- Remove unused safeRequestedPrefix, safeShellCommandTokens
(internal/agent/command_prefix.go), and truncateHeadTail
(internal/tools/bash.go): each was a thin wrapper with no remaining
callers.
- Drop an ineffectual assignment in stringListArgWebSearch: every
return path after it already sets the named return explicitly.
- Simplify a negated-and condition in
partition_cache_stable_test.go via De Morgan's law.
- Use strings.Contains instead of strings.Index(...) < 0 in
edit_replacers.go.
- Fix error string style (ST1005): lowercase "unsafe redirect URL"
and drop the trailing period from webFetchPublicOnlyHint.
Skipped the errcheck findings on this pass (unchecked defer
Close()/Write() errors): those are stylistic, not correctness bugs,
and this repo's CI only runs go vet, not golangci-lint.