+}
+
+### common exports
+export CHARSET=${CHARSET:-UTF-8}
+export LANG=${LANG:-en_US.UTF-8}
+
+## alternative home for pulling in bin & config, used for zsu
+[[ -v _sev_home ]] || export _sev_home=$HOME
+
+## fix broken term
+# NOTE: we do this here instead of .zshrc since we might print stuff
+if [[ -t 1 ]] { # only if stdout is tty
+ [[ ! -v TERM ]] && export TERM=xterm-256color >/dev/null 2>&1
+ if [[ $#terminfo -eq 0 ]] {
+ _oldterm=$TERM
+ export TERM=xterm >/dev/null 2>&1
+ [[ -o interactive ]] &&
+ print -P "%F{red}!!! Can't find terminfo for $_oldterm, using $TERM%f"
+ unset _oldterm
+ }
+}
+
+## path
+if [[ ! -v _sev_setup_path || -o login ]] {
+ _sev_setpath
+ # NOTE: do not set _sev_setup_path, it is set in zprofile
+}
+
+### home dir setup & additional exports
+# XXX: traditionally, zshenv should just contain exports, and not touch the
+# filesystem. however, our TMPDIR and XDG vars rely on mutable user paths
+# that may not exist, and as such need to be set up before the rest of the
+# system can use them. this is important as some environments include code
+# in the global zprofile, or source scripts of other shells in the global
+# zprofile, that may rely on our desired dir structure and vars pointing
+# to it. for example, `flatpak-bindir.sh` in the Arch Linux flatpak
+# package references $XDG_DATA_HOME with no fallback. since we do special
+# handling for these vars before we export them, we're forced to do it all
+# here instead of at the top of the zprofile.
+
+## xdg local dir
+# NOTE: need this for tmp, so confirm it exists.
+# XXX: perms are not specified for XDG dirs except runtime. 760 makes the most
+# sense, but we need to be a bit more permissive for zsu.
+[[ -e ~/.local ]] && chmod 755 ~/.local || mkdir -pm766 ~/.local
+
+## tmp
+# NOTE: specs say that POSIX tmp and XDG runtime directories should exist
+# until the last session is logged out (POSIX can exist for longer).
+# since we can't reliably keep track of sessions in a cross-platform
+# manner, the current implementation should use a separate directory per
+# toplevel session (i.e. SHLVL=1). this should placate most applications,
+# though it is not expressly spec compliant. this may also cause problems
+# with disowned applications that still try to use the directories after
+# the toplevel shell has already logged out and the dirs removed, but the
+# chances of that are slim. this also needs to be adjusted for usermode
+# Xorg, as it requires $PREFIX/tmp/.X11-unix on most installs.
+if [[ ! -v _sev_tmp ]] {
+ _sev_tmp=~/.local/tmp
+ # create personal TMPDIR under system tmp
+ # NOTE: under proot with uid remapping and shared /tmp, we can reuse old
+ # dir, without worrying about permission issues; intended for termux.
+ t=${TMPDIR:-${TEMPDIR:-${TEMP:-${TMP:-${${TMPPREFIX%/zsh}:-/tmp}}}}}/.home-${_sev_proot_real_user:-$LOGNAME}
+ [[ -e $t ]] || mkdir -m700 $t 2>/dev/null
+ if [[ ! -d $t ]] {
+ # fallback TMPDIR to bare local directory or existing softlink
+ [[ -o interactive ]] &&
+ print -P "%F{orange}*** Can't create tmp dir $t, using $_sev_tmp%f"
+ [[ -h $_sev_tmp && ! -d _sev_tmp ]] && unlink $_sev_tmp 2>/dev/null
+ [[ ! -e $_sev_tmp ]] && mkdir -m700 $_sev_tmp 2>/dev/null
+ if [[ ! -d $_sev_tmp ]] {
+ _sev_tmp=${$(mktemp 2>/dev/null):-/tmp}
+ [[ -o interactive ]] &&
+ print -P "%F{red}!!! Can't create tmp dir, using $_sev_tmp%f"
+ }
+ } elif [[ -e $_sev_tmp && ! -h $_sev_tmp ]] {
+ # non-softlink node is on our local dir
+ [[ -o interactive ]] &&
+ print -P "%F{orange}*** $_sev_tmp exists, can't link to tmp dir $t, ignoring it%f"
+ _sev_tmp=$t
+ } else {
+ if [[ ! -v $_sev_tmp_keep_link && -h $_sev_tmp && $_sev_tmp:P != $t:P ]] {
+ [[ -o interactive ]] &&
+ print -P "%F{orange}*** $_sev_tmp links to ${_sev_tmp:P} and not ${t:P}, unlinking it%f"
+ # NOTE: ln -f doesn't seem to work reliably with softlink
+ # directories, so explicitly remove the target if it exists
+ # XXX: potential race condition
+ # TODO: handle cleanup of old dir if it doesn't match?
+ unlink $_sev_tmp 2>/dev/null
+ }
+ if [[ ! -e $_sev_tmp ]] {
+ # link local dir to tmp dir
+ ln -s $t $_sev_tmp 2>/dev/null
+ }
+ }
+ # ensure dir is clean
+ _sev_zcleanup tmp
+ # finally create our subdir for this session
+ t=$_sev_tmp/.session.$$
+ if ! mkdir -m700 $t 2>/dev/null; then
+ [[ -o interactive ]] &&
+ print -P "%F{red}!!! Can't create session tmp subdir $t, using $_sev_tmp%f"
+ t=$_sev_tmp
+ fi
+ export _sev_tmp TMPDIR=$t TEMPDIR=$t TEMP=$t TMP=$t TMPPREFIX=$t/zsh
+ unset t
+}
+
+## xdg
+if [[ ! -v _sev_setup_xdg ]] {
+ ## merge with any existing dirs and remove duplicates using unique arrays
+ # NOTE: we are accepting whatever value might be set for CONFIG and DATA;
+ # if it wasn't set, we just use default and leave it unset
+ # NOTE: include and then remove CONFIG_HOME and DATA_HOME to ensure they
+ # are not present in the array if it was added before we got to it
+
+ # source user dirs before other vars; technically it is against spec to
+ # include any of the below dirs there, but you never know what crazy shit
+ # people will do. I rather handle them sanely with our own code than let
+ # them override after the fact.
+ [[ -f $XDG_CONFIG_HOME/user-dirs.dirs ]] &&
+ emulate sh -c "source $XDG_CONFIG_HOME/user-dirs.dirs"
+
+ typeset -UT XDG_DATA_DIRS xdg_data_dirs
+ [[ -v XDG_DATA_HOME ]] && export XDG_DATA_HOME
+ [[ -e ${XDG_DATA_HOME:-~/.local/share} ]] ||
+ mkdir -m760 ${XDG_DATA_HOME:-~/.local/share}
+ xdg_data_dirs=($XDG_DATA_HOME ${XDG_DATA_DIRS:+${xdg_data_dirs%%/}}
+ /{usr{,/local,/pkg},opt{,/*{/*,}}}/share(N))
+ xdg_data_dirs=($xdg_data_dirs(/N))
+ export XDG_DATA_DIRS
+
+ typeset -UT XDG_CONFIG_DIRS xdg_config_dirs
+ [[ -v XDG_CONFIG_HOME ]] && export XDG_CONFIG_HOME
+ [[ -e ${XDG_CONFIG_HOME:-~/.config} ]] ||
+ mkdir -m760 ${XDG_CONFIG_HOME:-~/.config}
+ # I am of the belief .local should follow FHS /usr/local...
+ [[ -e ~/.local/etc ]] || ln -s ${XDG_CONFIG_HOME:-~/.config} ~/.local/etc
+ xdg_config_dirs=($XDG_CONFIG_HOME ${XDG_CONFIG_DIRS:+${xdg_config_dirs%%/}}
+ {,/usr{,/local,/pkg},opt{,/*{/*,}}}/etc/xdg(N))
+ xdg_config_dirs=($xdg_config_dirs(/N))
+ export XDG_CONFIG_DIRS
+
+ [[ -v XDG_STATE_HOME ]] && export XDG_STATE_HOME
+ [[ -e ${XDG_STATE_HOME:-~/.local/state} ]] ||
+ mkdir -m760 ${XDG_STATE_HOME:-~/.local/state}
+
+ if [[ -v XDG_CACHE_HOME ]] {
+ export XDG_CACHE_HOME
+ } else {
+ export XDG_CACHE_HOME=$_sev_tmp/.xdg.cache
+ }
+ [[ -e ${XDG_CACHE_HOME:-~/.cache} ]] ||
+ mkdir -m700 ${XDG_CACHE_HOME:-~/.cache}
+
+ # NOTE: this can be set by systemd or other pre-shell supervisor, and if
+ # any services were started such as pipewire, we need to use the
+ # existing runtime dir to preserve runtime state
+ if [[ -v XDG_RUNTIME_DIR ]] {
+ export XDG_RUNTIME_DIR
+ } else {
+ # make runtime dir in our session-specific tmpdir
+ export XDG_RUNTIME_DIR=$TMPDIR/.xdg.runtime
+ # same as in tmpdir creation, ensure dir doesn't exist
+ if [[ -h $XDG_RUNTIME_DIR ]] {
+ unlink $XDG_RUNTIME_DIR 2>/dev/null
+ } elif [[ -e $XDG_RUNTIME_DIR ]] {
+ rm -rf $XDG_RUNTIME_DIR 2>/dev/null
+ }
+ }
+ [[ ! -e $XDG_RUNTIME_DIR ]] &&
+ mkdir -m700 $XDG_RUNTIME_DIR 2>/dev/null
+
+ export _sev_setup_xdg=
+}
+
+### app setup & exports
+# NOTE: we set these up here since some scripts might need them
+## gpg home
+if [[ ! -v GNUPGHOME ]] {
+ export GNUPGHOME=${XDG_CONFIG_HOME:-~/.config}/gnupg
+ # move existing gnupg dir to our new home
+ if [[ -d ~/.gnupg && ! -d $GNUPGHOME ]] {
+ mv ~/.gnupg $GNUPGHOME
+ }
+}
+
+## perl local lib
+[[ ! -v PERL_LOCAL_LIB_ROOT && -v commands[perl] &&
+ -d ${XDG_DATA_HOME:-~/.local/share}/perl5/lib/perl5 ]] &&
+ eval $(perl -I${XDG_DATA_HOME:-~/.local/share}/perl5/lib/perl5 \
+ -Mlocal::lib=${XDG_DATA_HOME:-~/.local/share}/perl5 2>/dev/null)
+
+## go
+if [[ -v commands[go] ]] {
+ [[ ! -v GOPATH ]] && export GOPATH=${XDG_DATA_HOME:-~/.local/share}/go:~/go
+ [[ ! -v GOBIN ]] && export GOBIN=~/.local/bin