Make PlugClean interactive in install.sh

Previously install.sh ran `_vim_run 'PlugClean!'` unconditionally before
PlugInstall. PlugClean with bang removes any directory under
~/.vim/plugged not declared in the active profile's g:plugs, without
confirmation — silently nuking plugins a user has manually cloned to try
out, plus leftovers from older profile config (Goyo, Limelight, etc.).

Replace with a `list_extra_plugins` helper that runs a Vim subprocess
with all opt-in flags forced on and `$TMUX = '1'`, so the declared set
covers every plugin any chopsticks profile/flag combination could
register. Conditional plugins (vim-tmux-navigator, auto-pairs) are
therefore never flagged as extras.

When extras are detected:
- interactive: list them, ask before running PlugClean!
- --yes: leave in place, instruct the user to run :PlugClean manually
- otherwise (no extras): skip PlugClean entirely (saves an 80ms Vim
  launch on the common case)

Closes #64

CHANGELOG.md

@@ -36,6 +36,12 @@
 
 ### Changed
 
+- `set exrc`/`set secure` are now opt-in via `g:chopsticks_enable_exrc = 1`;
+  Vim no longer sources project-local `.vimrc`/`.exrc` from the working
+  directory by default
+- Normal-mode `,F` (reindent the entire file with `gg=G`) is now opt-in
+  via `g:chopsticks_enable_reindent_file = 1`; visual-mode `,F` (reindent
+  selection) stays as the default since it's bounded by the user's pick
 - `,?` cheat sheet is now profile-aware and hides LSP/ALE/preview/UndoTree keys
   when those features are disabled
 - Module reload/source paths now use `fnameescape()` so installs in paths with

CONTRIBUTING.md

@@ -2,7 +2,7 @@
 
 ## Rules
 
-1. **No Node.js dependencies.** The LSP engine is pure VimScript. Some language servers need Node — that's fine. The config itself must not.
+1. **No Node.js in the Vim runtime.** Plugins must work with pure VimScript — no coc.nvim or other Node-backed completion engines. External CLIs (prettier, eslint, markdownlint, stylelint, tsc) installed via npm are fine; ALE shells out to them as optional system tools, not as part of the Vim runtime.
 2. **Startup matters.** Run `vim -u .vimrc -i NONE --startuptime /tmp/s.log -es -N -c qa!` before and after. If your change adds >1ms, it needs a good reason.
 3. **Works on TTY.** Test over SSH. If it breaks in a terminal without true color, fix it or gate it behind `g:is_tty`.
 4. **Native-first keymaps.** Enhance Vim's native behavior instead of replacing it. Do not override built-in motions, operators, text objects, or help-oriented keys for discoverability alone; prefer leader-prefixed or otherwise non-conflicting ergonomic mappings.

README.md

@@ -87,6 +87,8 @@ let g:chopsticks_enable_sudo_save_bang = 1 " optional: :w!! sudo save
 let g:chopsticks_enable_completion_keymaps = 1 " optional: Tab/Enter completion
 let g:chopsticks_enable_auto_pairs = 1 " optional: automatic pair insertion
 let g:chopsticks_enable_terminal_keymaps = 1 " optional: terminal Esc/Ctrl navigation
+let g:chopsticks_enable_exrc = 1 " optional: source project-local .vimrc/.exrc from CWD
+let g:chopsticks_enable_reindent_file = 1 " optional: ,F reindents the entire file
 ```
 
 `minimal` avoids LSP, ALE, completion plugins, extra language syntax plugins,
@@ -123,7 +125,7 @@ Esc       exit insert mode         ,?    cheat sheet
 
 ### Edit
 
-`,S`+2ch jump | `gc` comment | `cs"'` surround | `Alt+j/k` move line | `,u` undo tree | `,y` clipboard | `,*` replace word | `,F` re-indent | `,W` strip whitespace | `[<Space>` `]<Space>` blank lines
+`,S`+2ch jump | `gc` comment | `cs"'` surround | `Alt+j/k` move line | `,u` undo tree | `,y` clipboard | `,*` replace word | `,F` re-indent (v) | `,W` strip whitespace | `[<Space>` `]<Space>` blank lines
 
 ### Git
 
@@ -230,7 +232,7 @@ More in the [wiki](https://github.com/m1ngsama/chopsticks/wiki).
 
 ## Contributing
 
-See [CONTRIBUTING.md](CONTRIBUTING.md). The two rules that matter: no Node.js dependencies, and don't regress startup time.
+See [CONTRIBUTING.md](CONTRIBUTING.md). The two rules that matter: no Node.js in the Vim runtime, and don't regress startup time.
 
 ## License
 

modules/core.vim

@@ -183,8 +183,10 @@ endif
 
 " ── Project-Local Config ────────────────────────────────────────────────────
 
-set exrc
-set secure
+if get(g:, 'chopsticks_enable_exrc', 0)
+    set exrc
+    set secure
+endif
 set sessionoptions=blank,buffers,curdir,folds,help,tabpages,winsize,winpos,terminal
 
 if has("patch-8.1.0360")

modules/tools.vim

@@ -21,7 +21,9 @@ endfunction
 
 " ── Utilities ──────────────────────────────────────────────────────────────
 
-nnoremap <leader>F gg=G``
+if get(g:, 'chopsticks_enable_reindent_file', 0)
+    nnoremap <leader>F gg=G``
+endif
 vnoremap <leader>F =
 nnoremap <leader>wa :wa<CR>
 

scripts/test.sh

@@ -236,6 +236,27 @@ check_vim() {
         -c 'if has("terminal") && (maparg("<Esc><Esc>", "t") !~# "<C-\\\\><C-N>" || maparg("<C-h>", "t") !~# "<C-W>h" || maparg("<C-j>", "t") !~# "<C-W>j" || maparg("<C-k>", "t") !~# "<C-W>k" || maparg("<C-l>", "t") !~# "<C-W>l") | cquit | endif' \
         -c 'qa!' 2>&1
 
+    XDG_CONFIG_HOME="$EMPTY_XDG" vim -u .vimrc -i NONE -es -N \
+        -c 'if &exrc || &secure | cquit | endif' \
+        -c 'qa!' 2>&1
+
+    XDG_CONFIG_HOME="$EMPTY_XDG" vim -u NONE -i NONE -es -N \
+        -c 'let g:chopsticks_enable_exrc = 1' \
+        -c 'source .vimrc' \
+        -c 'if !&exrc || !&secure | cquit | endif' \
+        -c 'qa!' 2>&1
+
+    XDG_CONFIG_HOME="$EMPTY_XDG" vim -u .vimrc -i NONE -es -N \
+        -c 'if maparg(",F", "n") !=# "" | cquit | endif' \
+        -c 'if maparg(",F", "v") !~# "=" | cquit | endif' \
+        -c 'qa!' 2>&1
+
+    XDG_CONFIG_HOME="$EMPTY_XDG" vim -u NONE -i NONE -es -N \
+        -c 'let g:chopsticks_enable_reindent_file = 1' \
+        -c 'source .vimrc' \
+        -c 'if maparg(",F", "n") !~# "gg=G" | cquit | endif' \
+        -c 'qa!' 2>&1
+
     XDG_CONFIG_HOME="$EMPTY_XDG" vim -u .vimrc -i NONE -es -N \
         -c 'silent! delcommand LspStatus' \
         -c 'silent! delcommand LspInstallServer' \