feat: copilot-ssh reachability pre-flight, Windows Terminal profile and PATH tweaks

[DevSecNinja]

Summary

Four related quality-of-life changes to the shell/Windows setup.

fix(fastfetch): relative times no longer freeze

The status cache baked the rendered duration into the cache file, so
ran 29s ago stayed static until the next refresh. Collectors now store
absolute epoch tokens (@ago:<epoch>@ / @in:<epoch>@) and the section
commands expand them against the current clock on every fastfetch run,
using bash builtins only so the login hot path stays fork-free. An elapsed
timer renders next due.

feat(helpers): copilot-ssh reachability pre-flight

Runs in bash, fish and PowerShell before the 1Password unlock:

1. Resolve the destination with ssh -G (honours ~/.ssh/config aliases,
   HostName/Port overrides and -o flags).
2. Probe the TCP port with a hard ~3s timeout (nc, bash /dev/tcp, or a
   .NET TcpClient), so an unreachable host fails fast instead of hanging.
3. If the probe fails and the Azure CLI is present, look the host up with
   az vm list -d — by VM name, by the short form of an FQDN
   (vm01.example.com also matches vm01), and by public/private IP.
4. Offer to az vm start a stopped/deallocated VM, wait for the port, then
   connect. Running-but-unreachable and ambiguous matches abort with
   actionable guidance.

Tunable with COPILOT_SSH_SKIP_PREFLIGHT, COPILOT_SSH_PREFLIGHT_TIMEOUT,
COPILOT_SSH_START_TIMEOUT and COPILOT_SSH_ASSUME_YES.

feat(windows): Windows Terminal profile for copilot-ssh

Set-WindowsTerminalCopilotProfile surgically patches settings.json with a
fixed-GUID profile that opens PowerShell and runs copilot-ssh <host>.
Idempotent, preserves unrelated settings. The host comes from the new
copilotSshHost chezmoi variable, defaulting to the
svlazdev.<privateDomain> alias already declared in the managed ssh config.

feat(windows): OneDrive Portable Programs on PATH

Persists %OneDrive%\Portable Programs in the user-scope PATH (survives
reboots, visible to GUI apps) and adds it to the current PowerShell session.
The persistent write goes through the registry directly, preserving the
existing value name casing and RegistryValueKind, so REG_EXPAND_SZ
entries like %USERPROFILE%\bin keep expanding instead of being baked in by
[Environment]::SetEnvironmentVariable. Broadcasts WM_SETTINGCHANGE.

Testing

• ./tests/bash/run-tests.sh --ci — green except two pre-existing
  log-structured.bats JSON failures (backslash double-escaping in
  log.sh, untouched by this PR).
• Invoke-Pester ./tests/powershell — 439 passed, 0 failed.
• shellcheck -x / shfmt --diff / fish -n clean on all changed files.

Notes

After applying, run ~/.config/fastfetch/status.sh refresh --force once to
replace the old frozen cache line.

[Copilot]

Pull request overview

This PR improves day-to-day shell and Windows ergonomics in this dotfiles repo by (1) fixing fastfetch status relative-time caching so it doesn’t “freeze”, (2) adding a reachability pre-flight to copilot-ssh across bash/fish/PowerShell (with optional Azure VM start assistance), and (3) adding Windows automation for a Windows Terminal “Copilot SSH” profile plus a persistent/user-scope OneDrive “Portable Programs” PATH entry.

Changes:

• Fastfetch status cache now stores absolute epoch tokens and renders relative times at emit-time.
• copilot-ssh gains a TCP reachability pre-flight and Azure VM recovery flow across shells, with new unit tests.
• Windows setup adds an idempotent Windows Terminal profile patcher and a PATH persistence helper (with Pester coverage), plus docs/chezmoi-variable wiring.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
tests/powershell/WindowsTerminal.Tests.ps1	Updates fixtures handling and adds unit tests for the new Windows Terminal Copilot profile helper.
tests/powershell/Profile.Tests.ps1	Registers new Copilot SSH helper functions as private helpers for module export hygiene tests.
tests/powershell/PortableProgramsPath.Tests.ps1	New Pester coverage for OneDrive “Portable Programs” PATH persistence + profile session behavior.
tests/powershell/CopilotSsh.Tests.ps1	Adds unit tests validating reachability pre-flight behavior and helper privacy.
tests/bash/fastfetch-status.bats	Extends Bats coverage for epoch-token caching and dynamic relative-time rendering.
tests/bash/copilot-ssh.bats	Adds Bats coverage for reachability probe + Azure-assisted recovery flow.
home/dot_config/shell/functions/copilot-ssh.sh	Implements bash/zsh pre-flight probe + Azure VM recovery helpers.
home/dot_config/fish/functions/copilot_ssh.fish	Implements fish pre-flight probe + Azure VM recovery helpers.
home/dot_config/powershell/modules/DotfilesHelpers/Public/CopilotSsh.ps1	Implements PowerShell pre-flight probe helpers and integrates into Connect-CopilotSsh.
home/dot_config/powershell/modules/DotfilesHelpers/Public/WindowsTerminal.ps1	Adds Set-WindowsTerminalCopilotProfile to surgically patch Windows Terminal settings.json.
home/dot_config/powershell/modules/DotfilesHelpers/DotfilesHelpers.psd1	Exports the new Windows Terminal Copilot profile function.
home/dot_config/powershell/profile.ps1	Adds cheap per-session PATH augmentation for OneDrive “Portable Programs”.
home/dot_config/fastfetch/executable_status.sh	Switches to epoch-token caching and on-demand relative-time rendering for fastfetch status.
home/.chezmoiscripts/windows/run_onchange_set-windows-terminal-copilot-profile.ps1.tmpl	New run-onchange script to keep Windows Terminal Copilot SSH profile configured.
home/.chezmoiscripts/windows/run_onchange_add-portable-programs-path.ps1	New run-onchange script to persist OneDrive “Portable Programs” in user PATH via registry.
home/.chezmoi.yaml.tmpl	Introduces copilotSshHost variable wiring into chezmoi data.
docs/customization.md	Documents the Windows PATH behavior.
docs/copilot-cli.md	Documents the new reachability pre-flight and Azure VM behavior.
docs/chezmoi-variables.md	Documents the new copilotSshHost chezmoi variable.

Comments suppressed due to low confidence (1)

home/dot_config/fastfetch/executable_status.sh:87

• _now() still forks date on bash versions without EPOCHSECONDS, despite the goal of keeping the emit path cheap. Bash’s builtin printf time format can provide epoch seconds without spawning a process on many older bash versions too.

# _now -> current epoch seconds (bash 5 builtin when available).
_now() {
    if [ -n "${EPOCHSECONDS:-}" ]; then
        printf '%s\n' "${EPOCHSECONDS}"
    else
        date +%s
    fi
}