chore: prune stale branches, worktrees, and dangling references

docs/DESIGN-keybindings.md

@@ -53,11 +53,11 @@ Use `Ctrl+X Ctrl+E` as the open-in-editor alternative in Claude Code when locked
 
 | File | What it controls |
 |---|---|
-| `src/chezmoi/dot_config/zellij/config.kdl` | All Zellij keybindings |
-| `src/chezmoi/conf.d/macos.conf` (Ghostty) | `macos-option-as-alt = true` |
-| `src/chezmoi/conf.d/keybinds.conf` (Ghostty) | `Cmd+Left/Right/Backspace` → readline sequences |
-| `Library/Application Support/{Code,Cursor}/User/modify_keybindings.json.tmpl` | Shift+Enter in VS Code/Cursor (macOS) |
-| `dot_config/{Code,Cursor}/User/modify_keybindings.json.tmpl` | Shift+Enter in VS Code/Cursor (Linux/WSL) |
+| `src/chezmoi/dot_config/zellij/config.kdl.tmpl` | All Zellij keybindings |
+| `src/chezmoi/dot_config/ghostty/conf.d/macos.conf` | `macos-option-as-alt = true` |
+| `src/chezmoi/dot_config/ghostty/conf.d/keybinds.conf` | `Cmd+Left/Right/Backspace` → readline sequences |
+| `src/chezmoi/Library/Application Support/{Code,Cursor}/User/keybindings.json.tmpl` | Shift+Enter in VS Code/Cursor (macOS) |
+| `src/chezmoi/dot_config/{Code,Cursor}/User/keybindings.json.tmpl` | Shift+Enter in VS Code/Cursor (Linux/WSL) |
 
 ---
 

src/chezmoi/.chezmoi.toml.tmpl

@@ -138,9 +138,6 @@ installation_method = {{ if eq .chezmoi.os "linux" }}"apt"{{ else }}"none"{{ end
 installation_method = {{ if eq .chezmoi.os "linux" }}"apt"{{ else }}"none"{{ end }}
 
 # Local Python Tools (via uv) Installation Methods
-[data.local_bin_tools.claude_statusline]
-installation_method = "uninstall"
-
 [data.local_bin_tools.termstatus]
 installation_method = "dotfiles.uv"
 
@@ -153,9 +150,6 @@ installation_method = "dotfiles.uv"
 [data.local_bin_tools.termbud]
 installation_method = "dotfiles.uv"
 
-[data.local_bin_tools.agent_run]
-installation_method = "uninstall"
-
 [data.local_bin_tools.sandboxr]
 installation_method = "dotfiles.uv"
 

src/chezmoi/.chezmoidata/ai/sandbox.toml

@@ -64,7 +64,7 @@ gpg_agent = false
 [ai.sandbox.profiles.srt-claude]
 enabled = true
 # srt (not "auto"): domain-allowlisted egress, no hand-rolled network
-# enforcement. See docs/HANDOFF-sandboxr-runtime-decision.md.
+# enforcement. See #695 (srt-primary decision, backend).
 backend = "srt"
 project_write = true
 network = "allowlist"

src/chezmoi/.chezmoidata/bin/mise.toml

@@ -64,7 +64,7 @@ package_manager = "bun"
   [mise.global_tools.gemini-cli]
   version = "0.42.0"
 
-  # sandboxr's srt backend (docs/HANDOFF-sandboxr-runtime-decision.md):
+  # sandboxr's srt backend (#695: srt-primary decision, backend):
   # enforcement runtime for domain-allowlisted sandboxing. No registry
   # shorthand exists for this package, so the tool key is the fully
   # qualified npm backend spec. Resolved at runtime via `mise where`

src/chezmoi/.chezmoidata/local_bin_tools.toml

@@ -3,10 +3,6 @@
 # source_dir: path relative to local_bin_tools_root (defaults to workingTree)
 # package_name: uv package name (used for uninstall)
 
-# Renamed to termstatus; the non-uv method triggers the uninstall branch.
-[local_bin_tools.claude_statusline]
-package_name = "claude-statusline"
-
 [local_bin_tools.termstatus]
 source_dir = "src/python/termstatus"
 package_name = "termstatus"
@@ -23,9 +19,6 @@ package_name = "transcribe"
 source_dir = "src/python/termbud"
 package_name = "termbud"
 
-[local_bin_tools.agent_run]
-package_name = "agent-sandbox"
-
 [local_bin_tools.sandboxr]
 source_dir = "src/python/sandboxr"
 package_name = "sandboxr"

src/chezmoi/dot_config/mise/AGENTS.md

@@ -17,8 +17,8 @@
 ## Lockfile
 
 `~/.config/mise/mise.lock` is regenerated locally by `mise lock` and is **not tracked in this repo** — `.chezmoiignore` blocks it (`**/.config/mise/mise.lock`) so per-machine drift doesn't pollute the chezmoi diff.
-Locking is **enforced during deployment** via `MISE_LOCKED=1` in the `run_after_onchange_06_trust-install-global-mise-tools.sh.tmpl` script, so whatever lockfile is locally present is honored at install time.
-The deployed `config.toml` defaults to `locked = false` so local projects aren't forced to use lockfiles by default.
+Locking is **relaxed during deployment** via `MISE_LOCKED=0` in the `run_onchange_after_06_trust-install-global-mise-tools.sh.tmpl` script, so global tool installs aren't blocked by a missing or stale lockfile.
+The deployed `config.toml` has no explicit `locked` setting, so mise's own default (unlocked) applies.
 
 ### Updating tools and relocking
 
@@ -35,4 +35,4 @@ Do not substitute alternative commands — especially in Jules, where `mise lock
    ```
    MISE_LOCKED=0 mise -C ~ lock --global
    ```
-   The `-C ~` flag is required — running from the dotfiles repo root causes global-only tools (e.g. `uv`) to be excluded because the local `.mise.toml` claims them.
+   The `-C ~` flag is required — running from the dotfiles repo root causes global-only tools (e.g. `uv`) to be excluded because the repo-root `mise.toml` claims them.