# macOS: arrange displays via command line for consistent setup
# Install displayplacer: https://github.com/jakehilborn/displayplacer
brew install jakehilborn/jakehilborn/displayplacer

# Save your current arrangement
displayplacer list

# Output: something like:
# displayplacer "id:37D8832A-2D66-02CA-B9F7-8F30A301B230 res:2560x1600 ..."
# "id:6CF5E21E-18CF-4E28-AEF7-C53ADE7FC476 res:2560x1600 ..."

# Create a script to restore arrangement
cat > ~/bin/arrange-displays.sh << 'EOF'
#!/bin/bash
displayplacer "id:37D8832A... res:2560x1600 hz:60 color_depth:8 enabled:true scaling:on origin:(0,0) degree:0" \
              "id:6CF5E21E... res:2560x1600 hz:60 color_depth:8 enabled:true scaling:on origin:(2560,0) degree:0"
EOF
chmod +x ~/bin/arrange-displays.sh

# On any new machine, restore your full config in minutes
sh -c "$(curl -fsLS get.chezmoi.io)"
chezmoi init https://github.com/yourusername/dotfiles.git
chezmoi apply

# This restores: shell config, git config, vim/neovim, tmux, etc.

# Install mise (manages Node, Python, Go, Rust, etc.)
curl https://mise.run | sh
eval "$(~/.local/bin/mise activate zsh)"

# Your .mise.toml in each project specifies exact versions
# On a new machine: cd project && mise install

# 1Password for secrets (never store in dotfiles)
brew install 1password-cli
eval $(op signin)
# Use: op read "op://Private/AWS/access-key-id"

# SSH keys via 1Password SSH agent (no key files to sync)
# Add to ~/.ssh/config:
# Host *
#   IdentityAgent "~/Library/Group Containers/.../T/agent.sock"

# Git config
git config --global user.name "Your Name"
git config --global user.email "you@company.com"
git config --global core.sshCommand "ssh"
# 1Password handles authentication via SSH agent

# Script to verify your setup works at a new location
cat > ~/bin/check-setup.sh << 'EOF'
#!/bin/bash
echo "=== Portable Setup Check ==="
echo "Network:"
ping -c 1 8.8.8.8 > /dev/null && echo "  Internet: ✓" || echo "  Internet: ✗"
networksetup -getinfo Ethernet | grep "IP address" | head -1

echo "Displays:"
system_profiler SPDisplaysDataType 2>/dev/null | grep "Resolution" | head -3

echo "Tools:"
mise --version && echo "  mise: ✓" || echo "  mise: ✗"
1password-cli --version 2>/dev/null && echo "  1Password CLI: ✓" || echo "  1Password CLI: needs sign-in"
docker info > /dev/null 2>&1 && echo "  Docker: ✓" || echo "  Docker: ✗"
EOF
chmod +x ~/bin/check-setup.sh

# macOS battery optimization
# Settings → Battery → Options:
- Low Power Mode: Keep enabled (reduces performance 10-15%)
- Disable background app refresh
- Reduce screen brightness below 40%
- Turn off Bluetooth when not needed

# Verify battery estimates
pmset -g batt  # Shows current drain rate in mW

# Disable power-hungry processes
# Top energy consumers on dev machines:
- Docker: Consume massive power (50-100W when active)
  Solution: Stop Docker when not coding
- Xcode compilation: Runs on battery even during background indexing
  Solution: Open Activity Monitor → CPU tab, kill Xcode if idle
- Chrome: Each tab uses 2-5W (especially video)
  Solution: Use Safari for video, limit open tabs

# Travel power profile (battery conservation)
cat >> ~/.zshrc << 'EOF'
function travel-mode() {
    pmset -c displaysleep 10
    pmset -c sleep 30
    pmset -b displaysleep 3
    pmset -b sleep 5
    defaults write NSGlobalDomain NSWindowShouldDragOnGesture -bool NO
    echo "Travel mode: aggressive power saving enabled"
}
EOF

# macOS: Create display profiles for different locations
# Using displayplacer (install: brew install jakehilborn/jakehilborn/displayplacer)

# Get current setup
displayplacer list > ~/display_profiles.txt

# Save three common configurations
# Config 1: Just laptop screen (no external monitor)
displayplacer "id:37D8832A res:1728x1117 hz:60 color_depth:8 scaling:on origin:(0,0)"

# Config 2: Laptop + portable monitor (hotel desk)
displayplacer "id:37D8832A res:1728x1117 hz:60 color_depth:8 scaling:on origin:(0,0)" \
              "id:6CF5E21E res:2560x1600 hz:60 color_depth:8 scaling:on origin:(1728,0)"

# Config 3: Laptop only, mirrored (conference room presenting)
displayplacer --mirrors active

# Create aliases for quick switching
cat >> ~/.zshrc << 'EOF'
alias dsp-single='displayplacer "id:37D8832A res:1728x1117 hz:60"'
alias dsp-dual='displayplacer "id:37D8832A res:1728x1117 hz:60" "id:6CF5E21E res:2560x1600 hz:60"'
EOF

# Detect network quality and adapt
cat > ~/bin/network-check.sh << 'EOF'
#!/bin/bash

echo "=== Network Quality Check ==="

# Latency test
LATENCY=$(ping -c 1 8.8.8.8 | grep time | awk '{print $4}' | cut -d'=' -f2)
echo "Latency: $LATENCY ms"

# Bandwidth test (requires iperf or speedtest)
# speedtest-cli --simple

# DNS resolution time
NSLOOKUP_TIME=$(time nslookup github.com 8.8.8.8 2>&1 | grep real)
echo "DNS: $NSLOOKUP_TIME"

# Packet loss
LOSS=$(ping -c 10 8.8.8.8 | grep % | awk '{print $6}')
echo "Packet loss: $LOSS"

# Determine if network is usable for video calls
if [[ $LATENCY > "100" ]] || [[ $LOSS > "5%" ]]; then
    echo "⚠️  Network quality poor — avoid video calls"
    echo "💡 Recommendation: Use phone for calls, save video for later"
else
    echo "✅ Network acceptable for video"
fi
EOF
chmod +x ~/bin/network-check.sh

# Startup routine (save as shell script)
cat > ~/bin/setup-work.sh << 'EOF'
#!/bin/bash

echo "=== Portable Work Setup ==="

# 1. Network check
~/bin/network-check.sh

# 2. Display configuration
dsp-dual  # Or dsp-single depending on location

# 3. GitHub status
git status
git pull origin main

# 4. Open work tools
open -a "VS Code"
open -a "Terminal"
open https://github.com/[org]/[repo]
open https://slack.com/

# 5. Set status in Slack
# (manual, but remember to do it)

echo "✅ Ready to work"
EOF
chmod +x ~/bin/setup-work.sh

# Pre-travel security checklist
- [ ] Enable FileVault (macOS) or BitLocker (Windows)
- [ ] Ensure SSH keys are in 1Password or similar (not local files)
- [ ] Git credential stored in 1Password, not local git config
- [ ] VPN client installed and configured
- [ ] Two-factor authentication enabled on all accounts
- [ ] Screensaver enabled (2 min timeout)
- [ ] Firewall enabled
- [ ] Disk encryption enabled

# Portable work network rules
- Never join networks without VPN
- Avoid public WiFi for sensitive work (code review, secrets access)
- Use VPN even on "trusted" networks (hotel WiFi, airport)
- Disable Bluetooth and AirDrop when not in use
- Keep laptop in sight when taking breaks

# Public WiFi workflow
1. Connect to WiFi
2. Start VPN immediately (before opening email or work apps)
3. If VPN drops, kill internet-dependent apps
4. Reconnect VPN before resuming