Maintenance workflow

Routine maintenance should be deliberate and lane-native.

Source checks

Before packaging or committing repo changes, run:

just check

For documentation-heavy changes, also consider:

just lint-extra
just docs-check
pnpm docs:build

For workflow metadata or shell-helper changes, keep the heavier helpers explicit:

just actions-lint
just shell-tests

Mise updates

The global mise inventory is latest-heavy by design, but updates should be separate from unrelated dotfile edits. Follow the policy in Quality Gates and keep rollback notes when a shared tool needs a temporary pin.

Droplet is the exception to broad shared mise maintenance. just upgrade preview on a droplet shows apt upgrade simulation and the core droplet bootstrap command. just upgrade on a droplet runs apt update/upgrade and scripts/install-prereqs-droplet.sh --core only. The optional default droplet agent/SSH toolset stays behind the separate explicit commands:

scripts/install-prereqs-droplet.sh --dry-run --codex-tools
scripts/install-prereqs-droplet.sh --codex-tools

Apply checks

After applying dotfiles on a Unix-like host, run:

~/.local/bin/dotfiles-smoke-test --fast

Native Windows should run its Windows smoke lane after applying.