alot/config was symlinked directly into ~/.config/alot, and mail-notmuch.sh
wrote real account details straight back into that tracked repo file — so a
fresh clone/deployment inherited a real name/email/maildir path as alot's
configured identity by default, and any re-run of the install risked
committing real PII back into the repo.
alot/config is now a template with placeholder identity (bindings unchanged).
shell-setup.sh seeds it into ~/.config/alot/config via a one-time copy
instead of a symlink, and mail-notmuch.sh writes real account details into
that local copy only — never back into the tracked file.
No password was ever involved: msmtp/mbsync credentials live in
~/.msmtprc/~/.mbsyncrc, which were never tracked in the repo, in the current
tree or anywhere in git history (verified via git log -p across all history).
esc closes the search buffer (exits alot only if it is the last buffer).
/ opens a prompt pre-filled with the current query for regex refinement.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
In the inbox/search view, exit has nowhere to go back to so it quit
alot entirely. Esc is now only bound in thread/taglist/bufferlist where
it navigates back without closing the application.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>