reconcile work repository paths

docs/plans/workflow-system.md

@@ -13,14 +13,14 @@ and add no abstraction without a demonstrated repeated need.
 - Branch: `chore/workflow-system`
 - Baseline: `nix flake check --no-build --quiet` passed on 2026-09-05; only
   the existing dirty-tree and unknown `modules` output warnings were emitted.
-- Next: checkpoint this plan and the discovery document, then reconcile the two
+- Next: resolve the dashboard converter and private-state decisions, then
-  `yookr-dashboard-new` copies before moving repositories.
+  finish machine-local cleanup and close the ownership tranche.
 
 ## Progress
 
 | Batch | State | Evidence or blocker |
 | --- | --- | --- |
-| Bootstrap and repository ownership | Active | Inventory captured; dashboard reconciliation audit running |
+| Bootstrap and repository ownership | Active | Repositories moved intact; dashboard and machine-local cleanup decisions remain |
 | Declarative workstation foundation | Pending | Depends on canonical paths |
 | Repository contracts and workbench | Pending | Depends on repository reconciliation |
 | Desktop, agents, notes, PIM, transcription | Pending | Independent pilots follow foundation changes |
@@ -30,12 +30,17 @@ and add no abstraction without a demonstrated repeated need.
 
 | Repository | Branch | Commit | Purpose |
 | --- | --- | --- | --- |
-| NixOS configuration | `chore/workflow-system` | Pending | Discovery and execution baseline |
+| NixOS configuration | `chore/workflow-system` | `d7dcc7b` | Discovery and execution baseline |
 
 ## Human actions
 
-- None currently. Consequential moves, destructive cleanup, credentials,
+- Decide whether the one-time legacy dashboard BSON migration is still needed.
-  activation, and empirical pilot decisions will be surfaced here before use.
+- Confirm whether the authoritative dashboard copy's `.env` and `.data` should
+  supersede the divergent private state in the sync copy.
+- Relocate the mode-0644 `/home/kiri/work/SECRETS` file to an approved private
+  owner and restrict it; its contents have not been inspected.
+- Destructive cleanup, credentials, activation, and empirical pilot decisions
+  will be surfaced here before use.
 
 ## Decisions and discoveries
 
@@ -44,4 +49,12 @@ and add no abstraction without a demonstrated repeated need.
   remote-tracking branch.
 - Preserve the sync copy until authored changes and raw/generated data have
   been classified. Do not commit its database dump.
+- Active repositories now live under `/home/kiri/dev/work`; inactive material
+  is preserved intact under `.archive`, and the registered dashboard sensor
+  worktree is under `.worktrees`.
+- The sync dashboard's staged application changes are superseded. Its unique
+  `convert_dashboards.py` is still referenced, but absent, in the authoritative
+  flake. Its exports, `.env`, and MongoDB state remain untouched and private.
+- The obsolete `feat/echarts-domain` worktree path is absent; its branch remains
+  and its prunable metadata has not been removed.
 - Run independent pilots in parallel, but gate every retirement separately.

modules/capabilities/git.nix

@@ -66,12 +66,20 @@ in
             contents = personal.git;
           }
           {
-            condition = "gitdir:${config.xdg.userDirs.projects}/";
+            condition = "gitdir:${config.xdg.userDirs.projects}/work/";
+            contents = work.git;
+          }
+          {
+            condition = "gitdir:${config.xdg.userDirs.projects}/own/";
             contents = personal.git;
           }
           {
-            condition = "gitdir:${config.home.homeDirectory}/work/";
+            condition = "gitdir:${config.xdg.userDirs.projects}/ext/";
-            contents = work.git;
+            contents = personal.git;
+          }
+          {
+            condition = "gitdir:${config.xdg.userDirs.projects}/forks/";
+            contents = personal.git;
           }
         ];
       };