Hyperpolymath Scripts

Infrastructure automation, repository management, and system configuration scripts for the Hyperpolymath ecosystem (~500+ repos across GitHub, GitLab, Codeberg, and Bitbucket).

Overview

This repository contains scripts for:

• System configuration — Fedora Kinoite/Atomic hardening, NVIDIA setup, performance tuning

• Repository management — Multi-forge sync, policy auditing, RSR standardisation

• GitHub Actions validation — CodeQL, SPDX, permissions, SHA-pin checks

• Pre-commit hooks — Automated compliance enforcement

• Contractiles — Self-validating operational templates (must/trust/dust/lust/k9)

System Scripts

Script	Purpose
enhance-kinoite.sh	Comprehensive Fedora Kinoite hardening: btrfs compression, I/O scheduling, vm.swappiness, security policies
setup-kinoite-dev.sh	Developer environment setup: nerdctl, distrobox, Deno, asdf integration, language toolchains
nvidia-auto-setup.sh	Automated NVIDIA driver detection and installation for Fedora Atomic
system-optimize.sh	One-shot system performance optimisation (kernel params, filesystem, memory)
scheduled-optimize.sh	Scheduled variant of system-optimize for cron/systemd timers
migrate-to-eclipse.sh	Multi-phase storage migration: cache clearing, directory relocation, symlink creation for Eclipse drive
reboot.sh	Managed reboot with pre-reboot cleanup and logging
cloud-mount-watcher.sh	Monitor cloud mount points for health and availability

Repository Management

Script	Purpose
sync-repos-parallel.sh	Parallel GitHub repository synchronisation (8 workers via xargs)
sync-github-repos.sh	Single-threaded GitHub sync for sequential operations
sync-repos.sh	General-purpose repository sync wrapper
set-mirror-secrets.sh	Configure multi-forge mirror secrets (GitHub → GitLab/Bitbucket/Codeberg)
repo_auditor.exs	Elixir-based policy auditor with auto-fix: cruft cleanup, Containerfile enforcement, language violations, Justfile RISC-V targets
restructure-repos.jl	Julia script for RSR (Rhodium Standard Repository) directory standardisation
standardize-repos.jl	Julia script for batch repository standards enforcement

GitHub Integration

Script	Purpose
create-welcome-discussions.sh	Automate GitHub Discussions creation across repositories
init-wiki.sh	GitHub Wiki initialisation and templating
bootstrap-workers-rescript.sh	Cloudflare Workers bootstrapper with ReScript integration
check-changes.sh	Git status checker for CI/CD pipelines
reboot-tracker.mjs	Deno script to track system reboot reasons with journalctl/dmesg capture

GitHub Analysis Tools

Scripts in github-analysis/ for CI/CD validation:

Script	Purpose
analyze-failures.sh	Aggregate CI/CD failure analysis across workflows
analyze-failures-by-repo.sh	Per-repository CI/CD failure breakdown
check-codeql-actions.sh	Validate CodeQL workflow configuration
check-editorconfig.sh	Verify EditorConfig compliance
check-pages-status.sh	Check GitHub Pages deployment status

Pre-commit Hooks

Validation hooks in hooks/ for automated compliance enforcement:

Hook	Purpose
validate-spdx.sh	Verify SPDX license headers on all source files
validate-permissions.sh	Check GitHub Actions workflow permissions are explicit
validate-sha-pins.sh	Verify all Actions dependencies are SHA-pinned
validate-codeql.sh	Validate CodeQL configuration matches repository languages

Contractiles

Self-validating operational templates in contractiles/. See the Contractiles README for details.

Type	Purpose
must/	Mandatory operational contracts — invariants that must always hold
trust/	Trust boundary definitions — security perimeter contracts
dust/	Deprecation contracts — managed removal of old patterns
lust/	Aspiration contracts — desired future state definitions
k9/	Nickel-based configuration validators with three security levels (Kennel/Yard/Hunt)

Utility Scripts

Script	Purpose
organize_bookmarks.py	Browser bookmark organisation and deduplication
organize_edge_bookmarks.py	Microsoft Edge bookmark management
generate_bookmarks_html.py	HTML bookmark export for backup and portability

Note	Python scripts are legacy. New utility scripts should use Julia or Rust per language policy.

Usage

# Clone from any forge
git clone git@github.com:hyperpolymath/scripts.git
git clone git@gitlab.com:hyperpolymath/scripts.git
git clone git@codeberg.org:hyperpolymath/scripts.git

# List available just recipes
just

# Run the repository auditor
elixir repo_auditor.exs

# Sync all repos in parallel
./sync-repos-parallel.sh

# Install pre-commit hooks
cp hooks/* /path/to/repo/.git/hooks/

PanLL Integration

This repository provides infrastructure scripts that support PanLL indirectly:

• Repository auditing ensures PanLL modules meet RSR compliance

• Pre-commit hooks validate PanLL schemata files

• Multi-forge sync keeps PanLL mirrors current

• Contractile validators (k9) can validate PanLL workspace configurations

Direct PanLL panel scripts (schemata generation, workspace layout validation) are maintained within the PanLL monorepo itself.

License

This project is licensed under the Mozilla Public License, v. 2.0. See the LICENSE file for details.

SPDX-License-Identifier: CC-BY-SA-4.0 == Language Compliance Reports

check-language-compliance.sh requires Bash and Julia (using only Julia’s standard library). It writes a dated report under ${XDG_STATE_HOME}/scripts/language-compliance when XDG_STATE_HOME is absolute, or $HOME/.local/state/scripts/language-compliance otherwise. The logger rejects symlinks in the state path and requires the state base, scripts, and language-compliance directories to belong to the invoking user. Reports are private (directory mode 0700, log mode 0600).

Run the logging regression checks with bash tests/check-language-compliance.sh.