sway: sandbox out-of-place

hosts/common/programs/grimshot.nix

@@ -3,7 +3,7 @@
   sane.programs."sway-contrib.grimshot" = {
     packageUnwrapped = pkgs.sway-contrib.grimshot.override {
       # my `sway` is heavily patched to be cross compatible
-      sway-unwrapped = config.sane.programs.sway.package.sway-unwrapped;
+      sway-unwrapped = config.sane.programs.sway.package;
     };
     suggestedPrograms = [
       # runtime dependencies (grimshot is just a trivial shell script)

hosts/common/programs/sane-input-handler/default.nix

@@ -74,7 +74,7 @@ in
       srcRoot = ./.;
       pkgs = {
         inherit (pkgs) coreutils jq killall playerctl procps sane-open util-linux wireplumber;
-        sway = config.sane.programs.sway.package.sway-unwrapped;
+        sway = config.sane.programs.sway.package;
       };
     };
     suggestedPrograms = [

hosts/common/programs/sway/default.nix

@@ -199,7 +199,6 @@ in
     ];
 
     sandbox.method = "bwrap";
-    sandbox.wrapperType = "inplace";  #< `sway` is a wrapper around `sway-unwrapped`, so cheap to sandbox
     sandbox.net = "all";  # TODO: shouldn't be needed! but without this, mouse/kb hotplug doesn't work.
     sandbox.whitelistAudio = true;  # it runs playerctl directly
     sandbox.whitelistDbus = [ "system" "user" ];  # to e.g. launch apps

hosts/common/programs/waybar/default.nix

@@ -78,7 +78,7 @@ in
     packageUnwrapped = pkgs.waybar.override {
       # not *required*, however this does cut down on some cross-compilation issues
       # and also avoids building entirely unused dependencies
-      sway = config.sane.programs.sway.package.sway-unwrapped;
+      sway = config.sane.programs.sway.package;
       hyprlandSupport = false;  #< doesn't cross. hyprland clowns are forking deps even like `wayland-scanner`, too much maintenance.
     };