ] || continue

        ip addr show "$iface" 2>/dev/null | grep -q "inet " || continue

        echo "$iface"

        return 0

    done

    return 1

}

# 󰈀 wired link carrying traffic. Only consulted once wifi has come up empty,

# so a working wifi connection always wins the block.

fallback() {

    [ "$WIFI_ONLY" -eq 1 ] && return 1

    WIRED=$(wired_iface) || return 1

    say "󰈀" "$WIRED"

    exit 0

}

if [ -n "${1:-}" ]; then

    # An explicitly named interface is the whole question — no wired fallback,

    # so callers like wifi-connect report on the link they just brought up.

    IFACE="$1"

    WIFI_ONLY=1

else

    # Ask the kernel which interfaces are wireless rather than assuming wlan0.

    IFACE=$(iw dev 2>/dev/null | awk '$1 == "Interface" { print $2; exit }')

fi

# 󰤮 no wireless hardware at all, 󰤭 card present but down/unassociated,

# 󰤫 associated without a lease, 󰤟󰤢󰤥󰤨 connected at rising signal strength.

if [ -z "$IFACE" ]; then

    fallback

    say "󰤮" "none"

    exit 0

fi

# `iw link` prints "Not connected." while the card is up but unassociated, and

# fails outright once wifi-disable has downed the link.

LINK=$(iw dev "$IFACE" link 2>/dev/null) || { fallback; say "󰤭" "off"; exit 0; }

case "$LINK" in

    "Connected to"*) ;;

    *) fallback; say "󰤭" "off"; exit 0 ;;

esac

SSID=$(printf '%s\n' "$LINK" | sed -n 's/^[[:space:]]*SSID: \(..*\)$/\1/p')

[ -n "$SSID" ] || SSID="unknown"

# Associated but without a lease carries no traffic, so wired wins here too;

# without one, name the network but say the lease is missing rather than

# showing an SSID that looks connected.

if ! ip addr show "$IFACE" 2>/dev/null | grep -q "inet "; then

    fallback

    say "󰤫" "$SSID (no ip)"

    exit 0

fi

# "signal: -47 dBm" — the thresholds are the usual rule of thumb: better than

# -50 is excellent, -70 is the edge of usable.

DBM=$(printf '%s\n' "$LINK" | awk '/signal:/ { printf "%d", $2; exit }')

if   [ -z "$DBM" ];      then ICON="󰤨"   # no signal line (some drivers) — assume good

elif [ "$DBM" -ge -50 ]; then ICON="󰤨"

elif [ "$DBM" -ge -60 ]; then ICON="󰤥"

elif [ "$DBM" -ge -70 ]; then ICON="󰤢"

else                          ICON="󰤟"

fi

say "$ICON" "$SSID"

export GOROOT="/usr/local/go"

export GOPRIVATE="*gitlab*"