---
description: Family Mac + Cursor — shared conventions for Ilia and Irina
alwaysApply: true
---

# Family machine (Cursor)

This Mac uses shared **dotfiles** (`ilia/dotfiles`). Homelab apps and passwords
live in Vaultwarden (`vault.levkin.ca`); family docs live in `ilia/levkin`.

## What to clone

| Repo | Why |
|------|-----|
| `ilia/dotfiles` | Shell + Cursor rules/skills (`./install.sh`) |
| `ilia/personal-scripts` | Gmail cleanup / household scripts (Irina: start here) |
| `ilia/ansible` | Infra + Make targets (optional for Irina; needed for `hsp` / vault helpers) |
| `ilia/levkin` | Family knowledge base (health, apps, how-tos) |

Default paths: `~/Documents/code/{dotfiles,personal-scripts,ansible,levkin}`.

## Irina Gmail / digital cleanup

1. Vaultwarden item **"Gmail App Password (Ira)"** (generate in Google Account →
   App passwords).
2. In `personal-scripts`: `cp .env.irina.example .env.irina` and fill `GMAIL_*`.
3. Cursor prompt: `personal-scripts/docs/irina-cursor-onboarding-prompt.md`
   (or ansible guide if that copy is still present).
4. Prefer `make gmail-audit-irina` / `gmail-cleanup-irina` with `DRY_RUN=1`
   before any trash. Never commit `.env.irina`.

## Agent guardrails

- Do **not** open Ansible Vault or run production playbooks unless Ilia asks.
- Do **not** invent medical/financial facts — only report what emails/docs show.
- Secrets stay in Vaultwarden / gitignored `.env*` — never in git.
- Prefer `make` targets in the relevant repo over ad-hoc one-off scripts.

## Useful shell (after `./install.sh`)

- `cdc` — `~/Documents/code`
- `mps` — `make -C personal-scripts`
- `mk` / `hsp` / `hvk` — ansible helpers (need ansible clone + creds)