macOS Software Management
Keep installs reproducible in ~/.dotfiles:
- Formulae, casks, App Store apps:
Brewfile - Project/default runtimes:
mise.toml - Global versioned tools:
mise/config.toml - Secret references:
fnox/config.toml; values stay in Keychain
Rules
- Update the appropriate manifest before installing or removing anything.
- Install only the requested item directly; use
brew bundle installonly when provisioning the full manifest. - Prefer
brewfor macOS packages/apps andmisefor runtimes or versioned developer tools. - Verify cask names and
masIDs before editing. - Never run
brew bundle cleanup --forcewithout explicit approval. - Never commit secret values.